Security Archives - Page 2 of 3 - LowEndBox

BRING YOUR OWN JOKE: Uber Has Many Openings in IT Security

/

Sep 16, 2022

/

As of this morning, Uber has the following positions open: Senior Security Engineer - Application Security Security Engineer - Penetration Testing Security Engineer II Security Incident Commander II Technology Senior Security Strategist Tech Lead: Penetration Testing Senior Mobile Security Engineer Senior Threat Detection Engineer ...and quite a few more. They need to fill these openings because they've been hacked by an...

BRING YOUR OWN JOKE: Uber Has Many Openings in IT Security

This Week’s Initial Ransomware Offering (IRO) Calendar

/

Aug 29, 2022

/

Check out this sentence: "For the author, this business model enables them to scale their earnings from their software with less risk." I slightly modified the original, but we're not talking about a...

This Week’s Initial Ransomware Offering (IRO) Calendar

LastPass Releases Its Security Incident for 2022

/

Aug 26, 2022

/

Sometimes you see stuff in the media and wonder if it's really news. Some celebrity broke up with some other celebrity. Some tech company released version X.Y which is .0001% better. LastPass was h...

LastPass Releases Its Security Incident for 2022

More Vulnerabilities, Poorer Patches: TrendMicro Is Bummed

/

Aug 18, 2022

/

Presenting at the Black Hat USA conference this week, Trend Micro had an interesting comment: Over the last few years, we’ve noticed a disturbing trend – a decrease in patch quality and a reduction in...

Those Spam Texts Are Coming From Twilio: They’ve Been Hacked

/

Aug 08, 2022

/

Twilio has suffered a data breach and the attackers "used the stolen credentials to gain access to some of our internal systems". Twilio is a messaging platform with a nice API. I used it last year t...

Those Spam Texts Are Coming From Twilio: They’ve Been Hacked

Why It May Be Illegal to Pay Ransomeware and Why a Ban on Payments Won’t Work

/

Jul 19, 2022

/

If your organization's data is being held for ransom by hackers, should you pay up? The universal consensus is that you shouldn't because it encourages criminals. But an earlier question needs to be...

Why It May Be Illegal to Pay Ransomeware and Why a Ban on Payments Won’t Work

Your WordPress Has Been Scanned. Hope You Weren’t Hacked.

/

Jul 18, 2022

/

Wordfence reports that hackers are widely attempting to exploit a vulnerability that they reported over three months ago. According to The Register: Wordfence disclosed the flaw almost three months a...

Your WordPress Has Been Scanned. Hope You Weren’t Hacked.

ALMOST GONE: Save 90% on Shodan.io! Only $5 Lifetime!

/

Jul 17, 2022

/

LowEndTalk member @Chuck alerted the community to a terrific deal: you can get a full access lifetime membership for Shodan.io for only $5 - that's 90% off the list price! However the deal expires at...

ALMOST GONE: Save 90% on Shodan.io! Only $5 Lifetime!

Retbleed: Your x86 Speculative Attack Du Jour

/

Jul 12, 2022

/

"Today Intel released two security advisories addressing 2 medium severity vulnerabilities reported by academic researchers from ETH Zurich who have labeled their side-channel attack as “Retbleed” due...

Retbleed: Your x86 Speculative Attack Du Jour

Low End Detectives: IP Address of Low End Talk Phishing Attacker Revealed In Just 5 Minutes!

/

Apr 15, 2022

/

The Phishing Attack On April 9, 2022, some not-so-nice ungentleman went phishing. As announced on Low End Talk, phishing emails were received by several Low End Talk members. The phishing emails false...

Low End Detectives: IP Address of Low End Talk Phishing Attacker Revealed In Just 5 Minutes!

You Need to Update Chrome ASAP

/

Mar 26, 2022

/

Word is out of a new vulnerability in Chrome, and it sounds serious. If your browser has an update, you should definitely restart to apply to reach version 99.0.4844.84. New updates are out for Wind...

You Need to Update Chrome ASAP

Okta Hacked, Stock in Flames

/

Mar 23, 2022

/

Okta (NASDAQ:OKTA), which provides digital identity authentication services to big companies, confirmed Tuesday that it had suffered a security breach. Their stock plunged nearly 9% as reports piled...

Okta Hacked, Stock in Flames

FREE Root Shells on Linux Servers Thanks to polkitd Vulnerability

/

Jan 26, 2022

/

A new vulnerability that affects many Linux systems has been revealed: Pwnkit. This attack uses a vulnerability in polkitd to allow any user to escalate his privileges to root. There are patches for...

FREE Root Shells on Linux Servers Thanks to polkitd Vulnerability

HostSolutions.ro Hack Update

/

Dec 27, 2021

/

As a quick followup to our story from a couple days ago about the HostSolutions.ro hack, owner Marius has now commented on LowEndTalk, confirming the breach and adding some details. The entire thread...

HostSolutions.ro Hack Update

HostSolutions.ro Hacked

/

Dec 25, 2021

/

News broke on Christmas Eve that HostSolutions.ro has been hacked. Community member @MikaelStrang posted the email below that he received from a hacker claiming to have the HostSolutions WHMCS databa...

HostSolutions.ro Hacked

Gartner Makes Bold Prediction: War in the G20 by 2024

/

Dec 18, 2021

/

Gartner, one of the world's major IT consulting firms, recently shared their "Top Strategic Predictions for 2022 and Beyond" at a conference. Most of the content concerned economic and technological...

Gartner Makes Bold Prediction: War in the G20 by 2024

log4Shell Vulnerability: “Worst Hack in History”

/

Dec 14, 2021

/

Vulnerabilities don't get much worse than cases where typing the right characters into a chat box gives you remote access to the world's Minecraft servers. Whoops. It's been termed the worst hack in...

log4Shell Vulnerability: “Worst Hack in History”

RHEL 9 Goes Beta

/

Nov 06, 2021

/

Now that (hopefully?) the CentOS Stream debacle and the subsequent rise of Alma and Rocky Linux is behind us, there's news from RedHat that RHEL 9 has gone beta. Is this the love child that will fina...

Locking Down Access to Your VPS

/

Oct 12, 2021

/

There are a number of ways you can restrict access to your VPS. Passwords (specifically, good passwords) is the most basic method. Restricting access to ssh keys only is better. You can use Google Aut...

Locking Down Access to Your VPS

How to Audit Every Command Run on Your Linux System

/

Oct 07, 2021

/

Periodically I've had auditors come to me and say "can you tell me what this user on this system did between such-and-such dates/times" and my answer is usually no. By default, Linux systems don't log...

How to Audit Every Command Run on Your Linux System

The Syniverse Hack: Why Using SMS for 2FA is a Bad Idea

/

Oct 05, 2021

/

Security gurus have suggested for years that relying on SMS for two-factor authentication is a bad idea. Reasons include Your phone may be stolen Many people allow SMS messages to be displayed on lo...

The Syniverse Hack: Why Using SMS for 2FA is a Bad Idea

Microsoft Says Passwords are Passé

/

Sep 18, 2021

/

Are passwords a dying breed? In a blog post published September 15, Microsoft Vice President of Security, Compliance, and Identity Vasu Jakkal entitled "The passwordless future is here for your Micros...

Microsoft Says Passwords are Passé

Easy Operating System Detection with nmap

/

Sep 18, 2021

/

Recently I was doing some discovery at work of some systems we inherited. I didn't yet have access but wanted to determine what type of OS was involved so I could coordinate with the proper teams. Yo...

Easy Operating System Detection with nmap

T-Mobile Leaks Almost 50 Million People’s SSNs and Driver’s Licenses

/

Aug 19, 2021

/

T-Mobile announced on Wednesday that a "a bad actor had compromised T-Mobile systems": "Some of the data accessed did include customers’ first and last names, date of birth, SSN, and driver’s license/...

T-Mobile Leaks Almost 50 Million People’s SSNs and Driver’s Licenses

Report Reveals cPanel/WHM Suffers “Multiple Vulnerabilities”

/

Aug 17, 2021

/

Security research firm Fortbridge has released a report claiming to have discovered "multiple vulnerabilities in cPanel/WHM". The report states: "Our team has found multiple vulnerabilities in cPanel/...

Report Reveals cPanel/WHM Suffers “Multiple Vulnerabilities”

Get Notified via Email Whenever Someone Logs In To Your VPS

/

Aug 08, 2021

/

In this tutorial we'll show you how to configure your VPS so that every time someone logs in, you receive an email alerting you to this fact. This is kind of a "lowend intrusion detection system" thou...

Get Notified via Email Whenever Someone Logs In To Your VPS

Comment Free For All: Hacking in the Movies

/

Jul 28, 2021

/

I once watched an episode of Law & Order with a friend who is an attorney. From the moment the action switched from the police to the prosecutors, he was tied up in knots, shouting at the screen a...

Comment Free For All: Hacking in the Movies

How to Stiff-Arm Brutes and Protect Your Server with Fail2Ban

/

Jul 20, 2021

/

Bruce force attacks are attempts to guess common passwords by repeatedly trying to login to your server. SSH is the most common target but FTP, IMAP, POP3, and other password-based systems can be tar...

How to Stiff-Arm Brutes and Protect Your Server with Fail2Ban

« Newer Posts — Older Posts »

Latest LowEndTalk Hosting Offers

[WLX] Hong Kong Dedicated – Ryzen 9 9955HX (9950X-class) from $149/mo | Price Locked on Renewal

Sep 22, 2026

KVM VPS – From €6.99/year (~$8.03) – 512MB–16GB RAM – NVMe – 1Gbps – Amsterdam

Sep 21, 2026

[UK] | VPS | DEDICATED | DDOS PROTECTED | UNMETERED BANDWIDTH | XHOSTS

Sep 21, 2026

ServersCamp: Database-Tuned Cloud | €25 Free Test Credit

Sep 21, 2026