Port 22

~ 29 Apr 2021 ~

BadAlloc: Microsoft looked at memory allocation code in tons of devices and found this one common security flaw

UNC2447 SOMBRAT and FIVEHANDS Ransomware: A Sophisticated Financial Threat

UNC2447 SOMBRAT and FIVEHANDS Ransomware: A Sophisticated Financial Threat

FBI teams up with Have I Been Pwned to alert Emotet victims

'BadAlloc' Flaws Could Threaten IoT and OT Devices: Microsoft

Adobe Open Sources Tool for Anomaly Research

Vivaldi update unleashes the 'Cookie Crumbler' to simply block any services asking for consent (sites may break)

Task Force Seeks to Disrupt Ransomware Payments

Billions in data protection lawsuits rides on Google's last-ditch UK Supreme Court defence for Safari Workaround sueball

Identifying People Through Lack of Cell Phone Use

Texas Instruments SimpleLink

Cassia Networks Access Controller

Johnson Controls Exacq Technologies exacqVision

Multiple RTOS

48 ways you can avoid file-scrambling, data-stealing miscreants or so says the Ransomware Task Force

An Ambitious Plan to Tackle Ransomware Faces Long Odds

Prime targets: Governments shouldnt go it alone on cybersecurity

A New PHP Composer Bug Could Enable Widespread Supply-Chain Attacks

When youre building a cybersecurity pro, you need to get the foundations right

Digital Ocean springs a leak: Miscreant exploits hole to peep on unlucky customers' billing details for two weeks

How to Conduct Vulnerability Assessments: An Essential Guide for 2021

Chinese Hackers Attacking Military Organizations With New Backdoor

Researchers Uncover Stealthy Linux Malware That Went Undetected for 3 Years

Getting Support for Your Human Risk Assessments and Surveys

~ 28 Apr 2021 ~

Experian API Exposed Credit Scores of Most Americans

Ransomware crooks who broke into Merseyrail used director's email address to brag about it report

FluBot Malware's Rapid Spread May Soon Hit US Phones

74% of Financial Institutions See Spike in COVID-Related Threats

Brit MPs and campaigners come together to oppose COVID status certificates as 'divisive and discriminatory'

FBI Works With 'Have I Been Pwned' to Notify Emotet Victims

Ghostwriter Update: Cyber Espionage Group UNC1151 Likely Conducts Ghostwriter Influence Activity

~ 27 Apr 2021 ~

Abusing Replication: Stealing AD FS Secrets Over the Network

~ 22 Apr 2021 ~

Where to find a Good Woman to Marry

What exactly is Mutually Helpful Relationship?

The right way to Protect Your self From Asian Brides On the net

Primary advantages of Foreign Dating Sites

How you can find Legitimate Wedding brides for Sale

How you can find a Good Woman to Get married to

Benefits of Foreign Internet dating sites

Ancient Womannasiums Tips for Online Dating

~ 19 Apr 2021 ~

Grype Vulnerability Scanner For Container Images & Filesystems

Grype Vulnerability Scanner For Container Images & Filesystems

~ 13 Apr 2021 ~

Detecting the "Next" SolarWinds-Style Cyber Attack

~ 4 Mar 2021 ~

APT-Hunter Threat Hunting Tool via Windows Event Log

APT-Hunter Threat Hunting Tool via Windows Event Log

~ 3 Mar 2021 ~

Fuzzing Image Parsing in Windows, Part Two: Uninitialized Memory

~ 26 Jan 2021 ~

Phishing Campaign Leverages WOFF Obfuscation and Telegram Channels for Communication

~ 21 Jan 2021 ~

Training Transformers for Cyber Security Tasks: A Case Study on Malicious URL Prediction

~ 20 Jan 2021 ~

Emulation of Kernel Mode Rootkits With Speakeasy

~ 1 Dec 2020 ~

Using Speakeasy Emulation Framework Programmatically to Unpack Malware

~ 11 Nov 2020 ~

Click Security because "click happens"

~ 31 Aug 2020 ~

Seny Kamara on "Crypto for the People"

~ 25 Aug 2020 ~

Our New Blog

~ 17 Aug 2020 ~

How Unsecure gRPC Implementations Can Compromise APIs, Applications

~ 13 Aug 2020 ~

XCSSET Mac Malware: Infects Xcode Projects, Performs UXSS Attack on Safari, Other Browsers, Leverages Zero-day Exploits

~ 12 Aug 2020 ~

August Patch Tuesday Fixes Critical IE, Important Windows Vulnerabilities Exploited in the Wild

~ 10 Aug 2020 ~

Pen Test Partners: Boeing 747s receive critical software updates over 3.5" floppy disks

~ 6 Aug 2020 ~

Water Nue Phishing Campaign Targets C-Suites Office 365 Accounts

~ 28 Jul 2020 ~

Mirai Botnet Exploit Weaponized to Attack IoT Devices via CVE-2020-5902

~ 27 Jul 2020 ~

Ensiko: A Webshell With Ransomware Capabilities

~ 17 Jul 2020 ~

Updates on ThiefQuest, the Quickly-Evolving macOS Malware

~ 15 Jul 2020 ~

Patch Tuesday: Fixes for Wormable Windows DNS Server RCE, SharePoint Flaws

~ 8 Jul 2020 ~

New Fraud Ring "Bargain Bear" Brings Sophistication to Online Crime

New Mirai Variant Expands Arsenal, Exploits CVE-2020-10173

~ 18 Jun 2020 ~

Theft of CIA's "Vault Seven" Hacking Tools Due to Its Own Lousy Security

~ 17 Jun 2020 ~

Bank Card "Master Key" Stolen

~ 10 Jun 2020 ~

Solving a Mailing List "Gap Spam" Problem

~ 8 Jun 2020 ~

"Must Have" Free Resources for Open-Source Intelligence (OSINT)

"Must Have" Free Resources for Malware Analysis

~ 5 Jun 2020 ~

New Research: "Privacy Threats in Intimate Relationships"

~ 2 Jun 2020 ~

"Sign in with Apple" Vulnerability

~ 30 May 2020 ~

This $350 "Anti-5G" Device Is Apparently Just a USB Stick

~ 15 May 2020 ~

Friday Squid Blogging: Vegan "Squid" Made from Chickpeas

~ 20 Apr 2020 ~

How Can I Help My Users Spot Disinformation?

~ 8 Apr 2020 ~

Limited Shifts in the Cyber Threat Landscape Driven by COVID-19

~ 7 Apr 2020 ~

Thinking Outside the Bochs: Code Grafting to Unpack Malware in Emulation

~ 27 Mar 2020 ~

Social Engineering Based on Stimulus Bill and COVID-19 Financial Compensation Schemes Expected to Grow in Coming Weeks

~ 12 Feb 2020 ~

"Distinguished Impersonator" Information Operation That Previously Impersonated U.S. Politicians and Journalists on Social Media Leverages Fabricated U.S. Liberal Personas to Promote Iranian Interests

~ 24 Jan 2020 ~

Nice Try: 501 (Ransomware) Not Implemented

~ 19 Dec 2019 ~

From dropbox(updater) to NT AUTHORITY\SYSTEM (another eop via hardlink)

~ 12 Dec 2019 ~

From iPhone to NT AUTHORITY\SYSTEM

~ 11 Dec 2019 ~

Toys R Us Is BackNow With More Surveillance\!

~ 25 Nov 2019 ~

FIDL: FLAREs IDA Decompiler Library

XOR "encryption" in Forticlient/FortiGate used for FortiGuard Web Filter cloud lookups, leak full HTTP URLs of web surfing activity

~ 20 Nov 2019 ~

The Likely Reason Disney\+ Accounts Are Getting 'Hacked'

~ 19 Nov 2019 ~

Bringing "new" life into some old hacks on the lock screen

~ 14 Nov 2019 ~

Attention is All They Need: Combatting Social Media Information Operations With Neural Language Models

~ 13 Nov 2019 ~

[Zine] Newbie learns to break a vendor's crypto: "The Tale of the Dubious Crypto"

~ 21 Oct 2019 ~

A thread about "NordVPN was compromised at some point."

~ 17 Oct 2019 ~

Definitive Dossier of Devilish Debug Details Part Deux: A Didactic Deep Dive into Data Driven Deductions

~ 7 Oct 2019 ~

The UK has left the Common Criteria security certification scheme (that it co-founded), noting it's "diminishing relevance"

~ 3 Oct 2019 ~

IDA, I Think Its Time You And I Had a Talk: Controlling IDA Pro With Voice Control Software

~ 26 Sep 2019 ~

On Chinese "Spy Trains"

~ 9 Sep 2019 ~

Facebook Patches "Memory Disclosure Using JPEG Images" Flaws in HHVM Servers

~ 7 Sep 2019 ~

Open Sourcing StringSifter

~ 27 Aug 2019 ~

How Do I Handle Security Alert Fatigue?

~ 23 Aug 2019 ~

License Plate "NULL"

~ 15 Aug 2019 ~

Sodinokibi ransomware searches for South Korean antivirus "Ahnlab" to inject its payload (because its autoup.exe is vulnerable). Also uses Windows' CompMgmtLauncher.exe's complete lack of checks to bypass UAC.

~ 13 Aug 2019 ~

Showing Vulnerability to a Machine: Automated Prioritization of Software Vulnerabilities

Live stream flailing ( start at 1HR 37Min ) install the new high security OS called "Qubes" finding it horrible to install and even worse to use.