Access to US No-Fly List gained by Maia, Swiss Hacker

A hacker going by the handle maia arson crimew has managed to take the world by surprise. The 23-year-old hacker has managed to successfully breach US security and obtained the complete No-Fly List of the US government. A total of 1.5 million known or …

Companies impacted by Mailchimp data breach warn their customers

The recent Mailchimp data breach has impacted multiple organizations, some of them are already notifying their customers. The popular email marketing and newsletter platform Mailchimp recently disclosed a news data breach, the incident exposed the data of 133 customers. Threat actors targeted the company’s employees and contractors to gain access to an internal support and […]

The post Companies impacted by Mailchimp data breach warn their customers appeared first on Security Affairs.

No-Fly List Exposed

I can’t remember the last time I thought about the US no-fly list: the list of people so dangerous they should never be allowed to fly on an airplane, yet so innocent that we can’t arrest them. Back when I thought about it a lot, I realized that the TSA’s practice of giving it to every airline meant that it was not well protected, and it certainly ended up in the hands of every major government that wanted it.

The list is back in the news today, having been left exposed on an insecure airline computer. (The airline is CommuteAir, a company so obscure that I’ve never heard of it before.)…

Massive Ad fraud scheme VASTFLUX targeted over 11 million devices

Researchers dismantled a sophisticated ad fraud scheme, dubbed VASTFLUX, that targeted more than 11 million devices. HUMAN’s Satori Threat Intelligence and Research Team dismantled a sophisticated ad fraud operation dubbed VASTFLUX. The name VASTFLUX comes from the evasion technique “fast flux” and VAST, the Digital Video Ad Serving Template that was abused by threat actors in this fraudulent scheme. The researchers […]

The post Massive Ad fraud scheme VASTFLUX targeted over 11 million devices appeared first on Security Affairs.

Pool on the roof – January 23, 2023

Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF or bug bounty?

This is a weekly recurring post to make friends with other hackers, ask questions, and get any type of help you may need.

Make sure to read our wiki as it’s full of resources for you.

Keep all beginner questions in this weekly stickied post.

submitted by /u/AutoModerator
[link] [comments]

Raspberry Pi pico W deauther?

Sorry if this a stupid question? Would it be possible to make a deauther from a Raspberry Pi pico w, like the ones with the esp8226, or would this not be possible? submitted by /u/aero_oliver [link] [comments]

Bad usb documentation?

Is there any good book/blog/source of information out there that you would recommend to learn about bad usb attacks and pentesting? I new to this world and I’m kind of struggling to get good sources of information. If you guys have any sort of recommen…