{"id":42925,"date":"2021-09-16T18:00:07","date_gmt":"2021-09-16T18:00:07","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/hack-yourself-before-someone-else-does-it-for-you\/"},"modified":"2021-09-16T18:00:07","modified_gmt":"2021-09-16T18:00:07","slug":"hack-yourself-before-someone-else-does-it-for-you","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/hack-yourself-before-someone-else-does-it-for-you\/","title":{"rendered":"Hack yourself before someone else does it for you"},"content":{"rendered":"<p><span data-label=\"promo\">Sponsored<\/span> Stop me if you\u2019ve heard this before, but something appears to be amiss with cybersecurity. The spectacular success of ransomware is only the latest and worst example, a phenomenon in which small groups of often barely technically literate attackers ransack some of the biggest and best resourced companies on earth for easy money.<\/p>\n<p>Tens of millions of dollars head out the door every day in this dystopia and yet it is becoming a quickly forgotten blur. Most industries would have folded with this record of failure and yet, on the contrary, cybersecurity is booming. Ironically, as the <a target=\"_blank\" href=\"https:\/\/go.theregister.com\/k\/fireeye_tools_hacked\" rel=\"noopener\">attack earlier in 2021 on FireEye<\/a> shows, even security companies full of elite white hats can\u2019t stop the bad people.<\/p>\n<p>Is it that the cybersecurity kit doesn\u2019t work or that the people deploying it inside organizations don\u2019t know how to use it? Either explanation is plausible but there\u2019s a third possibility \u2013 networks are inherently complex, getting more so, and change so much every day that things that were working yesterday end up being fumbled.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"condor\" data-xsm=\",fluid,mpu,\" data-sm=\",fluid,mpu,\" data-md=\",fluid,mpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>One company that subscribes to a version of the complexity thesis is Keysight Technologies, a $4bn-turnover company that was spun out of Agilent in 2014. Multiple acquisitions later and in early 2020 it released <a target=\"_blank\" href=\"https:\/\/go.theregister.com\/k\/1rSsHNA4Ek\" rel=\"noopener\">Threat Simulator<\/a>, a SaaS- based tool which competes in an intriguing new sector, Breach and Attack Simulation (BAS).<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"falcon\" data-xmd=\",fluid,mpu,leaderboard,\" data-lg=\",fluid,mpu,leaderboard,\" data-xlg=\",fluid,billboard,superleaderboard,mpu,leaderboard,\" data-xxlg=\",fluid,billboard,superleaderboard,brandwidth,brandimpact,leaderboard,mpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D426raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<div class=\"adun_eagle_desktop_story_wrapper\">\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"mid\" data-raptor=\"eagle\" data-xxlg=\",mpu,dmpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<\/p><\/div>\n<p>A BAS tool lets you step away from the defender\u2019s view of the network that you normally have and assume the hacker\u2019s view of the network. The defender just sees the attacks he\u2019s stopping; the attacker sees the attacks he\u2019s not.<\/p>\n<p>The principle behind BAS tools is simple enough: if many cybersecurity weaknesses are caused by error and misconfiguration &#8211; and it&#8217;s near impossible to detect all those issues, even if you&#8217;re looking for them \u2013 one answer is to make them visible through continuous testing.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"falcon\" data-xsm=\",fluid,mpu,\" data-sm=\",fluid,mpu,\" data-md=\",fluid,mpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D426raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>But what does <i>continuous<\/i> mean in this context? And how do you look for something when the haystack is as big as your entire security footprint? The philosophy of BAS tools is that you simulate what real attacks do inside networks based on patterns drawn from threat intelligence. If a security layer fails to stop or spot this simulation, you have your first needle.<\/p>\n<p>Although BAS sounds new, some of this capability has been hiding inside specialized tools that have been in use for years. \u201cHistorically, we built these tools for quality assurance and test labs. It was built by geeks for geeks as a pre-deployment lab tool,\u201d explains Keysight\u2019s VP of security solutions, Scott Register.<\/p>\n<p>Designed to bombard a system as part of heavyweight testing, eventually, it occurred to testing vendors that some elements of this testing might nevertheless have more mainstream uses. And so the BAS sector was born, where it resides today inside larger SecOps platforms \u2013 or in Keysight\u2019s case, the Security Operations Suite, a product family that includes the separate threat intelligence gateway, ThreatARMOR.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" id=\"story_eagle_xsm_sm_md_xmd_lg_xlg\" data-pos=\"mid\" data-raptor=\"eagle\" data-xsm=\",mpu,dmpu,\" data-sm=\",mpu,dmpu,\" data-md=\",mpu,dmpu,\" data-xmd=\",mpu,dmpu,\" data-lg=\",mpu,dmpu,\" data-xlg=\",mpu,dmpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>For Register, the flaw in big cybersecurity is that, despite investing in more and more security tools, organizations have no simple way of measuring how well they\u2019re protecting their company.<\/p>\n<p>\u201cAsk yourself, \u2018After spending all of this money on security tools and operations, am I safer than I was yesterday? Last month? Last year? Because if you can\u2019t answer that simple question, then you\u2019re flying blind. You can\u2019t justify or even evaluate expenses. So why are you buying all that security stuff if you can\u2019t manage it?\u201d, he says.<\/p>\n<p>\u201cFor example, if you don\u2019t get an alert from a firewall on a remote site, it\u2019s hard to know if that\u2019s because there\u2019s nothing bad happening, or is there a configuration problem, or did it go offline?&#8221;<\/p>\n<p>The conventional solution to this issue is to engage a bunch of internal pen testers to poke around on the network from the inside looking for the holes nobody knows about. This kind of assessment has been considered a best practice but has an obvious limitation \u2013 the day after the pen testers have gone home, the network changes and new vulnerabilities appear. Likewise, continuous red team pen testing which solves this problem in theory but is also a complex, expensive undertaking for companies without Top Gun IT departments.<\/p>\n<p>\u201cWhat a pen test team finds in January is going to be very different from the same team in July. The world is very dynamic, and the threat landscape changes every day. It\u2019s just hard to measure your security over time with pen testing,\u201d argues Register.<\/p>\n<p>\u201cOur tool lets customers safely conduct real attacks on their networks and find out where the gaps are, what is blocked and what is let through without you knowing it had happened. You can effectively deploy real malware against your network but in a safe way.\u201d<\/p>\n<h3 class=\"crosshead\"> <span>Something broken<\/span><br \/>\n<\/h3>\n<p>In any organization, cybersecurity comprises a series of sensitive zones such as endpoint security, email and web servers, and branch office infrastructure. These in turn are protected by layers of anti-virus and sandboxing software, packet, and web application firewalls (WAFs), data leak prevention (DLP), VPN gateways, intrusion protection systems (IPS), email and web filtering, and controls for cloud applications such as Office 365.<\/p>\n<p>These applications send status and alerts to a high-level security and event management (SIEM), which is where automated routines and human intervention are coordinated. The way Register describes it, <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/go.theregister.com\/k\/KesYwRguVpU\">Threat Simulator<\/a> is like the internal affairs cop that keeps the other systems honest by testing their security state.<\/p>\n<p>This is done using a simple architecture comprising a series of virtual agents that sit on the part of the network or policy zone being tested, running on Windows or Linux Docker containers. The agents simulate malware, communicating with a remote \u2018dark cloud\u2019 in Keysight\u2019s data center, which acts as the malware command and control (C2). The idea is that while the agents talk to the cloud service and each other, they simulate a series of attack patterns and techniques that traverse and attempt to bypass internal security controls.<\/p>\n<p>Once subscribed, admins can quickly set up one of a series of threat scenarios from a library of assessments which feed results to most SIEMs. These scenarios include generic assessments modelling known attacks (Mirai, Lazarus, WannaCry, Covid-19 lures), generic indicators (Cryptojacking), and individual techniques (data exfiltration, malware file transfer, LAN perimeter security), as well as the effectiveness of specific defenses (URL filtering, for example).<\/p>\n<p>\u201cIn the flood of messages that security teams get every day from their many security tools, a SIEM isn\u2019t configured to look for the specific events \u2013 the \u2018Indicators of Compromise\u2019 \u2013 that would indicate an organization is being subjected to a certain attack. That\u2019s what usually happens &#8212; you get an alert but it\u2019s lost in the flood of hundreds of alerts a day so you don\u2019t know that it\u2019s actionable. We fix that,\u201d Register says.<\/p>\n<p>Another example would be that the organization\u2019s endpoint security software isn\u2019t detecting a new malware executable or known attack pattern, or the firewalls haven\u2019t spotted that malware can tunnel their network using an encrypted C2 channel without being blocked or subject to packet inspection.<\/p>\n<p>These types of conditions or oversights can appear at any moment, which is why running Threat Simulator as a regular but non-disruptive service makes sense.<\/p>\n<p>\u201cMost security admins will pick which attack scenarios to use based on the MITRE ATT&amp;CK Framework. That lets you pick a particular threat actor and select the attacks that the bad guy is currently using. Threat Simulator makes it easy to do that,\u201d Register says. \u201cOur tool can be run as frequently as desired and it\u2019s repeatable. You can also add whatever the new attack is. You get a really thorough view of your security posture while exposing your team to the newest attacks.\u201d<\/p>\n<p>An interesting use case is where organizations migrate from hosted web applications protected by WAFs to cloud platforms protected by proprietary security. The configuration on the latter turns out to be less than straightforward because the settings are unfamiliar which creates the likelihood of misconfiguration risk.<\/p>\n<p>\u201cWe\u2019ve been able to show customers that their current configuration won\u2019t stop SQL injection attacks. It\u2019s about helping people through those sorts of cloud migrations.\u201d<\/p>\n<p>In a fix It\u2019s not a complete surprise that Threat Simulator is able to advise which issues should be prioritized but perhaps that\u2019s the easy part. What matters more than that is being given direction on how to address the problems it has found. Sometimes that will be a straightforward case of adjusting a single parameter, other times it\u2019ll be more complex advice. As any manual pen tester will tell a customer, some weaknesses are the result of architectural choices or legacy kit that\u2019s not easy to dump overnight.<\/p>\n<p>\u201cWe give remediation instructions so that you\u2019re not on your own. Sometimes that\u2019s product specific while on other occasions is more of a best practice approach.\u201d<\/p>\n<p>Other times, what it finds might be incredibly straightforward but important. Register cites the example of using Threat Simulator to send a malicious attachment through the Exchange server to see whether it is passed. If it is, the admin has found an issue that could save the organization.<\/p>\n<p>He stresses that BAS is not a replacement for a full internal pen testing so much as a complement to it. The distinction is important. BAS lets security teams take an attacker\u2019s view of the network while Pen testing tends to focus on emulating hackers who are perpetrating social engineering attacks or opportunistically testing an organization\u2019s Wi-Fi.<\/p>\n<p>Threat simulation is still a simulation, but one that finds common weaknesses which appear suddenly and lurk unnoticed. If an attacker is trying to gain a foothold in a network, or already has one and wants to move laterally, it is this kind of everyday weakness that gives them free fuel. If an attacker has to work harder to exploit a network, there\u2019s a good chance that they\u2019ll move on to one that\u2019s more easily breached.<\/p>\n<h3 class=\"crosshead\"> <span>Measure me<\/span><br \/>\n<\/h3>\n<p>BAS can be thought of as part of a much bigger trend away from security systems that block things \u2013 with fingers crossed \u2013 towards the simple, perhaps radical notion of continuous improvement. Something is always going wrong, or not operating as it should, but the problem is you don\u2019t know where or how this has happened until the ransom note appears screen-side.<\/p>\n<p>No single tool, technology or approach will do the whole job. Pen testing, especially black box testing, is still necessary because it is an independent assessment. Ditto for compliance and assurance because they raise standards.<\/p>\n<p>Breach and attack simulation is simply another element for use between times. Taking a hacker\u2019s view of your network with a BAS solution \u2013 rather than relying on security tools \u2013 shows you your vulnerabilities. Ultimately, the idea that in order to secure something you must validate it continuously is a compelling one.<\/p>\n<p>\u201cCorporate security has been notoriously difficult to measure,\u201d Register says, \u201cAs Peter Drucker famously said, what <i>you can&#8217;t manage is what you can&#8217;t measure<\/i>. And yet today the only measure we have is a negative, a breach. That\u2019s terrible, like asking a doctor how many patients they\u2019ve lost last year.\u201d<\/p>\n<p> <i>Sponsored by Keysight.<\/i>\n<\/p>\n<p> READ MORE <a href=\"https:\/\/go.theregister.com\/feed\/www.theregister.com\/2021\/09\/16\/keysight_breach_and_attack_simulation\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Breach and attack simulation tools help you raise your game, Keysight says Sponsored\u00a0 Stop me if you\u2019ve heard this before, but something appears to be amiss with cybersecurity. The spectacular success of ransomware is only the latest and worst example, a phenomenon in which small groups of often barely technically literate attackers ransack some of the biggest and best resourced companies on earth for easy money.\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-42925","post","type-post","status-publish","format-standard","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Hack yourself before someone else does it for you 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/hack-yourself-before-someone-else-does-it-for-you\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hack yourself before someone else does it for you 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/hack-yourself-before-someone-else-does-it-for-you\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2021-09-16T18:00:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hack-yourself-before-someone-else-does-it-for-you\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hack-yourself-before-someone-else-does-it-for-you\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Hack yourself before someone else does it for you\",\"datePublished\":\"2021-09-16T18:00:07+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hack-yourself-before-someone-else-does-it-for-you\\\/\"},\"wordCount\":1919,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hack-yourself-before-someone-else-does-it-for-you\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hack-yourself-before-someone-else-does-it-for-you\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hack-yourself-before-someone-else-does-it-for-you\\\/\",\"name\":\"Hack yourself before someone else does it for you 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hack-yourself-before-someone-else-does-it-for-you\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hack-yourself-before-someone-else-does-it-for-you\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"datePublished\":\"2021-09-16T18:00:07+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hack-yourself-before-someone-else-does-it-for-you\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hack-yourself-before-someone-else-does-it-for-you\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hack-yourself-before-someone-else-does-it-for-you\\\/#primaryimage\",\"url\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"contentUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hack-yourself-before-someone-else-does-it-for-you\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Hack yourself before someone else does it for you\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Hack yourself before someone else does it for you 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/hack-yourself-before-someone-else-does-it-for-you\/","og_locale":"en_US","og_type":"article","og_title":"Hack yourself before someone else does it for you 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/hack-yourself-before-someone-else-does-it-for-you\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2021-09-16T18:00:07+00:00","og_image":[{"url":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/hack-yourself-before-someone-else-does-it-for-you\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/hack-yourself-before-someone-else-does-it-for-you\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Hack yourself before someone else does it for you","datePublished":"2021-09-16T18:00:07+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/hack-yourself-before-someone-else-does-it-for-you\/"},"wordCount":1919,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/hack-yourself-before-someone-else-does-it-for-you\/#primaryimage"},"thumbnailUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/hack-yourself-before-someone-else-does-it-for-you\/","url":"https:\/\/www.threatshub.org\/blog\/hack-yourself-before-someone-else-does-it-for-you\/","name":"Hack yourself before someone else does it for you 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/hack-yourself-before-someone-else-does-it-for-you\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/hack-yourself-before-someone-else-does-it-for-you\/#primaryimage"},"thumbnailUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","datePublished":"2021-09-16T18:00:07+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/hack-yourself-before-someone-else-does-it-for-you\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/hack-yourself-before-someone-else-does-it-for-you\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/hack-yourself-before-someone-else-does-it-for-you\/#primaryimage","url":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","contentUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YUcPF3hxPlfmGB4M1thNqgAAAc0&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/hack-yourself-before-someone-else-does-it-for-you\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Hack yourself before someone else does it for you"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/42925","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=42925"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/42925\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=42925"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=42925"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=42925"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}