Tabla de contenidos para December 2023 en Hackercool Magazine

Then you will know the truth and the truth will set you free. John 8:32 Hi all. Another year has ended and another new year has dawned upon us. This is not only the last Issue of the year but also the last Issue in the old format. Yeah. We are planning to reboot Hackercool Magazine and you might see the changes in the first Issue of 2024 itself, if everything goes according to GOD’s plan. To keep our focus on the present Issue, in this last Issue of the year 2023, we start by bringing you the top vulnerabilities seen in year 2023. 2023 has seen a lot of major vulnerabilities which were exploited by APTs and other threat actors around the world very quickly. We wanted to brush…

2023 has ended and we have entered into a New Year. This year we at Hackercool Magazine wanted to bring you cybersecurity predictions for the year 2024. These predictions are a result of observing the latest trends in cybersecurity and events that occurred last year. So, without delay lets read about what are our predictions for 2024 in cybersecurity. 1) Increase in exploitation of zero-day vulnerabilities If you have studied the above article on Top vulnerabilities of year 2023, you should have observed that Threat Actors and APT groups found and already started exploiting some of the zero-day vulnerabilities even before they were detected, disclosed and patched by the companies. According to Checkpoint’s mid year cybersecurity report, 28% of attacks exploited latest vulnerabilities in the first half of year 2023…

Year 2023 has seen its fair share of zero-day vulnerabilities which were exploited by Black Hat Hackers all around the world. In this article, we bring you the top 10 vulnerabilities of 2023. So, let’s begin with. MoveIT Transfer Injection vulnerability (CVE-2023-34762) MoveIT Transfer is a popular secure files transfer solution developed by a company named Progress. It is mostly used by organizations to transfer files securely. At the time of disclosing of this vulnerability, it is estimated that there were over 2500 servers with vulnerable version of Move IT Transfer were exposed. What is the vulnerability? The vulnerability is a SQL injection vulnerability that could be exploited without need of any authentication. Once attackers exploit this SQL injection vulnerability to gain administrative credentials, they can upload a shell or…

Jordan Richard Schoenherr Assistant Professor, Psychology, Concordia University Artificial intelligence (AI) is widely regarded as a disruptive technology because it has the potential to fundamentally alter social relationships. AI has affected how people understand the world, the jobs available in the workforce and judgments of who merits employment or threatens society. Nowhere is this more apparent than in warfare, which is defined by social and technological processes. Technologies such as autonomous weapon systems (AWS) and cyberweapons have the potential to change conflicts and combat forever. "Cyberattacks are another emerging tool in the arsenal. As non-lethal weapons, their threat and role in combat continues to be a matter of debate" Justifying Warfare Acts of violence committed in war are often framed in virtuous terms, with justice and other morality motivations used…

This is a Metasploit hacking scenario and a reboot to our Metasploit this month feature. Metasploit scenario is an updated version of Metasploit this month. In this, we will be simulating real world hacking scenarios but with Metasploit. Keeping meterpreter payload in mind, antivirus will be disabled on target machine. Cutting short the introduction, let’s move on to our first scenario. Initial Access WinRAR RCE Module TARGET: WinRAR <= 6.22 TYPE: Local MODULE: Exploit ANTI-MALWARE: OFF ID: CVE-2023-38831 WinRAR is an archiving and compression software used by over 500 million users worldwide. Recently as vulnerability has been detected in WinRAR that impacts all versions prior to WinRAR 6.23. Let’s see how this module works. “The Six Principles of Cyber Security: Cybersecurity starts with prevention. Follow the Six Principles of Cyber…