🌙 Security Night #2

[sbddesign]

Time: 2024-08-05 6:00PM Eastern
UTCTime: 2024-08-05 22:00 UTC
Duration: 2h
Location: ATL BitLab, 684 John Wesley Dobbs Ave NE, Unit A1, Atlanta, GA 30312

Security Night is a time to chill with your fellow cybersecurity, infosec, and hacker buds! This is a place to socialize and learn about security and hacking. All skill levels welcome! Contrary to popular belief, you don't need to be a computer whiz to be a hacker. Hacking is simply using a tool or system for a purpose that it was not intended for.

Join us on the first Monday of every month for learning, engaging discussion, and following your curiosity with friends.

This event topic is TBD. Please deposit interesting discussion topic or presentation ideas in the comments below!

Topics

• Personal security
• Software hacking
• Hardware hacking
• Phreaking
• Social Engineering
• And more!

RSVP Here

https://www.meetup.com/atlbitlab/

[sbddesign]

From @alexlwn123:

• https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server

From @bnonni:

• https://www.openssh.com/security.html
• https://www.openssh.com/txt/release-9.8

[sbddesign]

AU10TIX identity verification firm hacked

• EFF Article
• 404 Article
• Gizmodo Article

Related: AU10TIX on verifiable credentials (VCs)

[alexlwn123]

Sophisticated Wasabi Coordinator Attacks (also applicable for bitcoin socratic)

[alexlwn123]

yet another RCE exploit found with Open SSH servers: https://thehackernews.com/2024/07/new-openssh-vulnerability-discovered.html

[alexlwn123]

Massive AT&T breach - https://apnews.com/article/att-data-breach-text-cell-b5cdc8d6c9e1b980cb2163f34b297dad

[sbddesign]

CrowdStrike FalconSensor issue

• https://www.msn.com/en-us/money/companies/microsoft-s-global-sprawl-comes-under-fire-after-historic-outage/ar-BB1qk1W7
• https://www.cnbc.com/2024/07/20/crowdstrike-update-that-caused-global-outage-likely-skipped-checks-experts-say.html

[sbddesign]

Proton Scribe

[jordan-bravo]

How to pwn a billion dollar firm using inspect element

[alexlwn123]

Dark Skippy - the worst key exfiltration attack was just announced