Top all-time · #5495
Forcepoint
Company blog · forcepoint.com/blog/x-labssecurity
Forcepoint is the company blog at forcepoint.com, writing about security. Since 2016, 14 different Hacker News readers have linked it 17 times, most often “Attacking internal network from public Internet using a browser as a proxy [pdf]”. No feed was found, so read it on the site itself.
Too few sampled comments (8) to say how often HN recommends it.?
Why HN links it
Forcepoint X-Labs security research, linked for browser-based attacks on internal networks, WebAssembly security, cryptojacking and infostealers, and a defense-in-depth glossary entry.
Summarised by Claude from a sample of 8 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
AI moves fast. Forcepoint moves first. Monitor, enforce and secure data for shadow AI, agents and sanctioned AI with Forcepoint AI Data Security.
Most-linked posts?
- Attacking internal network from public Internet using a browser as a proxy [pdf]4 people · 5 mentions · first linked 2019-03-20
- Zero Day virus with undetectable exfiltration using only ChatGPT prompts2 people · 2 mentions · first linked 2023-04-05
What Hacker News says?
And? Attacking the internal network from the public Internet using a browser as a proxy: https://www.forcepoint.com/sites/default/files/resources/fil... It is a totally legitimate question if attacks like this are baked into an app (unless these kinds of permissions are now the default, in which case I am behind the curve).
Comment linking /sites/default/files/resources/files/report-attacking-internal-network-en_0.pdf
on “TikTok says it is restoring service for U.S. users”Submitted Zero Day virus with undetectable exfiltration using only ChatGPT prompts as a story · 3 points
HN discussion"hidden img tags to all common gateways (eg 192.168.0.1) are loaded in background onerror/onsuccess events attached to img tags" It has always been a big mistake for browsers to allow internet pages to make requests to LAN IPs. This has been exploited before: https://www.forcepoint.com/sites/default/files/resources/fil...
Comment linking /sites/default/files/resources/files/report-attacking-internal-network-en_0.pdf
on “NAT Slipstreaming”Submitted Cereals – a 10,000-bot IoT botnet that seems to have just downloaded anime as a story · 3 points
HN discussionProbably the most prominent use of WASM at scale is cryptocoin mining. Coinhive estimated it run at 65% performance of native code. https://www.forcepoint.com/blog/x-labs/browser-mining-coinhi...
Comment linking /blog/x-labs/browser-mining-coinhive-and-webassembly
on “WebAssembly becomes a W3C Recommendation”Submitted Memory safety: old vulnerabilities become new with WebAssembly as a story · 3 points
HN discussion> A cloudflare lookalike Was that a page that made it look like one needs to do something as part of the browser/session human verification process? And it was an obfuscated command (an echo cmd iirc)? Sth like this https://www.forcepoint.com/blog/x-labs/odyssey-stealer-attac... Or was it something else?
Comment linking /blog/x-labs/odyssey-stealer-attacks-macos-users
on “GLM-5.3 and the spread of advanced cyber capabilities”Submitted Forcepoint Research Old vulnerabilities become new with WebAssembly [pdf] as a story · 2 points
HN discussionThere is also another blog post (link to white paper inside) that talks about different memory safety issues with WebAssembly if using a memory-unsafe language: https://www.forcepoint.com/blog/security-labs/new-whitepaper...
Comment linking /blog/security-labs/new-whitepaper-memory-safety-old-vulnerabilities-become-new-webassembly
on “WebAssembly doesn’t make unsafe languages safe”Submitted Attacking internal network from public Internet using a browser as a proxy [pdf] as a story · 2 points
HN discussionZero Trust is really just defense in depth[0]. All the things it implements are DiD solutions that have existed way before the term Zero Trust emerged. [0] https://www.forcepoint.com/cyber-edu/defense-depth
Comment linking /cyber-edu/defense-depth
on “'Zero trust’ security is a poor choice of words”Submitted Analysis of a Botnet Campaign [pdf] as a story · 2 points
HN discussionYou normally wouldn't forward open ports on your VM straight through your host and also through your LAN (or at least, I wouldn't), so that's not really a huge attack vector. The main threat would be connecting to a malicious server that attacks some hypothetical hole in the TCP/TLS stack when you connect, but such servers aren't really omnipresent, and you can apply the usual measures of 'making regular backups' an…
Comment linking /sites/default/files/resources/files/report-attacking-internal-network-en_0.pdf
on “Robust Wavefront OBJ model parsing in C”Submitted I built a Zero Day with undetectable exfiltration using only ChatGPT prompts as a story · 1 points
HN discussionThis change can't come soon enough. My only objection is that the rollout is way too slow, and the first step is only a baby step. What we have now is essential a 0day situation. Unfortunately a lot of commenters completely misunderstand the proposal, as well as the attacks it is designed to mitigate. Here's a good paper describing the issue, "Attacking the internal network from the public Internet using a browser a…
Comment linking /sites/default/files/resources/files/report-attacking-internal-network-en_0.pdf
on “Feedback wanted: CORS for private networks (RFC1918)”Submitted Three-Month Trend Analysis: Covid and Coronavirus-Themed Web and Email Traffic as a story · 1 points
HN discussionSubmitted Tapping Telegram bots as a story · 1 points
HN discussion
