Threat actors are exploiting a post-authentication remote command injection vulnerability in Four-Faith routers tracked as CVE-2024-12856 to open reverse shells back to the attackers.

https://www.bleepingcomputer.com/news/security/hackers-exploit-four-faith-router-flaw-to-open-reverse-shells/

The American #FCC is accepting public comment on a proposal that would license the 902-928 MHz band to a private company (NextNav Inc) for use in terrestrial location tracking as a commercial alternative to free #GPS, GLONASS, & Galileo satellite positioning systems. The company already operates in the 920-928 MHz band.

This will significantly interfere with #LoRaWAN IOT devices and could have dire consequences for #decentralized communication networks such as #Meshtastic.

NextNav intends to deprive the public of these unlicensed frequencies and build a nationwide monopoly on PNT infrastructure in the 902-928 MHz band. (https://www.fcc.gov/ecfs/document/10416238018537/1)

This is not only harmful to the #opensource and #openhardware community, it is a gross misappropriation of the public's precious radio frequencies to further the goals of a monopolistic for-profit corporation.

(https://meshtastic.org/blog/meshtastic-opposition-to-nextnav-proposed-changes/ )

Initial comments were due by September 5th. "reply comments" (comments that support the concerns expressed in other comments) are due by September 20th. You can make a comment here: (https://www.fcc.gov/ecfs/filings/express?proceeding%5Bname%5D=24-240). You can view all public comments here: (https://tinyurl.com/FCC-24-240)

NEW: Israel Ministry of Defense (38 GB)

Nearly 200,000 files from Israel's Ministry of Defense, including tens of thousands of documents, emails and images. The data includes communications, financial/purchase information, and technical information

https://ddosecrets.com/article/israel-ministry-of-defense

Download: https://data.ddosecrets.com/Israel%20Ministry%20of%20Defense/

magnet:?xt=urn:btih:29AC8996A754E7A12962C80CC7D0C5AC9158C215

Only 1 week left to submit your talk proposal for Security Onion Conference 2024!

We want to hear from you!

https://blog.securityonion.net/2024/04/security-onion-conference-2024-save.html

Pentagon ran secret anti-vax campaign on social media

https://www.reuters.com/investigates/special-report/usa-covid-propaganda/

11am Eastern today a NEW #Glassof0J Ranking Ways to Get Into InfoSec with DNSPrincess.

Everyone has advice on how to get into InfoSec. the way I got in may not be the way you will get in especially since that was 10 years ago and this field changes often.

DNSPrincess and 0DDJ0BB list a bunch of things people on the internet suggest newcomers do to get an InfoSec job.

#infosecjobs #careeradvice #hacking #hackthebox #tryhackme #certifications #conferences #mentoring

https://youtu.be/E1ljjJYr9-E

If you're at #RSAC, come to my talk tomorrow morning at 0830 to talk about how you can implement a full security stack at smaller organizations (or just those without budget).

https://www.rsaconference.com/usa/agenda/session/Cybersecurity%20for%20Have%20Nots