I have taken up a hobby interest in internet security and privacy, which has led me to have some fun with CTF challenges and learning those things. When doing some research and inquiring as to how compromises happen with some of these big stories with random ware and service type malware’s etc it seems to be initial access for cyber crime is now a phishing game. There are so many bots constantly scanning the internet, bad actors and security professionals alike. Is web vulnerability exploitation a relic of the past? If there is out of date stuff or vulnerable stuff a scanner is going to hit that quickly, so some random solo guy having fun or whatever isn’t going to be finding a lot of stuff like that first.
My question got lost a bit in the thoughts: are initial access brokers now just playing an obfuscation game with their servers and phishing campaigns, and searching for web vulnerabilities is not really a reasonable thing to find in the current time?
[link] [comments]
from hacking: security in practice https://ift.tt/TXBFg5A
Comments
Post a Comment