I found this article interesting as I like to write apps in nodejs,
The author describes how he can read from Client-side information what payloads are being sent to your nodejs server, which implies that he can setup his own payloads that meet the JSON standard that the Nodejs server is use to. With that than the user could abuse uses of the server's functions, with his example he was able to buy something over higher value and inject the information for a lower value item into the payload sending to the server. Under this implication each POST http request needs to have an auth token attached that is saved in cookies and extracted by the client app on bootup.
https://www.codementor.io/dealwap/few-ways-i-could-hijack-your-node-js-applications-h07fvj731
 

Russian Hackers Attack Moses Lake School District
Earlier this year the Moses Lake School District was hacked by some Russian hackers. Encrypting their servers and backups. They traced the IP address of the virus and figured it came from Moscow, Russia. School says their anti-malware software failed when an employee clicked on an email attachment and the virus spread from there.

http://www.ifiberone.com/columbia_basin/moses-lake-school-district-hit-with-ransomware-attack-in-july/article_3dac2db2-c5cb-11e9-aa8f-0f0e9c8131ca.html

Last edited by AlMendoza22 (10/04/2019 10:35 am)

My article has to do with the fact that big internet providers for example (at&t, Verizon, and Comcast etc.) have a lot of freedom to control the internet, such as Comcast who is also a tv provider could potentially slowdown Netflix website and keep their speeds up. This stirs up things because it could be used as a way of taking advantage of other smaller websites that can't afford to pay to keep high speeds or aren't as recognizable so they won't receive any support. The court though appealed towards keeping the internet a "free and open internet."
https://www.cnn.com/2019/10/01/tech/net-neutrality-court-ruling/index.html

-Jorge Calderilla

Last edited by SAMUS (10/03/2019 12:11 pm)

Iranians tried to hack U.S. presidential candidate in effort that targeted hundreds, Microsoft says...
     
     The article I am posting about is quite interesting, and is also fresh in the "hacking news".  Apparently attempts were made to identify, attack, and breach email addresses that belonged to an U.S. presidential candidate, several government officials, and journalists.  The attackers are thought of to have current ties with the Iranian government.  This situation was brought to light by Microsoft, whom observed the intrusion.  More than 2700 attempts were made to identify email addresses over a 1 month period between August and September.  A total of 4 accounts were actually compromised, Microsoft then notified the customers.  Microsoft claims that of the 4 email accounts that were compromised, none of them ended up actually belonging to the U.S. Presidential Candidate or any government officials.


Jesse Kilthau

Reference:
https://www.washingtonpost.com/technology/2019/10/04/iran-tried-hack-us-presidential-candidates-journalists-effort-that-targeted-hundreds-microsoft-finds/