Div0-N0H4TS Community 💻

😄😄😄😄😄😄😄 🚨Cyber League is OPEN for registration! 🚨 Registration opens 1 August — and this season we're going all the way. Three stages, one champion. 🏆 ⏰MAJOR · 19–20 Sept · 24 hours straight, 10am to 10am (Jeopardy) ⚡️PLAYOFFS · 10 Oct · Top Teams only from Major face off in a Scrutineering round to earn a place in the Finals. 🏆GRAND FINALS · 17 Oct · Head-to-head, LIVE onsite at STANDCON 6 Start as an Apprentice. Get Elite. Become a Master. 🧠⚡️ Think you've got what it takes? Grab your team and lock it in. Register at https://ctf.cyberleague.co/register #CyberLeague #CyberLeagueSG #CTF #CaptureTheFlag #STANDCON #STANDCON6 #N0H4TS #CyberSecurity #InfoSec #EthicalHacking #RedTeam #BlueTeam #CyberSecuritySG #SGTech #TechSingapore #HackTheGrid

😁😁😁😁😁😁😁 🚦 LIGHTS OUT... REGISTRATION! The race begins now. Registration for STANDCON06 is officially LIVE! Get ready for: 🏁 Inspiring keynote sessions 💻 Technical talks 🛠 Hands-on workshops 🤝 Networking with the cybersecurity community Best of all? 🎟 FREE admission for everyone. 📅 16–17 October 2026 📍 Lifelong Learning Institute Don't miss your chance to be part of one of Singapore's biggest community-driven cybersecurity conferences. 👉 Register now: https://standcon.n0h4ts.com/register

From Div0: Whether you're making your first trip to Las Vegas or you're a DEF CON veteran, come hang out with the community before the conferences kick off! 🎉 Join us for an evening of great conversations, familiar faces, and new connections with fellow attendees heading to: 🎲 BSides Las Vegas 🛡 Black Hat USA 🏴 DEF CON 34 📅 Thursday, 23 July 2026 📍 Carpenter Street, Singapore Open to everyone — you don't need to be travelling to Vegas to join us! 🔗 Register here: https://luma.com/3wwa0hfb Brought to you together with Protos Labs with venue partner SGInnovate. See you there! 👋

😀😀😀😀😀😀😀 Brutus is an open-source, multi-protocol credential testing tool written in pure Go, designed to replace legacy tools that have long frustrated penetration testers with dependency headaches and integration gaps. In short — it does what older tools like Hydra do, but cleaner and faster ⚡️ Why should we be concerned ? 🙁 1. It's dead simple to deploy. Brutus ships as a single binary with zero external dependencies — no messy setup, no version conflicts. Any attacker can be up and running in minutes 😱 2. It fits right into recon pipelines. 🖥 Reconnaissance flows through tools like naabu for port scanning and fingerprintx for service identification, with everything structured as JSON streams. With Brutus, operators can pipe discovered services directly into credential testing and get structured results back — no format conversion, no manual parsing, no platform-specific workarounds 🤯 3. It runs everywhere. 💻 The tool runs identically on Linux, macOS, and Windows — no excuses for attackers 💀 4. Low barrier for cybercriminals ⬛️ Being open source and freely available on GitHub means anyone can grab, modify, and weaponize it — not just professional pentesters How do you know if you're being targeted? 1. Bursts of failed authentication attempts in quick succession across SSH, RDP, FTP or web login pages — this is the clearest tell 2. Login attempts from unusual geolocations or IPs that have never accessed your environment before. 3. Sequential username or password patterns in your auth logs — a sign of automated list-based testing rather than a real user 4. Port scan activity preceding the login attempts — Brutus is designed to follow recon tools, so a scan spike before auth failures is a red flag 5. High volumes of connections to non-standard service ports — attackers often probe beyond the usual ports looking for exposed service

From GovTech: From now till 30 September, enjoy exclusive Early Bird pricing when you register for the STACK Conference 2026, GovTech’s biennial hallmark conference for public and private sector leaders, practitioners, and partners. After welcoming over 1,900 in-person attendees in 2024, they are ready to go even bigger this year! STACK Conference brings together CIOs, software developers, designers, product teams, operations leaders, and industry experts from Singapore and around the world to exchange ideas and share practical solutions on one platform. Attendees can look forward to keynotes, plenary sessions, panel discussions, and lightning talks. This year’s programme will spotlight the ideas, technologies, and practices shaping the next bound of digital transformation, across key topics such as: Unleashing AI Autonomy: Beyond Chatbots Exploring AI platforms and agentic capabilities to execute complex, multi-step workflows with minimal human supervision and discover how autonomous systems are redefining domain expertise and efficiency at an operational scale. Anticipate the Future: Data-Enabled User Experience Leverage predictive insights to meet user and market needs before they arise, with practical strategies for data platforms and data sharing. Discovering how data improves service design, transforms user engagement and tell-me-once experiences. Supercharge Productivity: Engineering Velocity & Intent-Driven Development Accelerate the development team with best practices for developer productivity, and explore cutting-edge developer platforms and the rise of intent-driven development, which streamlines processes and scales engineering efforts effectively. The Future of Cloud: Sustainable, Resilient, & Effortless Learn how to build more compliant and resilient cloud infrastructure that embeds governance controls, delivering reliable services while reducing regulatory overhead and improving operational effectiveness. Prepare for the next wave of automated compliance and responsible AI deployment. Designing for All: Digital Safety & Inclusivity Build a digital world that is secure and accessible by designing solutions for diverse physical and cognitive needs. Defend against bad actors, improve AI safety, cybersecurity, and strategies that uplift digital literacy and public confidence.​ Visit the STACK Conference 2026 event page at go.gov.sg/stackcon26-n0h4ts to learn more and secure your tickets today

From CSIT: CSIT Tech Discovery 2026 CSIT will be organising an inaugural CSIT Tech Discovery at CSIT on 21 - 22 Jul 26 and would like to warmly welcome you to come,  see,  hear  and experience what they do  at work.   Visitors will gain insights into their  work in Cybersecurity, Software & AI Engineering, and Cloud & Infrastructure through hands-on  demonstrations  curated by their engineers. They will also be sharing scholarship  and recruitment  opportunities  in  CSIT.   To register, please indicate your preferred timeslot via the link below. Please note that this event is open to Singapore Citizens only. Sign up here: https://form.gov.sg/6a462867220cdd5ad0c809ce?6a462744ca60713823ba7fa0=N0H4TS   Attendance is by-registration only. However, should all available slots be filled, additional registrants may be placed on a waitlist. Kindly RSVP by 13 July. Successful registrants will receive a confirmation email from TechDiscovery.CSIT@searix.net

😃😃😃😃😃😃😃 [UPDATED] 1 more day to AiSP x Div0-N0H4TS Youth Day Special Meetup #25 Looking to strengthen your cybersecurity career and stand out in a competitive job market? 💪 Join us for Meetup #25 featuring Rowena Lee from HRS Talents, Sam Chew from CSIT, Angela Wu from IMDA and Gavan Kingdon from KPMG Singapore ! Through panel discussions, workshops, and networking opportunities, you'll gain practical insights into navigating the cybersecurity industry, building your professional brand, and preparing for career opportunities! 🤩 Meetup Details: - Date: 3 July 2026 (Friday) - Time: 6:30PM - 9:30PM - Venue: 84 Punggol Way, #07-69, Punggol Digital District, Singapore 829911 Whether you're preparing for internships or graduate roles, this session will equip you with actionable tips and industry perspectives to help you succeed 🚀 Topics Covered: 🎤Fireside Chat with Industry Panelists: Gain insights into the cybersecurity landscape, career pathways, hiring trends, and industry expectations. 🗣️Q&A Session: Ask your questions directly to experienced professionals from industry and government. 🗣️LinkedIn & Online Presence Workshop : Learn how to optimise your profile to attract recruiters and hiring managers. 🤝Interview Preparation Workshop: Understand what employers look for and how to confidently showcase your skills and experiences. 🤝Networking Session: Connect with fellow cybersecurity enthusiasts and industry professionals. More Slots opened up ! Do sign up to indicate your interest by scanning on the QR code via the Lantern app by today! ** A confirmation email will be sent upon successful registration. Once your registration has been approved, you will be able to view the meetup on your Lantern home page. 😂 Download Lantern Now: - Android Playstore: https://play.google.com/store/apps/details?id=com.hackami.lantern_app&pcampaignid=web_share - iOS Appstore: https://apps.apple.com/sg/app/lantern-by-hackami/id6738745046

7 more days to AiSP x Div0-N0H4TS Youth Day Special Meetup 25! Hi Div0-N0H4TS Community Members! We've sent out the first wave of invitations for Meetup #25! 🎉 If you've successfully secured a spot at Meetup #25, do check your email inbox (and your spam/junk folder just in case) and follow the instructions in the email. You should also be able to see the meetup details on the home page of Lantern! 🤗 If you haven't received an invitation yet, do give us some time! For those that have yet to register, don't worry - there are still a few slots available, so if you haven't registered yet, this is your chance before it closes! Scan the QR code to register on Lantern now!😉

From DDAS: DDAS Talent & Solutions Showcase 2026 The conference brings together about 200 C-suite digital leaders, professionals, managers, and executives and Youths to explore how organisations can move beyond experimentation and adopt AI in a strategic, secure, and impactful way. In today’s rapidly evolving landscape, AI & Cybersecurity are closely interconnected. Date: 24 July 2026 Time: 9AM - 4PM Venue: Suntec Convention Centre LEARN MORE ABOUT ARTIFICIAL INTELLIGENCE - Understand practical applications, adoption strategies and how to move beyond pilots to real business impact LEARN MORE ABOUT CYBERSECURITY - Gain insights into emerging threats, digital risks, and how to strengthen organisational resilience LEARN MORE ABOUT FUNDING GRANTS - Discover how Company Training Committee (CTC) initiatives can support workforce transformation, skills upgrading & business innovation. EXPLORE JOB OPPORTUNITIES - Connect with hiring organisations, discover new career pathways, and engage directly with industry leaders Events Highlights DDAS PME Conference - Strategic discussions on AI, Cybersecurity and Digital Defence Solutions Showcase - Featuring Innovative Solutions that Enterprise & Solutions can take on to safeguard their business in Cybersecurity such as CCISO as a Service Talent Showcase - Featuring training providers and career opportunities that you can consider to take-up or upgrade your staff in Leadership & Networking Opportunities - Engage with policymakers, industry leaders, and emerging talent Offensive AI Security Masterclass - Exclusive full day Masterclass for those who have a strong interest to advance in AI (Fees apply to sign up for the course as is conducted by our training partner A Platform Designed to support your Journey - Your participation will contribute to building a trusted, secure, and resilient digital ecosystem for Singapore Register today! https://docs.google.com/forms/d/e/1FAIpQLSfMF7Garl5JkjmsFkx2jh7qiuEQRTbDQqIdBr-Jnu-vYi56kQ/viewform?usp=send_form

😃😃😃😃😃😃😃 AiSP x Div0-N0H4TS Youth Day Special Meetup #25 Looking to strengthen your cybersecurity career and stand out in a competitive job market? 💪 Join us for Meetup #25 featuring Rowena Lee from HRS Talents, Sam Chew from CSIT, Angela Wu from IMDA and…

😃😃😃😃😃😃😃 AiSP x Div0-N0H4TS Youth Day Special Meetup #25 Looking to strengthen your cybersecurity career and stand out in a competitive job market? 💪 Join us for Meetup #25 featuring Rowena Lee from HRS Talents, Sam Chew from CSIT, Angela Wu from IMDA and more speakers to be announced (stay tuned! 👀)  Through panel discussions, workshops, and networking opportunities, you'll gain practical insights into navigating the cybersecurity industry, building your professional brand, and preparing for career opportunities! 🤩 Meetup Details: - Date: 3 July 2026 (Friday) - Time: 6:30PM - 9:30PM - Venue: 84 Punggol Way, #07-69, Punggol Digital District, Singapore 829911 Whether you're preparing for internships or graduate roles, this session will equip you with actionable tips and industry perspectives to help you succeed 🚀 Topics Covered: 🎤Fireside Chat with Industry Panelists: Gain insights into the cybersecurity landscape, career pathways, hiring trends, and industry expectations. 🗣️Q&A Session: Ask your questions directly to experienced professionals from industry and government. 🗣️LinkedIn & Online Presence Workshop : Learn how to optimise your profile to attract recruiters and hiring managers. 🤝Interview Preparation Workshop: Understand what employers look for and how to confidently showcase your skills and experiences. 🤝Networking Session: Connect with fellow cybersecurity enthusiasts and industry professionals. Slots are limited ! Do sign up to indicate your interest by scanning on the QR code via the Lantern app! ** A confirmation email will be sent upon successful registration. Once your registration has been approved, you will be able to view the meetup on your Lantern home page. 😂 Download Lantern Now: - Android Playstore: https://play.google.com/store/apps/details?id=com.hackami.lantern_app&pcampaignid=web_share - iOS Appstore: https://apps.apple.com/sg/app/lantern-by-hackami/id6738745046

😀😀😀😀😀😀😀 "Mini Shai Hulud" e.g. @antv NPM Supply Chain Compromise What is it about? 🤔 "Mini Shai Hulud" is a supply chain attack disclosed by Microsoft. A threat actor compromised an npm maintainer account and used it to publish malicious versions of popular @antv JavaScript packages. Around 640 poisoned package versions were published. Because other popular packages like echarts-for-react (1M+ weekly downloads) depend on @antv, the compromise cascaded to a massive number of projects automatically How does the attack work? 💻 When developers install rpm packages, special scripts called "preinstall hooks" can run automatically before the package is even fully set up. The attacker hid obfuscated (scrambled) malicious code in these hooks. Once triggered, the payload hunted for sensitive credentials stored on the machine e.g: 🔑 GitHub tokens (used to push code and access private repos) ☁️ AWS keys (used to access cloud infrastructure) 🐹 Vault tokens (used to access secrets/passwords in organisations) 🪙 npm tokens (used to publish packages — enabling further supply chain attacks) It specifically targeted CI/CD pipelines, the stolen data was sent to an attacker-controlled server (t.m-kosche[.]com). If that failed, the malware had a clever backup: it would create hidden files inside the victim's own GitHub repos to smuggle data out 🤣 Why should we be concerned? 🙁 1. Over 2,200 repositories were affected, and GitHub had to revoke more than 61,000 tokens in response. 2. Developers didn't have to do anything wrong. Simply running npm install on a project that used these packages was enough to get compromised. 3. CI/CD systems were the primary target - these hold the keys to deploy code to production. One compromised pipeline can lead to full organisational breach. 4. The attacker also forged software signing "badges" e.g. verified status, making the malicious packages appear trustworthy even to security tools designed to catch this exact scenario How can we mitigate it? 🌟 1. Run npm install --ignore-scripts to prevent preinstall hooks from executing automatically (then manually run scripts you trust) 2. Rotate ALL credentials immediately if you used any @antv packages - GitHub tokens, AWS keys, npm tokens, CI/CD secrets, everything 3. Pin exact package versions (e.g., 1.2.3 not ^1.2.3) so malicious updates don't auto-install 4. Check CI/CD logs for any outbound connections to t.m-kosche[.]com - if found, assume full credential compromise

Div0-N0H4TS Community 💻 pinned a photo