Video wird geladen...

Video konnte nicht geladen werden

Beim Laden dieses Videos ist ein Problem aufgetreten. Dies könnte an einem vorübergehenden Netzwerkproblem liegen oder das Video ist möglicherweise nicht verfügbar.

👼 BASICS OF ETHICAL HACKING – CORE TRAINING 😈 🔰 Learn key topics like CEH overview, hacking concepts, security threats, attack types, and building a safe hacking lab. 🔗 LINK:

Decabyte

10,866 subscribers

12,232 Aufrufe • vor 6 Monaten •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

Arena intern and UCLA PhD candidate, Hengguang Zhou, introduces Trace-and-Amplify (TA), a framework for collecting training-time reward-hacking trajectories at scale without hacking instructions. Monitors trained and evaluated on prompt-elicited hacking trajectories can achieve high detection accuracy, but often fail to transfer to training-time reward-hacking trajectories that emerge during RL without hacking instructions. Trace-and-Amplify enables scalable collection of these training-time trajectories, producing monitors that generalize much better to real and held-out hacking types. Detection accuracy 59.98% (PE-trained) → 90.16% (TA-trained) compared to 97.1% on prompted hacks → 28.0% on training-time hacks. 0:00 – OpenAI's ExploitGym cyberattack benchmark exploit 1:04 – Goodhart's Law and the CoastRunners boat-racing hack (2016) 2:04 – Gaming the evaluator: the robot-hand grasping example (2017) 3:10 – Reward hacking in code generation: hard-coding, test-rewriting, skipping eval 4:20 – A standard defense: reward-hacking monitors 4:58 – Monitor architectures: zero-shot LLMs, fine-tuned BERT, hidden-state probes 6:11 – Where monitor training data comes from today: prompted hacks 7:03 – The core question: do prompted hacks represent real hacks? 7:35 – Why this matters: RL post-training is the standard recipe for frontier models 8:20 – Why nobody's checked this before (hacking is rare, labeling isn't scalable) 9:23 – Introducing the method: Trace-and-Amplify 9:49 – The Tracer: a contradictory unit test that locates evaluation-gaming 10:50 – Amplify: collecting hacking rollouts at scale during RL training 11:32 – Experiment setup: Qwen2.5-Coder, DeepSeek-Coder, LeetCode/TACO 12:16 – Finding #1: prompt-trained monitors don't transfer to real hacks 14:40 – Can strong zero-shot judges (GPT-4.1, o4-mini) do better? 15:48 – Finding #2: monitors trained on real hacks generalize much better to unseen hacks 17:04 – Ruling out artifacts introduced by the method 17:55 – Why the gap? Real hacking is more hidden than prompted hacking 20:05 – Three takeaways, limitations, and future work

Arena intern and UCLA PhD candidate, Hengguang Zhou, introduces Trace-and-Amplify (TA), a framework for collecting training-time reward-hacking trajectories at scale without hacking instructions. Monitors trained and evaluated on prompt-elicited hacking trajectories can achieve high detection accuracy, but often fail to transfer to training-time reward-hacking trajectories that emerge during RL without hacking instructions. Trace-and-Amplify enables scalable collection of these training-time trajectories, producing monitors that generalize much better to real and held-out hacking types. Detection accuracy 59.98% (PE-trained) → 90.16% (TA-trained) compared to 97.1% on prompted hacks → 28.0% on training-time hacks. 0:00 – OpenAI's ExploitGym cyberattack benchmark exploit 1:04 – Goodhart's Law and the CoastRunners boat-racing hack (2016) 2:04 – Gaming the evaluator: the robot-hand grasping example (2017) 3:10 – Reward hacking in code generation: hard-coding, test-rewriting, skipping eval 4:20 – A standard defense: reward-hacking monitors 4:58 – Monitor architectures: zero-shot LLMs, fine-tuned BERT, hidden-state probes 6:11 – Where monitor training data comes from today: prompted hacks 7:03 – The core question: do prompted hacks represent real hacks? 7:35 – Why this matters: RL post-training is the standard recipe for frontier models 8:20 – Why nobody's checked this before (hacking is rare, labeling isn't scalable) 9:23 – Introducing the method: Trace-and-Amplify 9:49 – The Tracer: a contradictory unit test that locates evaluation-gaming 10:50 – Amplify: collecting hacking rollouts at scale during RL training 11:32 – Experiment setup: Qwen2.5-Coder, DeepSeek-Coder, LeetCode/TACO 12:16 – Finding #1: prompt-trained monitors don't transfer to real hacks 14:40 – Can strong zero-shot judges (GPT-4.1, o4-mini) do better? 15:48 – Finding #2: monitors trained on real hacks generalize much better to unseen hacks 17:04 – Ruling out artifacts introduced by the method 17:55 – Why the gap? Real hacking is more hidden than prompted hacking 20:05 – Three takeaways, limitations, and future work

Arena.ai

33,585 Aufrufe • vor 1 Monat

A Goldmine of FREE Courses! No Need for Subscription, Registration, and Fee, Just Download and Start Learning. Discover the Following and Much More; - Ethical Hacking - Cyber Security - CompTIA A+, N+, S+ and CASP - Cloud Computing - VMWare - IoT - Linux - ITIL - Pentesting - Social Engineering - Red Hat Linux - Microsoft Windows Server - Open Source Hacking Tools - MUCH MORE.... Download Link: If You found it Helpful; 1. Like and Repost. 2. Follow me Atal I am posting about AI, AI Tools, Tech Updates, and Free Courses.

A Goldmine of FREE Courses! No Need for Subscription, Registration, and Fee, Just Download and Start Learning. Discover the Following and Much More; - Ethical Hacking - Cyber Security - CompTIA A+, N+, S+ and CASP - Cloud Computing - VMWare - IoT - Linux - ITIL - Pentesting - Social Engineering - Red Hat Linux - Microsoft Windows Server - Open Source Hacking Tools - MUCH MORE.... Download Link: If You found it Helpful; 1. Like and Repost. 2. Follow me Atal I am posting about AI, AI Tools, Tech Updates, and Free Courses.

Atal

64,989 Aufrufe • vor 2 Jahren

Our Advanced Protection Program just got stronger and more accessible. 💪 People at higher risk of hacking and targeted attacks — like journalists, elected officials and human rights workers — can enroll with passkeys for improved security. Learn more →

Our Advanced Protection Program just got stronger and more accessible. 💪 People at higher risk of hacking and targeted attacks — like journalists, elected officials and human rights workers — can enroll with passkeys for improved security. Learn more →

Google

137,792 Aufrufe • vor 2 Jahren

Can Burp AI hack a website? Régnier dives into the world of AI-driven ethical hacking, exploring how Burp AI performs in Repeater when tasked with finding web vulnerabilities like SQL injection, cross-site scripting (XSS), and insecure configurations. Watch her video now👇

Can Burp AI hack a website? Régnier dives into the world of AI-driven ethical hacking, exploring how Burp AI performs in Repeater when tasked with finding web vulnerabilities like SQL injection, cross-site scripting (XSS), and insecure configurations. Watch her video now👇

Burp Suite

12,570 Aufrufe • vor 10 Monaten

It's actually kind of insane how they managed to fit a hacking puzzle (that's usually hated in most games even in a vacuum) and fit it into moment to moment combat. Not only does it work but it somehow doesn't slow the pace of gameplay as much as you'd think. Combat is still fast as shit and you're constantly jumping or boosting around and there's strategy to the hacking too. Low-key it feels like a more complete version of what 9S's combat should've been in Automata.

It's actually kind of insane how they managed to fit a hacking puzzle (that's usually hated in most games even in a vacuum) and fit it into moment to moment combat. Not only does it work but it somehow doesn't slow the pace of gameplay as much as you'd think. Combat is still fast as shit and you're constantly jumping or boosting around and there's strategy to the hacking too. Low-key it feels like a more complete version of what 9S's combat should've been in Automata.

🎮𝙆𝙖𝙞𝙮𝙖🎮

1,506,952 Aufrufe • vor 5 Monaten

In Singapore, OKX and HackerOne brought an elite team of security researchers together for a live hacking event focused on one thing: building trust through real-time collaboration. This was security in action—fast-paced, transparent, and deeply human. Researchers tested live systems. Teams worked side by side. Vulnerabilities were uncovered and addressed when it mattered most. When trust is built in real time, everyone wins. #H165 #TogetherWeHitHarder

In Singapore, OKX and HackerOne brought an elite team of security researchers together for a live hacking event focused on one thing: building trust through real-time collaboration. This was security in action—fast-paced, transparent, and deeply human. Researchers tested live systems. Teams worked side by side. Vulnerabilities were uncovered and addressed when it mattered most. When trust is built in real time, everyone wins. #H165 #TogetherWeHitHarder

HackerOne

10,397 Aufrufe • vor 7 Monaten

VIDEO | Delhi: On the NEET PG exam, National Board of Examinations in Medical Sciences President Dr Abhijat Sheth says, "The candidates successfully completed the examination. We had enhanced security measures in place this time to ensure fairness and security. I would also like to tell you that so far, there have been no incidents of hacking, cybersecurity issues or any major event such as a question paper leak. The examination was completed in a safe and secure manner." (Full video available on PTI Videos -

VIDEO | Delhi: On the NEET PG exam, National Board of Examinations in Medical Sciences President Dr Abhijat Sheth says, "The candidates successfully completed the examination. We had enhanced security measures in place this time to ensure fairness and security. I would also like to tell you that so far, there have been no incidents of hacking, cybersecurity issues or any major event such as a question paper leak. The examination was completed in a safe and secure manner." (Full video available on PTI Videos -

Press Trust of India

18,107 Aufrufe • vor 27 Tagen

If you're in cybersecurity, you've probably heard of CISSP All-in-One, The IDA Pro Book, or Gray Hat Hacking. Now imagine learning directly from someone who co-authored the 4th and 5th edition of Gray Hat Hacking and has worked in global threat teams like Symantec, Mandiant, and Palo Alto Networks. Hack Defender Academy (Hack Defender) is built for defenders who want to go deep — reverse real malware, follow shellcode injected in another process, dissect infostealers, intercept ransomware encryption key in memory, analyze .NET threats with WinDBG SOS plug-in, automate the deobfuscation with our unique tool NeZa and sharpen your skills by solving live Capture the Flag challenges. 💻1200+ min streaming 🏁CTF-based labs 🛠️Your own IDA Classroom License Led by DanuX (Dan Regalado), a veteran reverse engineer and speaker at REcon, DEFCON, and RSA. This is not a passive course. This is real-world training — for real defenders. Start learning what truly matters at

If you're in cybersecurity, you've probably heard of CISSP All-in-One, The IDA Pro Book, or Gray Hat Hacking. Now imagine learning directly from someone who co-authored the 4th and 5th edition of Gray Hat Hacking and has worked in global threat teams like Symantec, Mandiant, and Palo Alto Networks. Hack Defender Academy (Hack Defender) is built for defenders who want to go deep — reverse real malware, follow shellcode injected in another process, dissect infostealers, intercept ransomware encryption key in memory, analyze .NET threats with WinDBG SOS plug-in, automate the deobfuscation with our unique tool NeZa and sharpen your skills by solving live Capture the Flag challenges. 💻1200+ min streaming 🏁CTF-based labs 🛠️Your own IDA Classroom License Led by DanuX (Dan Regalado), a veteran reverse engineer and speaker at REcon, DEFCON, and RSA. This is not a passive course. This is real-world training — for real defenders. Start learning what truly matters at

The Hacker News

12,043 Aufrufe • vor 1 Jahr

The one and only Nikita Bier is today's guest on Out of Office. He's X's head of product, a Lightspeed venture partner, and the world's leading expert on consumer product growth. He and I recently had a long conversation in Los Angeles where we covered the evolution of the X product, how he mastered growth by hacking and learning to "think like an adversary", and what it's like to work with Elon Musk. Enjoy. Chapters: 00:00 No Silver Bullet to Growth 00:18 The Evolution of X: From PayPal to Financial Network 01:25 A Tour of South Bay 01:56 Growing Up in South Bay: Internet Adventures 03:11 From Hacking to Growth Hacking 06:57 Joining X: The Journey and Challenges 09:14 Revolutionizing X: Growth and Product Development 15:44 The Role of a Product Head at X 29:13 Balancing Free Speech and Authenticity on X 34:58 The Future of X: AI, Links, and User Engagement 37:22 Solving Engagement Issues on X 40:42 Working with Elon Musk 50:13 Building Viral Apps: TBH and Gas 01:02:35 Consulting and Angel Investing 01:10:09 AI's Impact on App Development 01:12:49 Personal Anecdotes and Reflections

The one and only Nikita Bier is today's guest on Out of Office. He's X's head of product, a Lightspeed venture partner, and the world's leading expert on consumer product growth. He and I recently had a long conversation in Los Angeles where we covered the evolution of the X product, how he mastered growth by hacking and learning to "think like an adversary", and what it's like to work with Elon Musk. Enjoy. Chapters: 00:00 No Silver Bullet to Growth 00:18 The Evolution of X: From PayPal to Financial Network 01:25 A Tour of South Bay 01:56 Growing Up in South Bay: Internet Adventures 03:11 From Hacking to Growth Hacking 06:57 Joining X: The Journey and Challenges 09:14 Revolutionizing X: Growth and Product Development 15:44 The Role of a Product Head at X 29:13 Balancing Free Speech and Authenticity on X 34:58 The Future of X: AI, Links, and User Engagement 37:22 Solving Engagement Issues on X 40:42 Working with Elon Musk 50:13 Building Viral Apps: TBH and Gas 01:02:35 Consulting and Angel Investing 01:10:09 AI's Impact on App Development 01:12:49 Personal Anecdotes and Reflections

Michael Mignano

584,493 Aufrufe • vor 7 Monaten

Ford has a security vulnerability that they are internally leaving unfixed so they can sell you the solution Their vehicles are vulnerable to a relay attack, that lets someone with a signal booster trick your vehicle into thinking they have the key fob Ford knows this works and your vehicle can be stolen, but instead of fixing the security issue they are charging customers $7.99 per month, that’s $96 per year to be protected from this hacking The security package even comes with stolen vehicle assist…. So they know that your vehicle can be stolen by this and they’ll assist and get it back… for a price There should be a lawsuit against Ford for this

Ford has a security vulnerability that they are internally leaving unfixed so they can sell you the solution Their vehicles are vulnerable to a relay attack, that lets someone with a signal booster trick your vehicle into thinking they have the key fob Ford knows this works and your vehicle can be stolen, but instead of fixing the security issue they are charging customers $7.99 per month, that’s $96 per year to be protected from this hacking The security package even comes with stolen vehicle assist…. So they know that your vehicle can be stolen by this and they’ll assist and get it back… for a price There should be a lawsuit against Ford for this

Wall Street Apes

483,624 Aufrufe • vor 1 Monat

Then-Senator Kamala Harris discusses how experts demonstrated hacking election machines (used in many states) in front of colleagues at the Capitol. She notes concerns about the 3 major companies controlling much of the market, serious security flaws (including backdoors), lack of accountability, and states without paper trails making it impossible to verify results. Wait so even Kamala knows voting machines are for rigging elections? 🤭 Even Lizard Warren says it. Kinda like vaccines, NONE ARE SAFE. END ALL VOTING MACHINES AND TABULATORS. 💥💥💥

Then-Senator Kamala Harris discusses how experts demonstrated hacking election machines (used in many states) in front of colleagues at the Capitol. She notes concerns about the 3 major companies controlling much of the market, serious security flaws (including backdoors), lack of accountability, and states without paper trails making it impossible to verify results. Wait so even Kamala knows voting machines are for rigging elections? 🤭 Even Lizard Warren says it. Kinda like vaccines, NONE ARE SAFE. END ALL VOTING MACHINES AND TABULATORS. 💥💥💥

🇺🇸🍩 JULIE DONUTS 🇺🇸🍩

18,453 Aufrufe • vor 2 Monaten

ex-Google David Soares reveals that only three entities on earth could hack any device through a single web page: Mossad, the NSA, and Claude Mythos "One of the holy grails of hacking is, can you make a website where if you just look at the website, I get full control over your computer or your phone?" "That's very hard to do. Usually you need to click some link and download something or run something." "And I don't know the exact numbers, because I don't have the security clearance to know the exact numbers, but a decent guess is that in January of this year, there were only two entities that could pull that off: Mossad and the NSA." "In March of this year, there were three: Mossad, the NSA, and Claude Mythos, which is this new AI made by Anthropic. And so it sort of became superhumanly capable at hacking, and it sort of became that way overnight."

ex-Google David Soares reveals that only three entities on earth could hack any device through a single web page: Mossad, the NSA, and Claude Mythos "One of the holy grails of hacking is, can you make a website where if you just look at the website, I get full control over your computer or your phone?" "That's very hard to do. Usually you need to click some link and download something or run something." "And I don't know the exact numbers, because I don't have the security clearance to know the exact numbers, but a decent guess is that in January of this year, there were only two entities that could pull that off: Mossad and the NSA." "In March of this year, there were three: Mossad, the NSA, and Claude Mythos, which is this new AI made by Anthropic. And so it sort of became superhumanly capable at hacking, and it sort of became that way overnight."

Fireside Alpha

80,906 Aufrufe • vor 14 Tagen

Anthropic’s new research shows that when AI models learn to "cheat" during training through reward hacking, they often develop other dangerous misaligned behaviors like deception, sabotage, and faking alignment. These behaviors were not taught or incentivized, but emerged naturally as a side effect. Surprisingly, this misalignment can be stopped by simply reframing the task as ethically acceptable, a technique called inoculation prompting. While the current risks are still detectable, the findings raise urgent red flags for future, more capable models.

Anthropic’s new research shows that when AI models learn to "cheat" during training through reward hacking, they often develop other dangerous misaligned behaviors like deception, sabotage, and faking alignment. These behaviors were not taught or incentivized, but emerged naturally as a side effect. Surprisingly, this misalignment can be stopped by simply reframing the task as ethically acceptable, a technique called inoculation prompting. While the current risks are still detectable, the findings raise urgent red flags for future, more capable models.

Wes Roth

110,942 Aufrufe • vor 10 Monaten

THIS IS F**KING DANGEROUS FOUND 3 ETHICAL HACKING TOOLS THAT FEELS ILLEGAL TO USE And it all open source and free to use If you’re learning pentesting, these belong in your toolkit: → Arsenal-ng — a huge terminal library of pentesting commands for recon, scanning, exploitation and more. → Pentest-copilot — an AI powered assistant that helps automate exploitation workflows and chain attack steps. → Ligolo-ng — lets you tunnel and pivot through a compromised machine to reach systems inside a private network. Different jobs. One goal: make pentesting faster and more efficient. BOOKMARK this before someone take it down REPO’S BELOW

THIS IS F**KING DANGEROUS FOUND 3 ETHICAL HACKING TOOLS THAT FEELS ILLEGAL TO USE And it all open source and free to use If you’re learning pentesting, these belong in your toolkit: → Arsenal-ng — a huge terminal library of pentesting commands for recon, scanning, exploitation and more. → Pentest-copilot — an AI powered assistant that helps automate exploitation workflows and chain attack steps. → Ligolo-ng — lets you tunnel and pivot through a compromised machine to reach systems inside a private network. Different jobs. One goal: make pentesting faster and more efficient. BOOKMARK this before someone take it down REPO’S BELOW

MAX

37,583 Aufrufe • vor 14 Tagen

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk size If the backend times out, this indicates a potential CLTE vulnerability. Confirm the vulnerability with differential responses: 7. Create and send the attack request: - Replace previous chunk with a terminating chunk. - Add a smuggled request after the chunked body. - Append X-ignore: X (without a newline) and send. 8. Send a normal request to repeater, downgrade to HTTP/1.1 and send immediately after the attack request. If the response to the normal request is 404 instead of 200, the backend was poisoned! 🤮 Well done! To learn more about HTTP Request Smuggling and take on this lab yourself, head over the the Web Security Academy now #requestsmuggling #pentesting #bugbounty #hacking #cybersecurity

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk size If the backend times out, this indicates a potential CLTE vulnerability. Confirm the vulnerability with differential responses: 7. Create and send the attack request: - Replace previous chunk with a terminating chunk. - Add a smuggled request after the chunked body. - Append X-ignore: X (without a newline) and send. 8. Send a normal request to repeater, downgrade to HTTP/1.1 and send immediately after the attack request. If the response to the normal request is 404 instead of 200, the backend was poisoned! 🤮 Well done! To learn more about HTTP Request Smuggling and take on this lab yourself, head over the the Web Security Academy now #requestsmuggling #pentesting #bugbounty #hacking #cybersecurity

Web Security Academy

26,360 Aufrufe • vor 1 Jahr

Cyber defense is entering the superintelligence era. ⚡ Introducing the CrowdStrike Cyber Superintelligence Lab, the first frontier AI research organization built for cyberdefense and AI safety. The Lab delivers CrowdStrike SafeMind, a family of purpose-built security models and harnesses. SafeMind runs as one system designed to deliver AI safety: an offensive model that finds the attack path, a defensive model that closes it, and the harnesses that operate both in the same loop. Built using NVIDIA Nemotron open models and using CoreWeave’s AI Cloud for training and inference, SafeMind goes beyond AI that simply identifies threats, it defeats them. Learn more:

Cyber defense is entering the superintelligence era. ⚡ Introducing the CrowdStrike Cyber Superintelligence Lab, the first frontier AI research organization built for cyberdefense and AI safety. The Lab delivers CrowdStrike SafeMind, a family of purpose-built security models and harnesses. SafeMind runs as one system designed to deliver AI safety: an offensive model that finds the attack path, a defensive model that closes it, and the harnesses that operate both in the same loop. Built using NVIDIA Nemotron open models and using CoreWeave’s AI Cloud for training and inference, SafeMind goes beyond AI that simply identifies threats, it defeats them. Learn more:

CrowdStrike

58,094 Aufrufe • vor 25 Tagen

Today, the FBI and U.S. Department of Justice announced the disruption of a global botnet used by Chinese state-sponsored group known as QTFY to target U.S. critical infrastructure. Our investigation attributes QTFY to the Nanjing Xinjiuwei Network Technology Company, which sells stolen data and hacking services to Chinese military and intelligence agencies. Their services include a scanning platform that scours the internet for vulnerable smart devices—like home routers and security cameras—infects thousands of them, and feeds them into a botnet, or a network of machines secretly controlled by the adversary. These platforms hide the origin of PRC-linked cyberattacks. Thanks to the work of FBISanDiego, FBI Cyber Division, and partners at DOJ—we shut those platforms down 🔗

Today, the FBI and U.S. Department of Justice announced the disruption of a global botnet used by Chinese state-sponsored group known as QTFY to target U.S. critical infrastructure. Our investigation attributes QTFY to the Nanjing Xinjiuwei Network Technology Company, which sells stolen data and hacking services to Chinese military and intelligence agencies. Their services include a scanning platform that scours the internet for vulnerable smart devices—like home routers and security cameras—infects thousands of them, and feeds them into a botnet, or a network of machines secretly controlled by the adversary. These platforms hide the origin of PRC-linked cyberattacks. Thanks to the work of FBISanDiego, FBI Cyber Division, and partners at DOJ—we shut those platforms down 🔗

FBI Cyber Division

143,694 Aufrufe • vor 1 Monat