LowEndBox

Nov 14, 2022

Meta has laid off a team which is an "elite tactical squad" in the artificial intelligence and machine learning fields. Has the bidding war already begun for these dark wizards, who've worked for one of the most rapacious tech firms and are presumably ready to do more?

Getting Scans From 18.171.7.246 and 35.177.10.231? It's the UK Government

Nov 09, 2022

If you're seeing weird things in your logs, it's because the UK National Cyber Security Center has decided to scan all UK systems as part of their "Scanning the Internet for Fun and Profit" (their term). Click to learn how to opt-out.

Getting Scans From 18.171.7.246 and 35.177.10.231? It's the UK Government

Internap Loses Customer Data, Shrugs, Doesn't Apologize

Oct 04, 2022

Comments (1)

"We lost your data. It's your problem. OKTHXBYE - Internap."

Internap Loses Customer Data, Shrugs, Doesn't Apologize

BRING YOUR OWN JOKE: Uber Has Many Openings in IT Security

Sep 16, 2022

As of this morning, Uber has the following positions open: Senior Security Engineer - Application Security Security Engineer - Penetration Testing Security Engineer II Security Incident Commander II T...

BRING YOUR OWN JOKE: Uber Has Many Openings in IT Security

This Week's Initial Ransomware Offering (IRO) Calendar

Aug 29, 2022

Check out this sentence: "For the author, this business model enables them to scale their earnings from their software with less risk." I slightly modified the original, but we're not talking about a...

This Week's Initial Ransomware Offering (IRO) Calendar

LastPass Releases Its Security Incident for 2022

Aug 26, 2022

Comments (4)

Sometimes you see stuff in the media and wonder if it's really news. Some celebrity broke up with some other celebrity. Some tech company released version X.Y which is .0001% better. LastPass was h...

LastPass Releases Its Security Incident for 2022

Those Spam Texts Are Coming From Twilio: They've Been Hacked

Aug 08, 2022

Twilio has suffered a data breach and the attackers "used the stolen credentials to gain access to some of our internal systems". Twilio is a messaging platform with a nice API. I used it last year t...

Why It May Be Illegal to Pay Ransomeware and Why a Ban on Payments Won't Work

Jul 19, 2022

If your organization's data is being held for ransom by hackers, should you pay up? The universal consensus is that you shouldn't because it encourages criminals. But an earlier question needs to be...

Why It May Be Illegal to Pay Ransomeware and Why a Ban on Payments Won't Work

Lotus 1-2-3 Resurrected! -- Runs Natively On Linux After Hack By Tavis Ormandy!

Not_Oles

May 26, 2022

Lotus 1-2-3 And The 1990s Tavis Ormandy is a world class white hat hacker who works at Google Project Zero. Hacker News ("HN") is a news aggregator and comment board run by the well known start...

FREE Root Shells on Linux Servers Thanks to polkitd Vulnerability

Jan 26, 2022

A new vulnerability that affects many Linux systems has been revealed: Pwnkit. This attack uses a vulnerability in polkitd to allow any user to escalate his privileges to root. There are patches for...

FREE Root Shells on Linux Servers Thanks to polkitd Vulnerability

HostSolutions.ro Hack Update

Dec 27, 2021

As a quick followup to our story from a couple days ago about the HostSolutions.ro hack, owner Marius has now commented on LowEndTalk, confirming the breach and adding some details. The entire thread...

HostSolutions.ro Hacked

Dec 25, 2021

Comments (3)

News broke on Christmas Eve that HostSolutions.ro has been hacked. Community member @MikaelStrang posted the email below that he received from a hacker claiming to have the HostSolutions WHMCS databa...

Gartner Makes Bold Prediction: War in the G20 by 2024

Dec 18, 2021

Comments (1)

Gartner, one of the world's major IT consulting firms, recently shared their "Top Strategic Predictions for 2022 and Beyond" at a conference. Most of the content concerned economic and technological...

Gartner Makes Bold Prediction: War in the G20 by 2024

The Syniverse Hack: Why Using SMS for 2FA is a Bad Idea

Oct 05, 2021

Security gurus have suggested for years that relying on SMS for two-factor authentication is a bad idea. Reasons include Your phone may be stolen Many people allow SMS messages to be displayed on lo...

The Syniverse Hack: Why Using SMS for 2FA is a Bad Idea

LowEnd Provider Clouvider Suffers Website Hack

Aug 26, 2021

LowEnd provider Clouvider suffered a website hack today. A group styling itself "Katyusha SecurityExploitCrew" defaced a website they manage, as reported on LowEndTalk. The site was a redirect to thei...

LowEnd Provider Clouvider Suffers Website Hack

Australian Police Will Soon Have Sweeping New Surveillance Powers

Aug 26, 2021

Comments (4)

Australian law enforcement will soon be able to takeover accounts and impersonate their owners, "disrupt data" by modifying it. Three new warrant powers are granted Australian Federal Police (AFP) an...

Australian Police Will Soon Have Sweeping New Surveillance Powers

CoinBase Customer Service Continues to be Appalling: Thousands Hacked

Aug 25, 2021

A while back, I used CoinBase (NASDAQ: COIN) for some cryptocurrency transactions and found their system buggy and the customer service nonexistent. After failing repeatedly to get an account verified...

CoinBase Customer Service Continues to be Appalling: Thousands Hacked

Comment Free For All: Hacking in the Movies

Jul 28, 2021

Comments (6)

I once watched an episode of Law & Order with a friend who is an attorney. From the moment the action switched from the police to the prosecutors, he was tied up in knots, shouting at the screen a...

Comment Free For All: Hacking in the Movies

Hosterlabs Confirms Data Breach

Jun 23, 2021

Hosterlabs announced today that on June 21st they "experienced an intrusion" in which unidentified attackers "placed malware on our servers, and by doing so gained access to our customers' data". The...

No Support Linux Hosting Hacked, Shuts Down

Feb 10, 2021