News for hackers. Stuff that matters.

A comment on Foreign hackers breached a US nuclear weapons plant via SharePoint flaws. Parent comment

Re:Foreign hackers breached a US nuclear weapons plant via S... by pandemic_region on Tuesday October 21, 2025 @03:55PM (#45660872)
How can you see from the MX record if it is Microsoft?
[ Parent | on HN ]
Re:Foreign hackers breached a US nuclear weapons plant via S... by janderson215 on Tuesday October 21, 2025 @03:56PM (#45660887)
mxtoolbox.com
[ Parent | on HN ]
Re:Foreign hackers breached a US nuclear weapons plant via S... by adamcblodgett on Tuesday October 21, 2025 @05:36PM (#45662037)
I love this tool so much. It makes so many difficult things easy, and it does it cheaply or free in almost every instance.
[ Parent | on HN ]
Re:Foreign hackers breached a US nuclear weapons plant via S... by kyrra on Tuesday October 21, 2025 @04:43PM (#45661448)
The "dig" command can get them for you

$ dig ycombinator.com mx

  ;; ANSWER SECTION:
  ycombinator.com. 300 IN MX 20 alt1.aspmx.l.google.com.
  ycombinator.com. 300 IN MX 10 aspmx.l.google.com.
  ycombinator.com. 300 IN MX 20 alt2.aspmx.l.google.com.
  ycombinator.com. 300 IN MX 30 aspmx4.googlemail.com.
[ Parent | on HN ]
Re:Foreign hackers breached a US nuclear weapons plant via S... by pixel16 on Wednesday October 22, 2025 @12:42AM (#45664957)
this doesnt work if they use a 3rd party email filtering service like mimecast or proofpoint fyi.
[ Parent | on HN ]
Re:Foreign hackers breached a US nuclear weapons plant via S... by neilv on Wednesday October 22, 2025 @03:38AM (#45665927)
Another red flag! :)
[ Parent | on HN ]
Re:Foreign hackers breached a US nuclear weapons plant via S... by ExoticPearTree on Wednesday October 22, 2025 @10:03AM (#45669352)
Proofpoint, definitely a very big red flag.
[ Parent | on HN ]