920 - Search - Threat Intelligence - All Divisions

921 - Search - Feature Stories - Symantec Enterprise

922 - Search - Expert Perspectives - Symantec Enterprise

923 - Search - One Booth at RSAC™ 2025 Conference Will Justify Your Whole Trip

924 - Search - Optimize Data Classification at Rest With These Easy Steps

925 - Search - The Evolution of App Control, A Carbon Black Legend

926 - Search - Breaking: Ransomware Has Been Eradicated

927 - Search - Encrypted, Secured and Battle-Tested: Lessons From a Decade in Encryption Trenches

928 - Search - Cloud C² — Command & Control

929 - Search - Essential, Elite and Red Team

930 - Search - Terms of Service & Policies

931 - Search - PAYLOAD AWARDSGet your payload in front of thousands and enter to win. Nearly $10,000 in annual Hak5 prizes!

932 - Search - ADVANCED DUCKYSCRIPT COURSELearn directly from the creators! Unlock your creative potential with this comprehensive online course.

933 - Search - Threat ProtectionProofpoint Prime stops all human-centric threats for today’s and tomorrow’s landscape.

934 - Search - Defend DataTransform your information protection with a human-centric, omni-channel approach.

935 - Search - Combat Email and Cloud Threats

936 - Search - Comparing ProofpointEvaluating cybersecurity vendors? Check out our side-by-side comparisons.

937 - Search - Combat Data Loss and Insider Risk

938 - Search - English: Europe, Middle East, Africa

939 - Search - Hidden in Plain Sight: TA397’s New Attack Chain Delivers Espionage RATs

940 - Search - AI, Data Security, and CISO Shifts: Top Cybersecurity Trends to Watch in 2025

941 - Search - A Global Manufacturer’s Journey: Making the Switch from Abnormal Security to Proofpoint

942 - Search - Protect 2024: Proofpoint Sets New Standard for Human-Centric Security

943 - Search - EU lands 25% counter tariff punch on US, Trump pauses broad import levy hike – China exceptedWorld War FeeMiddle Kingdom gets 125%. So this is what it’s like living in reality TV

944 - Search - Microsoft resets ‘days since last Windows 11 problem’ counter to 0SenseShield the latest company to fall foul of 24H2

945 - Search - Microsoft puts $1B US datacenter builds on hold amid AI, tariff uncertaintyWorld War FeeCommitted $80B capex for DCs as recently as January. We wonder what changed?

946 - Search - Tech hiring stalls as AI hype, layoffs, tariffs, economic uncertainty, more collideAnd coming up next, Trump’s World War Fee

947 - Search - Staff at UK’s massive health service still have interoperability issues with electronic recordsGovernment plans to boost efficiency with IT need to get people onsidePublic Sector10 Apr 2025|1

948 - Search - Europol: Five pay-per-infect suspects cuffed, some spill secrets to copsOfficials teased more details to come later this yearCyber-crime10 Apr 2025|

949 - Search - Meta’s AI, built on ill-gotten content, can probably build a digital youLlama 4 Scout is just the right size to ingest a lifetime of Facebook and Insta postsAI + ML10 Apr 2025|2

950 - Search - The Regtranslates the letter in which Oracle kinda-sorta tells customers it was pwnedTL;DR: Move along, still nothing to see here - an idea that leaves infosec pros aghastCyber-crime10 Apr 2025|3

951 - Search - Fear of tariffs made the PC market great again in Q1 as vendors emptied factories to dodge price future hikesWorld War FeeExpected sales surge sparked by Windows 10 support ending could yet be trumped, analysts suggestPersonal Tech10 Apr 2025|4

952 - Search - Did someone say AI agents, Google asks, bursting inCloud NextCustomers aren’t sure, economy isn’t great, tech looks cute, thoughAI + ML10 Apr 2025|3

953 - Search - Google offers 7th-gen Ironwood TPUs for AI, with AI-inspired comparisonsCloud NextSure, we’re doing FP8 versus a supercomputer’s FP64. What of it?AI + ML10 Apr 2025|1

954 - Search - Trump kills clearances for infosec’s SentinelOne, ex-CISA boss Chris KrebsUpdatedAlleges cybersecurity agency was ‘weaponized’ to suppress debunked theoriesPublic Sector10 Apr 2025|22

955 - Search - Apple settles unfair labor charges brought by fired engineering managerWhistleblower Ashley Gjøvik hails iWatershed iMoment for iStaff iRightsCxO10 Apr 2025|2

956 - Search - Nvidia paid $1M for Mar-a-Lago meal, US later scrapped AI chip export crackdownBest after-dinner mint everAI + ML09 Apr 2025|12

957 - Search - Founder of facial-rec controversy biz Clearview AI booted from boardFrom wanting to weed out far-Left, anti-Trump migrants to amassing a huge database of internet photosAI + ML09 Apr 2025|4

958 - Search - ISC 2025: Hitting the Big 4-0Join the HPC, AI and QC communities in June to explore the future of performance-centric computingPartner Content

959 - Search - Musk’s DOGE muzzled on X over tape storage baloneyComment70 years old, yes. Obsolete? Not by a long shot

960 - Search - April’s Patch Tuesday leaves unlucky Windows Hello users unable to loginUpdatedCan’t Redmond ask its whizz-bang Copilot AI to fix it?Patches09 Apr 2025|7

961 - Search - Wyden blocks Trump’s CISA boss nominee, blames cyber agency for ‘actively hiding info’ about telecom insecurityIt worked for in 2018 with Chris Krebs. Will it work again?Networks09 Apr 2025|6

962 - Search - Someone compromised US bank watchdog to access sensitive financial filesOCC mum on who broke into email, but Treasury fingered China in similar hack months agoCyber-crime09 Apr 2025|1

963 - Search - Trump thinks we can make iPhones in the US just like China. Yeah, rightWorld War FeeOne’s a world power with extensive cutting-edge electronics manufacturing empire, the other is AmericaPersonal Tech09 Apr 2025|98

964 - Search - EU lands 25% counter tariff punch on US, Trump pauses broad import levy hike – China exceptedWorld War FeeMiddle Kingdom gets 125%. So this is what it’s like living in reality TVOn-Prem09 Apr 2025|76

965 - Search - Commercial space station outfit plans two Orbital Data Center nodes by the end of 2025Yep. It’s Axiom’s datacenters in SPAAAAACESystems09 Apr 2025|12

966 - Search - Microsoft puts $1B US datacenter builds on hold amid AI, tariff uncertaintyWorld War FeeCommitted $80B capex for DCs as recently as January. We wonder what changed?Systems09 Apr 2025|6

967 - Search - Bad luck, Windows 10 users. No fix yet for ransomware-exploited bugPatch TuesdayA novel way to encourage upgrades? Microsoft would never stoop so low

968 - Search - Tech hiring stalls as AI hype, layoffs, tariffs, economic uncertainty, more collideAnd coming up next, Trump’s World War FeeOn-Prem09 Apr 2025|6

969 - Search - UK officials insist ‘murder prediction tool’ algorithms purely abstractEven though policing department spent 2 years on ‘Minority Report’ evoking study predicting which criminals will become killersPublic Sector09 Apr 2025|38

970 - Search - Google’s got a hot cloud infosec startup, a new unified platform — and its eye on Microsoft’s $20B+ security bizCloud NextHow Chocolate Factory hopes to double down on enterprise-secCSO09 Apr 2025|6

971 - Search - FreeDOS 1.4: Still DOS, still FOSS, more modern than everThe 1990s called – they’re impressedOSes09 Apr 2025|26

972 - Search - Microsoft resets ‘days since last Windows 11 problem’ counter to 0SenseShield the latest company to fall foul of 24H2OSes09 Apr 2025|24

973 - Search - UK’s answer to DARPA sprouts new ideas, like programmable plantsUpdated programs suggest ARIA will keep singing for another yearScience09 Apr 2025|25

974 - Search - Microsoft lists seven habits of highly effective Windows 11 usersStrangely no eighth tip to use something elseOSes09 Apr 2025|70

975 - Search - Laser-cooled chips: Maybe coming soon-ish to a datacenter near youPublic-private partnership zaps photons at hotspots, hopes to ship by 2027Science09 Apr 2025|13

976 - Search - Copyright-ignoring AI scraper bots laugh at robots.txt so the IETF is trying to improve itRecently formed AI Preferences Working Group has August deadline to develop ideas on how to tell crawlers to go away, or come for a feastAI + ML09 Apr 2025|33

977 - Search - DOGE dilettantes ‘didn’t test’ Social Security fraud detection tool at appropriate scaleFeds claim creaky COBOL, user spike is real reason key portal now flakyPublic Sector09 Apr 2025|60

978 - Search - Pharmacist accused of using webcams to spy on women in intimate moments at work, homeLawsuit claims sick cyber-voyeurism went undetected for years, using hundreds of PCs, due to lax infosecCyber-crime09 Apr 2025|20

979 - Search - What native cloud security tools won’t catchNative tools help, but they don’t cover everything - here’s what they miss and how to close the gapsPartner Content

980 - Search - AI entrepreneur sent avatar to argue in court – and the judge shut it down fastInterviewWe hear from court-scolded Jerome Dewald, who insists lawyer-bots have a futureAI + ML09 Apr 2025|24

981 - Search - TSMC blew whistle on suspected verboten exports to Huawei – that may cost it $1B+What did we learn today, hm?On-Prem08 Apr 2025|26

982 - Search - Canada OKs construction of first licensed teeny atomic reactorBuilt by 2028? Maybe. Powering homes? That’s another slip of paper entirelyScience08 Apr 2025|26

983 - Search - Are speedy responses more important than backups for recovery?CTOIndustry approach to keeping top-quality copies may mask importance of other recovery mainstays

984 - Search - Oracle’s masterclass in breach comms: Deny, deflect, repeatOpinionFallout shows how what you say must be central to disaster planning

985 - Search - For healthcare orgs, DR means making sure docs can save lives during ransomware infectionsCXOOrganizational, technological resilience combined defeat the disease that is cybercrime

986 - Search - Heterogeneous stacks, ransomware, and ITaaS: A DR nightmareCommentRecovery’s never been harder in today’s tangled, outsourced infrastructure

987 - Search - Ransomware crews add ‘EDR killers’ to their arsenal – and some aren’t even malwareinterviewCrims are disabling security tools early in attacks, Talos says

988 - Search - Meta accused of Llama 4 bait-and-switch to juice AI benchmark rankDid Facebook giant rizz up LLM to win over human voters? It appears soAI + ML08 Apr 2025|3

989 - Search - Boeing 787 radio software safety fix didn’t work, says Qatar’Loss of safe separation between aircraft, collision, or runway incursion’ is not what we want to hearApplications08 Apr 2025|40

990 - Search - Don’t open that JPEG in WhatsApp for Windows. It might be an .EXEWhat a MIME fieldPatches08 Apr 2025|28

991 - Search - Don’t let cyberattacks keep you downLearn how Infinidat’s enterprise cyber storage solutions can enable near-immediate recoverySponsored Post

992 - Search - Windows Server Update Services live to patch another dayDisconnected device scenarios cause headaches for MicrosoftOSes08 Apr 2025|13

993 - Search - Tariff-ied Framework pulls laptops, Keyboardio warns of keystroke sticker shockWorld War FeeSmall IT hardware firms feel the heat from Trump making prices greatPersonal Tech08 Apr 2025|14

994 - Search - ‘Copilot will remember key details about you’ for a ‘catered to you’ experienceAnd Vision will ‘read’ your screen and interact with the content, says MicrosoftAI + ML08 Apr 2025|59

995 - Search - Scattered Spider stops the Rickrolls, starts the RAT raceDespite arrests, eight-legged menace targeted more victims this yearResearch08 Apr 2025|5

996 - Search - UALink debuts its first AI interconnect spec – usable in just 18 short monthsNo-Nvidia networking club is banking on you running different GPUs on one networkNetworks08 Apr 2025|

997 - Search - Procter & Gamble study finds AI could help make Pringles tastier, spice up Old Spice, sharpen GilletteGo on, then, knock yourself out, palAI + ML08 Apr 2025|41

998 - Search - Boffins turn Moon dirt into glass for solar panels, eye future lunar base powerLugging a solar furnace to melt it could slash the need to launch bulky power gear from EarthScience08 Apr 2025|32

999 - Search - IBM’s z17 mainframe – now with 7.5x more AI performanceWho wouldn’t want predictive business insights in a week like this? (We jest, it can’t solve for Trump tariffs)Systems08 Apr 2025|10

1000 - Search - The smart way to tackle data storage challengesWhy high-performance object storage is needed for modern data-intensive workloads

1001 - Search - Building a better digital future for SMEsHow smaller businesses can grab the opportunities that AI and advanced collaboration and connectivity tools give them

1002 - Search - AI puts value in data. So how do we get it out?How HPE is helping to manage storage complexity

1003 - Search - Data deluge pushes financial services deeper into AIHarnessing AI to optimize applications and services is crucial but building the infrastructure is equally important

1004 - Search - Brit universities told to keep up the world-class research with less cashGovernment boasts of £14B in R&D spending, but grant body takes £300M hitScience08 Apr 2025|53

1005 - Search - UK data watchdog seeks fresh blood as more complaints lie unanswered for up to a yearMultiple red-rated performance metrics blamed on inability to answer rising numbers of data protection worriesPersonal Tech08 Apr 2025|14

1006 - Search - Eight charged with corruption, money laundering, in case linked to Huawei lobbyingChinese tech giant has fired two staff, but Europe’s anti-fraud org isn’t probingNetworks08 Apr 2025|5

1007 - Search - Samsung trumps USA’s tariffs by making displays in Mexico, and elsewhere if neededWorld War FeeMay also have fixed AI memory biz if better-than-expected revenue guidance is anything to go byPersonal Tech08 Apr 2025|43

1008 - Search - As CISA braces for more cuts, threat intel sharing takes a hitAnalysisHow will ‘gutting’ civilian defense agency make American cybersecurity great again?Public Sector08 Apr 2025|9

1009 - Search - Oracle says its cloud was in fact compromisedReliability, honesty, accuracy. And then there’s this lotPaaS + IaaS08 Apr 2025|35

1010 - Search - Microsoft’s AI masterplan: Let OpenAI burn cash, then build on their successesAnalysisRedmond’s not alone: AWS, Alibaba, DeepSeek also rely on others blazing the trailAI + ML07 Apr 2025|8

1011 - Search - Cloud security explained: What’s left exposed?Think AWS has security covered? Think again. Discover real-world examples of what it doesn’t secure and how to protect your environmentPartner Content

1012 - Search - Trump tariffs to make prices great – a gainWorld War FeeAs costs for US shoppers set to rise, markets slump, orange is new red, we speak to economic expertsPublic Sector07 Apr 2025|77

1013 - Search - That massive GitHub supply chain attack? It all started with a stolen SpotBugs tokenBut this mystery isn’t over yet, Unit 42 opinesDevops07 Apr 2025|7

1014 - Search - Trump doubles down, vows to make Chinese imports even more expensive for AmericansWorld War FeePresident to up tariffs on Middle Kingdom goods to 104% from 54%Public Sector07 Apr 2025|226

1015 - Search - Alleged Scattered Spider SIM-swapper must pay back $13.2M to 59 victimsCrummy OPSEC leads to potentially decades in prisonCyber-crime07 Apr 2025|1

1016 - Search - Trump tariffs thwart TikTok takeover as China digs in heelsWorld War FeeVideo app’s future once again caught between trade war and political whiplashApplications07 Apr 2025|23

1017 - Search - SpaceX scores $5.9B lion’s share of Space Force launch contractsULA wins $5.4B and Blue Origin $2.4BPublic Sector07 Apr 2025|45

1018 - Search - Please sir, may we have some Moore? Doesn’t look that wayOpinionWe’re on a roadmap to nowhere. Come on insideColumnists07 Apr 2025|30

1019 - Search - Chrome to patch decades-old flaw that let sites peek at your historyAfter 23 years, the privacy plumber has finally arrived to clean up this messPatches07 Apr 2025|7

1020 - Search - Maximizing ROI with integrated SDNWhy SDN should be front of mind for IT teams evaluating VMware alternativesPartner Content

1021 - Search - UK’s attempt to keep details of Apple ‘backdoor’ case secret… deniedLast month’s secret hearing comes to lightCSO07 Apr 2025|108

1022 - Search - EU may target US tech giants in tariff responseWorld War FeeBy putting services in scope, €18 trillion trade bloc looks to focus tech sector mindsPublic Sector07 Apr 2025|183

1023 - Search - Brit telcos ask suppliers to clean up emissions mess – politely, with no teethDigital Connectivity Forum lays out climate goals, but enforcement is strictly optionalNetworks07 Apr 2025|1

1024 - Search - Bad luck, Windows 10 users. No fix yet for ransomware-exploited bugPatch TuesdayA novel way to encourage upgrades? Microsoft would never stoop so lowPatches08 Apr 2025|12

1025 - Search - Asian tech players react to US tariffs with delays, doubts, deal-makingAsia In BriefPLUS: Qualcomm acquires Vietnamese AI outfit; China claims US hacked winter games; India’s browser challenge winner disputed; and morePublic Sector07 Apr 2025|11

1026 - Search - Signalgate solved? Report claims journalist’s phone number accidentally saved under name of Trump officialInfosec in BriefPLUS: Google re-patches Quick Share flaws; Critical Cisco flaw exploited; WordPress plugin trouble; and moreSecurity07 Apr 2025|41

1027 - Search - Trump fires NSA boss, deputy’Nonpartisan’ intelligence chief booted less than two years into the jobPublic Sector04 Apr 2025|109

1028 - Search - 30 minutes to pwn town: Are speedy responses more important than backups for recovery?The industry’s approach to keeping quality backups may be masking the importance of other recovery mainstaysDisaster Recovery Week04 Apr 2025|4

1029 - Search - Alan Turing Institute: UK can’t handle a fight against AI-enabled crimsLaw enforcement facing huge gap in ‘AI adoption’AI + ML04 Apr 2025|16

1030 - Search - Ex-ASML, NXP staffer accused of stealing chip secrets, peddling them to MoscowWe’re not Putin up with this alleged industrial espionage, say the DutchCyber-crime04 Apr 2025|5

1031 - Search - Retirement funds reportedly raided after unexplained portal probes and data theftAustralians checking their pensions are melting down call centers and websitesCyber-crime04 Apr 2025|9

1032 - Search - Signalgate: Pentagon watchdog probes Defense Sec HegsethClassification compliance? Records retention requirements? How quaintPublic Sector04 Apr 2025|108

1033 - Search - For flux sake: CISA, annexable allies warn of hot DNS threatShape shifting technique described as menace to national securityCSO03 Apr 2025|5

1034 - Search - Suspected Chinese spies right now hijacking buggy Ivanti gear – for third time in 3 yearsSimple denial-of-service blunder turned out to be remote unauth code exec disasterCyber-crime03 Apr 2025|3

1035 - Search - When disaster strikes, proper preparation prevents poor performanceIt’s going to happen to you one day, so get your ducks in a rowDisaster Recovery Week03 Apr 2025|10

1036 - Search - Why is someone mass-scanning Juniper and Palo Alto Networks products?UpdatedEspionage? Botnets? Trying to exploit a zero-day?Networks03 Apr 2025|11

1037 - Search - EU: These are scary times – let’s backdoor encryption!ProtectEU plan wants to have its cake and eat it tooSecurity03 Apr 2025|145

1038 - Search - Heterogeneous stacks, ransomware, and ITaaS: A DR nightmareCommentRecovery’s never been harder in today’s tangled, outsourced infrastructureDisaster Recovery Week03 Apr 2025|6

1039 - Search - Customer info allegedly stolen from compromised supplier of Royal Mail, SamsungUpdatedStamp it out: Infostealer malware at German outfit may be culpritCyber-crime03 Apr 2025|9

1040 - Search - Raw Deel: Corporate spy admits role in espionage at HR software biz RipplingDouble-oh-sh…CSO02 Apr 2025|10

1041 - Search - Crimelords at Hunters International tell lackeys ransomware too ‘risky’Bosses say theft now the name of the game with a shift in tactics, apparent brandingCyber-crime02 Apr 2025|6

1042 - Search - Oracle’s masterclass in breach comms: Deny, deflect, repeatOpinionFallout shows how what you say must be central to disaster planningDisaster Recovery Week02 Apr 2025|12

1043 - Search - For healthcare orgs, DR means making sure docs can save lives during ransomware infectionsOrganizational, technological resilience combined defeat the disease that is cybercrimeDisaster Recovery Week02 Apr 2025|6

1044 - Search - Oracle faces Texas-sized lawsuit over alleged cloud snafu and radio silenceVictims expect to spend considerable time and money over privacy incident, lawyers arguePaaS + IaaS02 Apr 2025|9

1045 - Search - One of the last of Bletchley Park’s quiet heroes, Betty Webb, dies at 101ObitTip-lipped for 30 years before becoming an ‘unrivaled advocate’ for the siteSecurity02 Apr 2025|41

1046 - Search - Apple belatedly patches actively exploited bugs in older OSesCupertino already squashed ’em in more recent releases - which this week get a fresh round of fixesPatches02 Apr 2025|10

1047 - Search - North Korea’s fake tech workers now targeting European employersWith help from UK operatives, because it’s getting tougher to run the scam in the USACyber-crime02 Apr 2025|16

1048 - Search - Forget Signal. National Security Adviser Waltz now accused of using Gmail for workBut his emails! Sharing them with Google!Public Sector02 Apr 2025|124

1049 - Search - Microsoft to mark five decades of Ctrl-Alt-Deleting the competitionCopilot told us that half a century is 25 years. It feels much longerSoftware01 Apr 2025|121

1050 - Search - Google makes end-to-end encrypted Gmail easy for all – even Outlook usersThe UK government must be thrilledSecurity01 Apr 2025|27

1051 - Search - UK threatens £100K-a-day fines under new cyber billTech secretary reveals landmark legislation’s full details for first timeCyber-crime01 Apr 2025|44

1052 - Search - GCHQ intern took top secret spy tool home, now faces prisonNot exactly Snowden levels of skillSecurity01 Apr 2025|87

1053 - Search - CISA spots spawn of Spawn malware targeting Ivanti flawResurge an apt name for malware targeting hardware maker that has security bug after security bugCyber-crime01 Apr 2025|1

1054 - Search - Top cybersecurity boffin, wife vanish as FBI raids homesUpdatedIndiana Uni rm -rf online profiles while agents haul boxes of evidenceResearch31 Mar 2025|21

1055 - Search - Oracle Cloud security SNAFU latest: IT giant accused of pedantry as evidence scrubbed1990s incident response in 2025PaaS + IaaS31 Mar 2025|8

1056 - Search - Check Point confirms breach, but says it was ‘old’ data and crook made ‘false’ claimsExplanation leaves a ’lot of questions unanswered,’ says infosec researcherCyber-crime31 Mar 2025|4

1057 - Search - China cracks down on personal information collection. No, seriouslyAsia In BriefPLUS: Indonesia crimps social media, allows iPhones; India claims rocket boost; In-flight GenAI for Japan AirlinesSecurity31 Mar 2025|12

1058 - Search - Oracle Health reportedly warns of info leak from legacy serverInfosec in briefPLUS: OpenAI bumps bug bounties bigtime; INTERPOL arrests 300 alleged cyber-scammers; And more!Security30 Mar 2025|3

1059 - Search - Malware in Lisp? Now you’re just being cruelMiscreants warming to Delphi, Haskell, and the like to evade detectionResearch29 Mar 2025|56

1060 - Search - Cardiff’s children’s chief confirms data leak 2 months after cyber risk was ’escalated’Department director admits Welsh capital’s council still trying to get heads around threat of dark web leaksSecurity28 Mar 2025|3

1061 - Search - After Chrome patches zero-day used to target Russians, Firefox splats similar bugSingle click on a phishing link in Google browser blew up sandbox on WindowsPatches28 Mar 2025|10

1062 - Search - Cyber-crew claims it cracked American cableco, releases terrible music video to prove itWOW!DID!SOMEONE!REALLY!STEAL!DATA!ON!400K!USERS?!Cyber-crime28 Mar 2025|7

1063 - Search - China’s FamousSparrow flies back into action, breaches US org after years off the radarCrew also cooked up two fresh SparrowDoor backdoor variants, says ESETNetworks27 Mar 2025|2

1064 - Search - Security shop pwns ransomware gang, passes insider info to authoritiesResearchers say ‘proactive’ approach is needed to combat global cybercrimeSecurity27 Mar 2025|7

1065 - Search - CrushFTP CEO’s feisty response to VulnCheck’s CVE for critical make-me-admin bugScreenshot shows company head unhappy, claiming ‘real CVE is pending’Security27 Mar 2025|5

1066 - Search - UK’s first permanent facial recognition cameras installed in South LondonAs if living in Croydon wasn’t bad enoughSecurity27 Mar 2025|162

1067 - Search - Ransomwared NHS software supplier nabs £3M discount from ICO for good behaviorData stolen included checklist for medics on how to get into vulnerable people’s homesCyber-crime27 Mar 2025|3

1068 - Search - Signalgate storm intensifies as journalist releases full secret Houthi airstrike chatUpdatedSo F-18 launch times, weapons, drone support aren’t classified now … who knew?CSO26 Mar 2025|265

1069 - Search - US defense contractor cops to sloppy security, settles after infosec lead blows whistleMORSE to pay – .. .-.. .-.. .. — -. … for failing to meet cyber-gradeCSO26 Mar 2025|11

1070 - Search - Files stolen from NSW court system, including restraining orders for violenceVictims’ details at risk after criminals download 9,000 files from court databaseCyber-crime26 Mar 2025|2

1071 - Search - Credible nerd says stop using atop, doesn’t say why, everyone panicsUpdatedBad news about the Linux system monitor may be on the waySecurity26 Mar 2025|52

1072 - Search - NCSC taps influencers to make 2FA go viralWho knew social media stars had a role to play in building national cyber resilience?Security26 Mar 2025|13

1073 - Search - There are 10,000 reasons to doubt Oracle Cloud’s security breach denialCustomers come forward claiming info was swiped from prodCyber-crime25 Mar 2025|43

1074 - Search - Infosec pro Troy Hunt HasBeenPwned in Mailchimp phish16,000 stolen records pertain to former and active mail subscribersCyber-crime25 Mar 2025|37

1075 - Search - You know that generative AI browser assistant extension is probably beaming everything to the cloud, right?Just an FYI, likeApplications25 Mar 2025|18

1076 - Search - VanHelsing ransomware emerges to put a stake through your Windows heartThere’s only one rule – don’t attack Russia, duhResearch25 Mar 2025|7

1077 - Search - Hm, why are so many DrayTek routers stuck in a bootloop?Time to update your firmware, if you can, to one with the security fixes, cough coughCyber-crime25 Mar 2025|58

1078 - Search - Public-facing Kubernetes clusters at risk of takeover thanks to Ingress-Nginx flawHow many K8s systems are sat on the internet front porch like that … Oh, thousands, apparentlyPatches25 Mar 2025|1

1079 - Search - OTF, which backs Tor, Let’s Encrypt and more, sues to save its funding from Trump cutsUpdatedKari, are you OK, are you OK, Kari?Networks25 Mar 2025|109

1080 - Search - Top Trump officials text secret Yemen airstrike plans to journo in Signal SNAFUUpdatedMassive OPSEC fail from the side who brought you ’lock her up’Public Sector24 Mar 2025|186

1081 - Search - FCC on the prowl for Huawei and other blocked Chinese makers in AmericaBe vewy vewy quiet, I’m hunting racketsNetworks24 Mar 2025|8

1082 - Search - As nation-state hacking becomes ‘more in your face,’ are supply chains secure?InterviewEx-US Air Force officer says companies shouldn’t wait for govt mandatesCSO24 Mar 2025|10

1083 - Search - AI agents swarm Microsoft Security CopilotLooking to sort through large volumes of security info? Redmond has your backendSecurity24 Mar 2025|13

1084 - Search - 23andMe’s genes not strong enough to avoid Chapter 11CEO steps down after multiple failed attempts to take the DNA testing company privateCyber-crime24 Mar 2025|46

1085 - Search - Is Washington losing its grip on crypto, or is it a calculated pivot to digital dominance?AnalysisIt’s been a very busy week for Digicash Donald’s administrationSecurity24 Mar 2025|17

1086 - Search - Microsoft tastes the unexpected consequences of tariffs on timeOpinionThrow a spanner in the works, best get good at fixing things. Now, where did you put that spanner?Security24 Mar 2025|105

1087 - Search - Mobsters now overlap with cybercrime gangs and use AI for evil, Europol warnsInfosec In BriefPLUS: Russian bug-buyers seeks Telegram flaws; Another WordPress security mess; NIST backlog grows; and more!Security24 Mar 2025|7

1088 - Search - China bans compulsory facial recognition and its use in private spaces like hotel roomsAsia In BriefPLUS: Zoho’s Ulaa anointed India’s most patriotic browser; Typhoon-like gang targets Taiwan; Japan debates offensive cyber-ops; and moreSecurity23 Mar 2025|19

1089 - Search - Oracle Cloud says it’s not true someone broke into its login servers and stole dataDespite evidence to the contrary as alleged pilfered info goes on saleCyber-crime23 Mar 2025|28

1090 - Search - Ex-NSA boss: Election security focus helped dissuade increase in Russian meddling with USInterviewPlus AI in the infosec world, why CISA should know its place, and moreCSO23 Mar 2025|43

1091 - Search - AdTech CEO whose products detected fraud jailed for financial fraudMade up revenue and pretended to use non-existent dataCyber-crime21 Mar 2025|9

1092 - Search - Paragon spyware deployed against journalists and activists, Citizen Lab claimsInfosec newsbytesPlus: Customer info stolen from ‘parental control’ software slinger SpyX; F-35 kill switch deniedResearch21 Mar 2025|17

1093 - Search - Capital One cracker could be sent back to prison after judges rule she got off too lightlyFeds want book thrown at Paige Thompson, who pinched 100M customer recordsCyber-crime21 Mar 2025|18

1094 - Search - Dept of Defense engineer took home top-secret docs, booked a fishing trip to Mexico – then the FBI showed upSo much for that vacationPublic Sector20 Mar 2025|60

1095 - Search - Infoseccers criticize Veeam over critical RCE vulnerability and a failing blacklistPalming off the blame using an ‘unknown’ best practice didn’t go down well eitherPatches20 Mar 2025|7

1096 - Search - Too many software supply chain defense bibles? Boffins distill adviceHow to avoid another SolarWinds, Log4j, and XZ Utils situationSecurity20 Mar 2025|10

1097 - Search - The post-quantum cryptography apocalypse will be televised in 10 years, says UK’s NCSCWow, a government project that could be on time for once … cos it’s gonna be wayyyy more than a decadeSecurity20 Mar 2025|57

1098 - Search - Attackers swipe data of 500k+ people from Pennsylvania teachers unionSSNs, payment details, and health info tooCyber-crime19 Mar 2025|3

1099 - Search - Names, bank info, and more spills from top sperm bankCyber-crime is officially getting out of handBootnotes19 Mar 2025|17

1100 - Search - IBM scores perfect 10 … vulnerability in mission-critical OS AIXBig Blue’s workstation workhorse patches hole in network installation manager that could let the bad guys inPatches19 Mar 2025|5

1101 - Search - Ex-US Cyber Command chief: Europe and 5 Eyes can’t fully replicate US intelCue deepening existential European dread as Rest of World contemplates Trump turning off the info tapSecurity19 Mar 2025|75

1102 - Search - Show top LLMs some code and they’ll merrily add in the bugs they saw in trainingOne more time, with feeling … Garbage in, garbage outAI + ML19 Mar 2025|33

1103 - Search - CISA fires, now rehires and immediately benches security crew on full payDOGE efficiency in actionPublic Sector18 Mar 2025|51

1104 - Search - US tech jobs outlook clouded by DOGE cuts, Trump tariffsHiring remains relatively strong as analysts warn of slowdownResearch18 Mar 2025|57

1105 - Search - How to access the Dark Web using the Tor Browser

1106 - Search - How to enable Kernel-mode Hardware-enforced Stack Protection in Windows 11

1107 - Search - How to use the Windows Registry Editor

1108 - Search - How to backup and restore the Windows Registry

1109 - Search - How to start Windows in Safe Mode

1110 - Search - How to remove a Trojan, Virus, Worm, or other Malware

1111 - Search - How to show hidden files in Windows 7

1112 - Search - How to see hidden files in Windows

1113 - Search - Remove the Theonlinesearch.com Search Redirect

1114 - Search - Remove the Smartwebfinder.com Search Redirect

1115 - Search - How to remove the PBlock+ adware browser extension

1116 - Search - Remove the Toksearches.xyz Search Redirect

1117 - Search - Remove Security Tool and SecurityTool (Uninstall Guide)

1118 - Search - How to Remove WinFixer / Virtumonde / Msevents / Trojan.vundo

1119 - Search - How to remove Antivirus 2009 (Uninstall Instructions)

1120 - Search - How to remove Google Redirects or the TDSS, TDL3, or Alureon rootkit using TDSSKiller

1121 - Search - Locky Ransomware Information, Help Guide, and FAQ

1122 - Search - CryptoLocker Ransomware Information Guide and FAQ

1123 - Search - CryptorBit and HowDecrypt Information Guide and FAQ

1124 - Search - CryptoDefense and How_Decrypt Ransomware Information Guide and FAQ

1125 - Search - Reach out to get featured—contact us to send your exclusive story idea, research, hacks, or ask us a question or leave a comment/feedback!

1126 - Search - File Integrity and Change Monitoring

1127 - Search - The Cost of Ransomware: Shutdowns & Extortion

1128 - Search - Cyber Fraud: The Primary Culprit in UK Payment Fraud

1129 - Search - April 2025 Patch Tuesday Analysis

1130 - Search - How CEOs Can Embrace GenAI for Business Growth

1131 - Search - Information Security Risk Management (ISRM) Boosts Compliance by Undermining Configuration Drift

1132 - Search - Mastering Cybersecurity Incident Communication Part 1: A Proactive Approach

1133 - Search - Tripwire Patch Priority Index for March 2025

1134 - Search - HellCat Ransomware: What You Need To Know

1135 - Search - Japan Passes Active Cyber Defense Bill

1136 - Search - Top Cybersecurity Considerations When Moving Commercial Premises

1137 - Search - Federal Desktop Core Configuration (FDCC/USGCB) Compliance

1138 - Search - VanHelsing Ransomware: What You Need To Know

1139 - Search - Implementing Privileged Access Workstations: A Step-by-Step Guide

1140 - Search - How to Build a Mature Vulnerability Management Program

1141 - Search - An Introduction to Data Masking in Privacy Engineering

1142 - Search - MAS Compliance 101: Key Regulations for Financial Institutions in Singapore

1143 - Search - Cross-Border Data Compliance: Navigating Public Security Regulations in a Connected World

1144 - Search - Top 10 Scam Techniques: What You Need to Know

1145 - Search - BlackLock Ransomware: What You Need To Know

1146 - Search - CMS ARS: A Blueprint for US Healthcare Data Security and Compliance

1147 - Search - File Integrity & Change Monitoring(55)

1148 - Search - IT Security Operations & Asset Discovery(9)

1149 - Search - A Sneaky Phish Just Grabbed my Mailchimp Mailing List

1150 - Search - Soft-Launching and Open Sourcing the Have I Been Pwned Rebrand

1151 - Search - We’re Backfilling and Cleaning Stealer Logs in Have I Been Pwned

1152 - Search - Processing 23 Billion Rows of ALIEN TXTBASE Stealer Logs

1153 - Search - Data breach disclosure 101: How to succeed after you’ve failed

1154 - Search - Data from connected CloudPets teddy bears leaked and ransomed, exposing kids’ voice messages

1155 - Search - Here’s how I verify data breaches

1156 - Search - When a nation is hacked: Understanding the ginormous Philippines data breach

1157 - Search - How I optimised my life to make my job redundant

1158 - Search - AFCEA International and LA Chapter Aid High School Damaged by California Wildfires

1159 - Search - How Generative AI Improves Military Decision-Making

1160 - Search - New DARPA Initiative Challenges the Creation of Operational Quantum Computers

1161 - Search - Annual Assessment Lists Primary Threats to U.S. National Security

1162 - Search - The Risk and Opportunity of Open-Source Intelligence

1163 - Search - The AI Race With China and the Uncertain Future of Truth

1164 - Search - Steely Determination Brings Metal Foam to Production

1165 - Search - Nature Inspires New Drone Technologies

1166 - Search - Experimentation Task Force Improves Long-Range Defense Comms

1167 - Search - On Point: Q&A With Marjorie Quant

1168 - Search - ULA’s Vulcan Rocket Certified for National Security Missions

1169 - Search - Secure View Presents What Is Needed

1170 - Search - DoD Appoints Army Col. Laurie Buckhout (Ret.) to Cyber Defense Policy Position

1171 - Search - New Flat-Panel Satellite Antenna Technology Available To Support European Allies

1172 - Search - Cybersecurity Is at the Heart of the Army’s Network Plan

1173 - Search - Greater Emphasis on AI at NGA

1174 - Search - DoD Reaffirms Software Acquisition Pathway Use

1175 - Search - UK Details New Cybersecurity Legislation To Promote Economic Growth

1176 - Search - Cyber Command 2.0 Eyes Creation of a Cyber Innovation Warfare Center

1177 - Search - Katie Arrington: Change Is Good and Change Is Coming

1178 - Search - The PRC Continues Its Authoritarian Repression Abroad

1179 - Search - Intelligence Community AI Cybersecurity Program Achieves ‘Massive Scientific Impact’

1180 - Search - Finland Aims High With Its 2030 Drone Development Goals

1181 - Search - President’s Commentary: The Chinese Communist Party’s Big Bad Wolf Transformation

1182 - Search - The Importance of Wireless Airspace Defense in Today’s Enterprise Environment

1183 - Search - For Pentagon’s AI programs, It’s Time for Boots on the Ground

1184 - Search - Seesaw Training: Balancing Training of Your Current Role With Career Development

1185 - Search - Data Interoperability Unlocked: Empowering the Air Force for Fifth- and Sixth-Generation Warfare

1186 - Search - ONLY Cynet Delivers 100% Protection and 100% Detection Visibility in the 2024 MITRE ATT&CK Evaluation

1187 - Search - Why Cybersecurity Leaders Trust the MITRE ATT&CK Evaluations

1188 - Search - Cynet Enables 426% ROI in Forrester Total Economic Impact Study

1189 - Search - Standing Up to Disinformation and Its Unprecedented Threats

1190 - Search - Empowering Troops, Enhancing Battlespace Awareness With Private Wireless

1191 - Search - Bringing U.S. Dominance to the Spectrum

1192 - Search - All-in-One: How Cynet Is Revolutionizing Cybersecurity for MSPs

1193 - Search - Is It Finally Time to Say Goodbye to Unsafe Mobile Communication Practices?

1194 - Search - Disruptive By Design: Is it Possible the United States and China Are Already at War?

1195 - Search - Cross-Cloud Collaboration Paves the Way for Data Transparency: OPM’s Groundbreaking Analytics Solution

1196 - Search - Patch Tuesday, April 2025 Edition

1197 - Search - Cyber Forensic Expert in 2,000+ Cases Faces FBI Probe

1198 - Search - had no record of transcripts for Lanterman

1199 - Search - How Each Pillar of the 1st Amendment is Under Attack

1200 - Search - When Getting Phished Puts You in Mortal Danger

1201 - Search - Arrests in Tap-to-Pay Scheme Powered by Phishing

1202 - Search - a deep dive into the operations of China-based phishing cartels

1203 - Search - DOGE to Fired CISA Staff: Email Us Your Personal Data

1204 - Search - ClickFix: How to Infect Your PC in Three Easy Steps

1205 - Search - first spotted in targeted attacks last year

1206 - Search - Microsoft: 6 Zero-Days in March 2025 Patch Tuesday

1207 - Search - Alleged Co-Founder of Garantex Arrested in India

1208 - Search - Feds Link $150M Cyberheist to 2022 LastPass Hacks

1209 - Search - the LastPass breach story published here in September 2023

1210 - Search - How to Break Into Security

1211 - Search - House Democrats urge DHS secretary to halt reported plan to dismantle FEMAU.S. House Committee members have urged the Secretary of the Department of Homeland Security (DHS) not to proceed with the reported plan of the administration of President Donald Trump to dismantle the Federal Emergency Management Agency (FEMA). The members identified…

1212 - Search - House Republicans reintroduce bill to counter Chinese cyber threats to critical infrastructureMembers of the U.S. House Committee on Homeland Security reintroduced legislation this week to combat growing cyber threats from the Chinese Communist Party (CCP) against the nation’s critical infrastructure sector. The bill would require the federal government to assess and…

1213 - Search - Munich Re sees untapped potential in $15.3B cyber insurance market amid rising threats and evolving risksGerman multinational insurance company Munich Re estimates that the global cyber insurance market totaled US$15.3 billion in 2024, corresponding to less than one percent of the global premium volume for property and casualty insurance in 2024, though underscoring the potential…

1214 - Search - European Commission launches consultation on strengthening healthcare cyber defenses, seeks input by Jun. 30The European Commission has initiated a consultation on its January Action Plan, which was designed to enhance cybersecurity measures for hospitals and healthcare providers. This process seeks input from healthcare professionals, cybersecurity experts, policymakers, and the public to develop effective…

1215 - Search - US DOE unveils plans to co-locate data centers and energy infrastructure, seeks input on AI infrastructure developmentThe U.S. Department of Energy (DOE) has announced plans to help ensure America leads the world in Artificial Intelligence (AI) and lower energy costs by co-locating data centers and new energy infrastructure on DOE lands. DOE has released a Request…

1216 - Search - European Commission rolls out ProtectEU strategy to boost internal security, resilience against hybrid threatsThe European Commission has released ProtectEU, a comprehensive European Internal Security Strategy designed to assist Member States and enhance the EU’s capacity to ensure the safety of its citizens. The strategy outlines a vision and work plan for the future,…

1217 - Search - Hardware vulnerabilities in Hitachi Energy, ABB, B&R ICS devices pose critical infrastructure threatLast week, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) released five ICS (industrial control systems) advisories providing timely information about current security issues, vulnerabilities, and exploits. The agency warned of the presence of hardware vulnerabilities in equipment from Hitachi…

1218 - Search - Urgent need for resilient industrial cybersecurity professionals to defend ICS/OT systems from rising cyber attacksSafeguarding digital frontiers in rapidly evolving industrial environments has become supremely crucial nowadays. Advances in interconnected ICS (industrial…Apr 06, 202514 min read

1219 - Search - Industrial Cybersecurity Market Outlook 2025: Focus on quantifying risk, embracing AI, building operational resilienceAs the digital transformation shapes the industrial cybersecurity sector, organizations must increasingly be prepared to adopt cyber risk…Mar 30, 202515 min read

1220 - Search - Choosing consequence-based cyber risk management to prioritize impact over probability, redefine industrial securityWith cyber attacks and threats continuing to escalate in tandem with geopolitical tensions, consequence-based cyber risk management has…Mar 23, 202518 min read

1221 - Search - Strengthening OT/ICS incident response to address growing complexity of cyber threats, deliver business continuityEvolving cyber threat landscapes have led to OT/ICS incident response priorities being under significant pressure. By stressing the…Mar 16, 202516 min read

1222 - Search - Empowering organizations to protect critical infrastructure with advanced OT network monitoring for cyber threat defenseIncreasing cyber threats and attacks have led modern organizations to focus on OT network monitoring, as it has…Mar 09, 202520 min read

1223 - Search - Highlighting focus on rise of industrial CISOs to balance organizational cybersecurity, operations, resilienceAs the boundaries between IT and OT environments blur and regulators move to bolster ICS cybersecurity across critical…Mar 02, 202515 min read

1224 - Search - Prioritizing organizational cybersecurity governance, boosting operational resilience across OT, ICS environmentsIn a world of advancing technological progress, the role of cybersecurity governance across OT (operational technology) and ICS…Feb 23, 202519 min read

1225 - Search - Roping in cyber risk quantification across industrial networks to safeguard OT asset owners amid rising threatsWith the changing threat environment, industrial and operational environments are under greater pressure than ever to reconcile operational…Feb 16, 202514 min read

1226 - Search - S4x25 and BSidesICS: Where industrial cybersecurity experts converge to foster collaboration and innovationAs the industrial cybersecurity community converges in Tampa, Florida for the upcoming S4x25 and BSidesICS events, there is…Feb 09, 202515 min read

1227 - Search - Evolving role of women in OT/ICS cybersecurity, as S4x25 and BSides for ICS 2025 address inclusion, resilienceAs the OT and ICS cybersecurity landscape continues to evolve, so does the role of women as they…Feb 02, 202514 min read

1228 - Search - Forescout launches eyeScope, a cloud-based solution for enhanced asset visibility, cybersecurity monitoring

1229 - Search - Xage Security appoints Susanto Irwan as president and CTO to lead AI-driven innovation

1230 - Search - Ontinue rolls out ION for improved phishing protection to reduce risk, strengthen cyber resilience

1231 - Search - Strengthening ICS resilience with ISA/IEC 62443 standards and configuration management

1232 - Search - How to Communicate Cyber & Operational Risk to Your Board

1233 - Search - How to Create an Effective Merged IT/OT SOC

1234 - Search - Russian APT Hackers Using Device Code Phishing Technique to Bypass MFA

1235 - Search - Threat Actors Turning Messaging Service into a Cash Making Machine

1236 - Search - Hackers Allegedly Claiming WooCommerce Breach, 4.4 Million Customer Details Stolen

1237 - Search - New Double-Edged Email Attack Stealing Office365 Credentials and Deliver Malware

1238 - Search - CISA Warns of Linux USB-Audio Driver Out-of-Bounds Vulnerability Exploited in the Wild

1239 - Search - Weaponized PDF-based Attacks Accounts 22% Out of 68%…

1240 - Search - Secure Ideas Achieves CREST Accreditation and CMMC Level…

1241 - Search - NEPTUNE RAT Attacking Windows Users to Exfiltrate Passwords…

1242 - Search - New Sakura RAT Emerges on GitHub, Successfully Evading…

1243 - Search - Scattered Spider Employs Sophisticated Attacks to Steal Login Credentials & MFA Tokens

1244 - Search - North Korean Hackers Employs Social Engineering Tactics & Python Script to Execute Hidden Commands

1245 - Search - NCSC Warns of MOONSHINE & BADBAZAAR Malware Attacking Mobile Devices Worldwide

1246 - Search - Hackers Actively Scanning for Juniper’s Smart Router With Default Password

1247 - Search - Qilin Operators Mimic ScreenConnect Login Page to Deliver Ransomware & Gain Admin Access

1248 - Search - ToddyCat Hackers Exploit ESET Scanner Vulnerability to Evade Detection

1249 - Search - CISA Releases NICE Workforce Framework Version 2.0.0 Released – What’s New

1250 - Search - Russian Seashell Blizzard Attacking Organizations With Custom-Developed Hacking Tools

1251 - Search - Fortinet Addresses Multiple Vulnerabilities in FortiAnalyzer, FortiManager, & Other Products

1252 - Search - Adobe Security Update – Patch for Multiple Vulnerabilities Across…

1253 - Search - Kibana Security Update – Patch for Vulnerability Leads to…

1254 - Search - Windows Common Log File System 0-Day Vulnerability Exploited in…

1255 - Search - 10 Best Data Loss Prevention Software – 2024

1256 - Search - Apple Released Security Updates For iOS, iPadOS, macOS, tvOS, and watchOS…

1257 - Search - Session Smart Routers With Default Passwords Hacked By Mirai Malware

1258 - Search - Tips How to Survive at Your First Job: The Adaptability of…

1259 - Search - ‘BouldSpy’ Android Malware Used by Iranian Government for Surveillance Operations

1260 - Search - What is Brute Force Attacks?

1261 - Search - Top 15 Best Security Incident Response Tools In 2025

1262 - Search - 10 Best Cloud Security Companies In 2025

1263 - Search - Top 11 Best SysAdmin Tools in 2025

1264 - Search - 10 Best Ransomware File Decryptor Tools – 2025

1265 - Search - Top 10 Programming Languages For Cyber Security – 2025

1266 - Search - 10 Best Kubernetes Container Scanners In 2025

1267 - Search - Read all the latest research

1268 - Search - Ghost Sites: Stealing Data From Deactivated Salesforce Communities

1269 - Search - Defending Your Cloud Environment Against LAPSUS$ Style Threats

1270 - Search - Abusing Misconfigured Salesforce Communities for Recon and Data Theft

1271 - Search - Cloud SecurityVaronis Acquires Cyral to Reinvent Database Activity MonitoringYaki Faitelson3 min readStrategic DAM acquisition accelerates our mission to deliver AI-powered data security for all data, everywhere.Yaki Faitelson3 min read

1272 - Search - Data SecurityVaronis Named a Leader and Customer Favorite in The Forrester Wave™: Data Security Platforms, Q1 2025Avia Navickas3 min read

1273 - Search - Data SecurityMind Games: How Social Engineering Tactics Have EvolvedVaronis Threat Labs7 min read

1274 - Search - Data SecurityWhy Your Org Needs a Copilot Security Scan Before Deploying AI ToolsLexi Croisdale2 min read

1275 - Search - Introducing the Azure Access Graph to Find and Fix Cloud Security Issues

1276 - Search - From Table Stakes to a Team Sport: Rethinking Cybersecurity

1277 - Search - Data Breaches in Healthcare: Why Identity Protection and Data Security are More Important Than Ever

1278 - Search - Cloud SecurityData SecurityApr 08, 2025Data Discovery and Classification: The Importance of How Data is ScannedData discovery and classification are the foundations for DSPM and data security, but how your data is scanned is more important than you may think.Nolan Necoechea3 min read

1279 - Search - Varonis ProductsMar 27, 2025What’s New in Varonis: March 2025Discover Varonis’ latest features, including new data governance, labeling, and AI security capabilities.Nathan Coppinger2 min read

1280 - Search - Cloud SecurityMar 26, 2025Navigating the Cloud: Kubernetes Trends in 2025As 2025 unfolds, the world of cloud security and Kubernetes is rapidly transforming, presenting exciting new challenges and opportunities for growth.Daniel Miller3 min read

1281 - Search - DSPMData SecurityMicrosoft 365Mar 25, 2025The Folder Fallacy - Unmasking Hidden Permissions in Microsoft 365With the passing of time, admins and users lose sight of inherited sharing from SharePoint sites and folders, and this lack of visibility creates data risk. This article discusses one such scenario known as the ‘folder fallacy’.Shawn Hays3 min read

1282 - Search - Cloud SecurityMar 20, 2025Why Cloud Security Programs FailUnlock the secrets to robust cloud security. Learn how to tackle common challenges and protect your organization from data breaches and cyber threats.Daniel Miller4 min read

1283 - Search - Cloud SecurityData SecurityMar 19, 2025Rippling Believe it or Not: How the Largest Corporate Espionage Case this Century HappenedRippling, a leader in workforce management software, filed a lawsuit against its competitor, Deel, accusing it of planting a spy and exfiltrating customer and competitive information. This blog unpacks how it happened and how it could have been prevented.Shawn Hays5 min read

1284 - Search - Varonis ProductsMar 19, 2025Streamline Data Governance with Varonis Data Lifecycle AutomationAutomatically enforce data governance, lifecycle, and compliance policies without writing any code. Seamlessly copy and move data—cross-domain or cross-platform—without the risk of breaking permissions or interrupting business.Nathan Coppinger4 min read

1285 - Search - AI SecurityCloud SecurityData SecurityMar 12, 2025Federal Data Security Challenges in the Age of AIInsights from Varonis’ Craig Mueller’s on the rise in AI and the need for data security in the public sector.Craig Mueller3 min read

1286 - Search - How-TosDon’t use corporate email for your personal life09 Apr 2025

1287 - Search - Internet Of ThingsPreparing for the EU Radio Equipment Directive security requirements03 Apr 2025

1288 - Search - How-TosBackdoor in the Backplane. Doing IPMI security better31 Mar 2025

1289 - Search - DFIRThe first 24 hours of a cyber incident. A practical playbook24 Mar 2025

1290 - Search - OpinionsCybersecurity communities. Small hacker groups, big impact19 Mar 2025

1291 - Search - How-TosTake control of Cache-Control and local caching12 Mar 2025

1292 - Search - Consultancy adviceHow I became a Cyber Essentials Plus assessor06 Mar 2025

1293 - Search - DNSSEC NSEC. The accidental treasure map to your subdomains04 Mar 2025

1294 - Search - Hardware HackingA dive into the Rockchip Bootloader26 Feb 2025

1295 - Search - Aviation Cyber SecurityPen testing avionics under ED-203a21 Feb 2025

1296 - Search - How-TosWatch where you point that cred! Part 118 Feb 2025

1297 - Search - Maritime Cyber SecurityNew mandatory USCG cyber regulations. What you need to know14 Feb 2025

1298 - Search - Consultancy advicePCI DSS v4.0 Evidence and documentation requirements checklist13 Feb 2025

1299 - Search - Consultancy advicePCI DSS. Where to start?11 Feb 2025

1300 - Search - OT, ICS, IIoT, SCADAICS testing best results. Hint: Blend your approach07 Feb 2025

1301 - Search - How-TosA tale of enumeration, and why pen testing can’t be automated05 Feb 2025

1302 - Search - DFIRHow Garmin watches reveal your personal data, and what you can do28 Jan 2025

1303 - Search - Maritime Cyber SecurityCyber security guidance for small fleet operators24 Jan 2025

1304 - Search - Hardware HackingHow to secure body-worn cameras and protect footage from cyber threats21 Jan 2025

1305 - Search - Consumer AdviceSecurity flaws found in tiny phones promoted to children15 Jan 2025

1306 - Search - DFIRTackling AI threats. Advanced DFIR methods and tools for deepfake detection13 Jan 2025

1307 - Search - Aviation Cyber SecurityThe unexpected effects of GPS spoofing on aviation safety09 Jan 2025

1308 - Search - DFIR10 Non-tech things you wish you had done after being breached07 Jan 2025

1309 - Search - Aviation Cyber SecurityThe surprising existence of the erase button on cockpit voice recorders03 Jan 2025

1310 - Search - Internet Of ThingsHeels on fire. Hacking smart ski socks23 Dec 2024

1311 - Search - DFIRPractice being punched in the face. The realities of incident response preparation20 Dec 2024

1312 - Search - Hardware HackingHow easily access cards can be cloned and why your PACS might be vulnerable11 Dec 2024

1313 - Search - Hardware HackingMaking sure your door access control system is secure: Top 5 things to check09 Dec 2024

1314 - Search - Hardware HackingIs secure boot on the main application processor enough?05 Dec 2024

1315 - Search - DFIR6 non tech things you wish you had done before being breached03 Dec 2024

1316 - Search - DFIRBEC-ware the Phish (part 3): Detect and Prevent Incidents in M36527 Nov 2024

1317 - Search - Consumer AdviceHow we helped expose a £12 million rental scam19 Nov 2024

1318 - Search - Maritime Cyber SecurityIACS UR E26 and E27 guidance14 Nov 2024

1319 - Search - Maritime Cyber SecurityDid security gaps at Antwerp port enable drug smuggling operations?12 Nov 2024

1320 - Search - DFIRBEC-ware the Phish (part 2): Respond and Remediate Incidents in M36508 Nov 2024

1321 - Search - DFIRYou lost your iPhone, but it’s locked. That’s fine, right?06 Nov 2024

1322 - Search - Maritime Cyber SecurityMaritime lawyers assemble!05 Nov 2024

1323 - Search - Maritime Cyber SecurityWhat goes into testing a ship?05 Nov 2024

1324 - Search - DFIRMounting memory with MemProcFS for advanced memory forensics31 Oct 2024

1325 - Search - OpinionsTesting the security of CCTV systems30 Oct 2024

1326 - Search - DFIRUsing Volatility for advanced memory forensics24 Oct 2024

1327 - Search - DFIRBEC-ware the phish (part 1). Investigating incidents in M36515 Oct 2024

1328 - Search - OpinionsImposter syndrome in cyber security10 Oct 2024

1329 - Search - Aviation Cyber SecurityHow to handle vulnerability reports in aviation09 Oct 2024

1330 - Search - Aviation Cyber SecurityAirbus Navblue Flysmart LPC-NG issues01 Oct 2024

1331 - Search - Consumer AdviceHow can you protect your data, privacy, and finances if your phone gets lost or stolen?30 Sep 2024

1332 - Search - Hardware HackingDirect Memory Access (DMA) attacks. Risks, techniques, and mitigations in hardware hacking26 Sep 2024

1333 - Search - Vulnerability AdvisoryProroute H685 4G router vulnerabilities19 Sep 2024

1334 - Search - Maritime Cyber SecurityCyber threats to shipping explained18 Sep 2024

1335 - Search - Red TeamingLiving off the land, GPO style12 Sep 2024

1336 - Search - Consumer AdviceSmart home security advice. Ring, SimpliSafe, Swann, and Yale10 Sep 2024

1337 - Search - DFIRAdvanced forensic techniques for recovering hidden data in wearable devices04 Sep 2024

1338 - Search - How-TosHow to enhance the security of your social media accounts30 Aug 2024

1339 - Search - How-TosHow to root an Android device for analysis and vulnerability assessment23 Aug 2024

1340 - Search - Shameless Self PromotionInsights and highlights from DEF CON 3216 Aug 2024

1341 - Search - Red TeamingLiving off the land with Bluetooth PAN12 Aug 2024

1342 - Search - OpinionsKey safe security, or the lack of it07 Aug 2024

1343 - Search - Hardware HackingFuzzy matching with Ghidra BSim, a guide05 Aug 2024

1344 - Search - Maritime Cyber SecurityLeave the World Behind, or don’t24 Jul 2024

1345 - Search - Maritime Cyber SecurityPen testing cruise ships08 Jul 2024

1346 - Search - Vulnerability AdvisoryRCE vulnerability in OpenSSH – RegreSSHion (CVE-2024-6387)02 Jul 2024

1347 - Search - Vulnerability DisclosureGlastonbury ticket hijack vulnerability fixed28 Jun 2024

1348 - Search - How-TosDodgy disks. My 32TB SSD Adventure21 Jun 2024

1349 - Search - OPSECHUMINT in a cyber world20 Jun 2024

1350 - Search - Vulnerability DisclosureUK PSTI? You’ll need a Vulnerability Disclosure Program!24 May 2024

1351 - Search - OT, ICS, IIoT, SCADAImpacts on ICS from the updated Cyber Assessment Framework (CAF)17 May 2024

1352 - Search - DFIRPipedream ICS malware toolkit is a nightmare09 May 2024

1353 - Search - Vulnerabilities that aren’tVulnerabilities that (mostly) aren’t: LUCKY1303 May 2024

1354 - Search - How-TosBypassing MFA on Microsoft Azure Entra ID01 May 2024

1355 - Search - Maritime Cyber SecurityCan ships be hacked?12 Apr 2024

1356 - Search - OpinionsNavigating the perilous waters of conference invitations14 Mar 2024

1357 - Search - Automotive SecurityThe big play of autonomous vehicles12 Mar 2024

1358 - Search - Red TeamingLiving off the land with native SSH and split tunnelling06 Mar 2024

1359 - Search - Internet Of ThingsAdvice for manufacturers on the coming PSTI regulation23 Feb 2024

1360 - Search - Vulnerability AdvisoryNo fix KrbRelay VMware style21 Feb 2024

1361 - Search - How-TosCyber security for Credit Unions 10120 Feb 2024

1362 - Search - Social EngineeringQR Phishing. Fact or Fiction?15 Feb 2024

1363 - Search - AndroidAndroid Content Providers 10113 Feb 2024

1364 - Search - Internet Of ThingsSki & bike helmets protect your head, not location or voice07 Feb 2024

1365 - Search - Aviation Cyber SecurityHacking Electronic Flight Bags. Airbus NAVBLUE Flysmart+ Manager01 Feb 2024

1366 - Search - OPSECOSINT in 60 seconds. Mind reading on TV30 Jan 2024

1367 - Search - OT, ICS, IIoT, SCADA10 years on from the Target breach. Has building cyber security improved?24 Jan 2024

1368 - Search - Aviation Cyber SecurityCockpit door lock auto-unlock is no surprise10 Jan 2024

1369 - Search - OpinionsListening in at Latimer House. RF emissions and more09 Jan 2024

1370 - Search - DFIRRAID Technology and the importance of disk encryption in data security04 Jan 2024

1371 - Search - Consumer AdviceMobile malware analysis for the BBC02 Jan 2024

1372 - Search - Consumer AdviceHelping a banking fraud victim02 Jan 2024

1373 - Search - Consumer AdviceHelping a mobile malware fraud victim02 Jan 2024

1374 - Search - Shameless Self PromotionSocks! Our cyber prediction for 202422 Dec 2023

1375 - Search - DFIRIntercepting MFA. Phishing and Adversary in The Middle attacks12 Dec 2023

1376 - Search - Medical Device SecurityNavigate FDA 524b to get your medical cyber device to market07 Dec 2023

1377 - Search - OPSECOSINT. What can you find from a domain or company name05 Dec 2023

1378 - Search - OPSECOPSEC failures when threat hunting30 Nov 2023

1379 - Search - Automotive SecurityAre Vehicle to Grid spikes coming?27 Nov 2023

1380 - Search - Red TeamingCap Dev. Better red teaming with continuous Capability Development23 Nov 2023

1381 - Search - Vulnerability DisclosureFujiFilm printer credentials encryption issue fixed31 Oct 2023

1382 - Search - Medical Device SecurityFDA medical IoT cyber device compliance. FD&C 524b31 Oct 2023

1383 - Search - DFIRUsing Velociraptor for large-scale endpoint visibility and rapid threat hunting12 Oct 2023

1384 - Search - Internet Of ThingsIoT Secure Development Guide10 Oct 2023

1385 - Search - Macs / AppleThe reality of Apple watch pen testing09 Oct 2023

1386 - Search - How-TosCall centres. Outbound call verification03 Oct 2023

1387 - Search - Hardware HackingFastboot Fuzzing29 Sep 2023

1388 - Search - Consultancy adviceWhich security framework? All of them, in the SCF27 Sep 2023

1389 - Search - Consultancy advice3yrs of CAA ASSURE assessments. What we’ve learned20 Sep 2023

1390 - Search - Consultancy advicePCI v4 is coming. Are you ready?14 Sep 2023

1391 - Search - How-TosInformation disclosure through insecure design07 Sep 2023

1392 - Search - Vulnerability DisclosureA broken marriage. Abusing mixed vendor Kerberos stacks25 Aug 2023

1393 - Search - How-TosThe most hated man on the internet. Lessons to learn22 Aug 2023

1394 - Search - Aviation Cyber SecurityScorpion CBS show. Plane hack14 Aug 2023

1395 - Search - Aviation Cyber SecurityDie Hard 2. Or how not to hack airplanes14 Aug 2023

1396 - Search - Aviation Cyber SecurityVulnerability disclosure in aviation09 Aug 2023

1397 - Search - Shameless Self PromotionPTP at DEF CON 31 202303 Aug 2023

1398 - Search - How-Tosn00b’s guide to DEF CON. Surviving the Matrix of the underground03 Aug 2023

1399 - Search - DFIRHave you been compromised?02 Aug 2023

1400 - Search - How-TosExposed Gits: 10 Years on19 Jul 2023

1401 - Search - DFIRBlack Basta ransomware28 Jun 2023

1402 - Search - Vulnerability DisclosureWhosHere Plus. Trilateration vulnerability12 Jun 2023

1403 - Search - Aviation Cyber SecurityEFB vulnerability in Lufthansa’s Lido eRouteManual24 May 2023

1404 - Search - OT, ICS, IIoT, SCADAAll your building are belong to us19 May 2023

1405 - Search - How-TosIt’s always DNS, here’s why…16 May 2023

1406 - Search - Aviation Cyber SecurityNetflix MH370: The plane that wasn’t hacked12 May 2023

1407 - Search - Vulnerability DisclosureBullied by Bugcrowd over Kape CyberGhost disclosure05 May 2023

1408 - Search - How-TosLondon Councils & pirate books. Google dorking for subdomain takeovers11 Apr 2023

1409 - Search - DFIRNot everything in a data leak is real09 Apr 2023

1410 - Search - Maritime Cyber SecurityHow to pen test cargo vessels25 Mar 2023

1411 - Search - SustainabilityCarbon reduction at PTP17 Mar 2023

1412 - Search - Maritime Cyber SecurityMonetising hacking by shorting commodity shipments08 Mar 2023

1413 - Search - DFIRFinding forensics breadcrumbs in Android image storage20 Feb 2023

1414 - Search - Aviation Cyber SecurityCausing incidents with in-flight entertainment systems07 Feb 2023

1415 - Search - OT, ICS, IIoT, SCADAOSINT your OT suppliers24 Jan 2023

1416 - Search - Vulnerability DisclosureUK gov website being used to redirect to porn sites09 Jan 2023

1417 - Search - Vulnerability DisclosureRCE on Steam through the Cultist Simulator game02 Jan 2023

1418 - Search - Vulnerability DisclosureWhat’s My Name Again? Reolink camera command injection13 Dec 2022

1419 - Search - Consumer AdviceConsumer advice for buying smart IoT devices this Christmas02 Dec 2022

1420 - Search - DFIRHive Ransomware is on the rise. How should you deal with it?18 Nov 2022

1421 - Search - Internet Of ThingsEffecting positive change in the Internet of Things21 Oct 2022

1422 - Search - Social EngineeringSocial Engineering dos and don’ts20 Oct 2022

1423 - Search - Vulnerability DisclosureMoto E20 Readback Vulnerability19 Oct 2022

1424 - Search - Vulnerability AdvisoryMS Enterprise app management service RCE. CVE-2022-3584113 Oct 2022

1425 - Search - Cloud SecurityLiving off the Cloud. Cloudy with a Chance of Exfiltration11 Oct 2022

1426 - Search - Aviation Cyber SecurityAirbus AoA – Angle of Attack sensor issue03 Oct 2022

1427 - Search - How-TosAttacking Encrypted HTTP Communications28 Sep 2022

1428 - Search - Vulnerability AdvisoryYou can’t stop me. MS Teams session hijacking and bypass22 Sep 2022

1429 - Search - Aviation Cyber SecurityDEF CON 30. Hacking EFBs. Engine Performance08 Sep 2022

1430 - Search - Vulnerability DisclosureWhen disclosure goes wrong. People02 Sep 2022

1431 - Search - Red TeamingLiving off the land, AD CS style26 Aug 2022

1432 - Search - OT, ICS, IIoT, SCADABluetooth + Electrical switchgear25 Aug 2022

1433 - Search - Aviation Cyber SecurityDatabase Integrity Vulnerabilities in Boeing’s Onboard Performance Tool13 Aug 2022

1434 - Search - Maritime Cyber SecurityMaritime regulation. All Hands-on Deck!05 Aug 2022

1435 - Search - How-TosEfficient Infrastructure Testing01 Aug 2022

1436 - Search - Aviation Cyber SecurityAttacking EFB updates27 Jul 2022

1437 - Search - Aviation Cyber SecurityEFB ePIL. Pinching passenger PII from pilots15 Jul 2022

1438 - Search - How-TosStop using phishing as a measure of your cyber awareness culture12 Jul 2022

1439 - Search - Aviation Cyber SecurityEFB Tampering. Holdover Time06 Jul 2022

1440 - Search - Cloud SecurityCloud OSINT. Finding Interesting Resources04 Jul 2022

1441 - Search - Aviation Cyber SecurityCMC Electronics EFB breakout vulnerability28 Jun 2022

1442 - Search - DFIRFollina 0day exploit. Malicious code execution in Office docs01 Jun 2022

1443 - Search - Cloud SecurityAzure Cloud Takeover31 May 2022

1444 - Search - Aviation Cyber Security747 Hackathon25 May 2022

1445 - Search - PasswordsPassword policy guidance23 May 2022

1446 - Search - Internet Of ThingsWe need to talk about sex toys and cyber security23 May 2022

1447 - Search - Vulnerability DisclosureGalleon NTS-6002-GPS Command Injection vulnerability (CVE-2022-27224)20 May 2022

1448 - Search - OT, ICS, IIoT, SCADAGot the security controls wrong in OT and maritime? Watch as engineers work around them16 May 2022

1449 - Search - How-TosConstrained environment breakout. .NET Assembly exfiltration via Internet Options09 May 2022

1450 - Search - DFIRReporting of cyber incidents becomes law in the USA13 Apr 2022

1451 - Search - OT, ICS, IIoT, SCADAThe reality of OT segregation31 Mar 2022

1452 - Search - DFIRTo Pay or Not to Pay? That is the Ransomware question21 Mar 2022

1453 - Search - Red TeamingRed Team lab automation03 Mar 2022

1454 - Search - DFIROAuth consent phishing, in the wild21 Feb 2022

1455 - Search - OPSECOpSec. Hunting wireless access points16 Feb 2022

1456 - Search - Vulnerabilities that aren’tVulnerabilities that aren’t. Unquoted Spaces14 Feb 2022

1457 - Search - Vulnerability DisclosureDPD package sniffing07 Feb 2022

1458 - Search - Vulnerabilities that aren’tVulnerabilities that aren’t. ETag headers04 Feb 2022

1459 - Search - Automotive SecurityWho has access to your leased Tesla?01 Feb 2022

1460 - Search - Vulnerabilities that aren’tVulnerabilities that aren’t. Cross Site Tracing / XST25 Jan 2022

1461 - Search - Consumer AdviceDomestic CCTV and audio recording17 Jan 2022

1462 - Search - Consumer AdviceAudio bugging with the Fisher Price Chatter Bluetooth Telephone22 Dec 2021

1463 - Search - Vulnerability AdvisoryGumtree – leaking your data and not really listening15 Dec 2021

1464 - Search - Vulnerability DisclosureA masterclass in responding to vulnerability disclosure: The Buddi app and tracker29 Nov 2021

1465 - Search - Internet Of ThingsWhat does the Product Security and Telecommunications Infrastructure bill mean for me?25 Nov 2021

1466 - Search - Vulnerability AdvisorySkyFail. 6 million routers left exposed19 Nov 2021

1467 - Search - Internet Of ThingsHijacking smart luggage11 Nov 2021

1468 - Search - Vulnerability AdvisoryPun-free Cylance vulnerability, fixed10 Nov 2021

1469 - Search - How-TosTime based username enumeration09 Nov 2021

1470 - Search - Consumer AdviceLimiting your exposure to location data resellers08 Nov 2021

1471 - Search - How-TosDCOM abuse and lateral movement with Cobalt Strike03 Nov 2021

1472 - Search - RansomwareGerm-term, but all year. How criminals are hacking schools13 Oct 2021

1473 - Search - Vulnerability AdvisoryFree BrewDog beer with a side order of shareholder PII?08 Oct 2021

1474 - Search - PasswordsHow to build a password cracking rig during a worldwide chip shortage05 Oct 2021

1475 - Search - Internet Of ThingsWhen the IoT vendor goes bust28 Sep 2021

1476 - Search - How-TosSecuring mobile devices. A timely reminder28 Sep 2021

1477 - Search - Aviation Cyber SecurityCommercial Air Transport EFB Regulation23 Sep 2021

1478 - Search - EFB Tampering. Approach and Landing Performance Part 214 Sep 2021

1479 - Search - Aviation Cyber SecurityEFB Tampering. Approach and Landing Performance Part 114 Sep 2021

1480 - Search - Aviation Cyber SecurityEFB Tampering. The Human Factor10 Sep 2021

1481 - Search - Consultancy adviceASSURE Case Study: Two03 Sep 2021

1482 - Search - Consultancy adviceASSURE Case Study: One03 Sep 2021

1483 - Search - OT, ICS, IIoT, SCADAFrom open Guest Wi-Fi to pwning a lift03 Sep 2021

1484 - Search - OPSECOpSec. Expanding your search: Hunting domains02 Sep 2021

1485 - Search - Internet Of ThingsWhy the Raspberry Pi isn’t suitable for IoT01 Sep 2021

1486 - Search - PasswordsAdmin password re-use. Don’t do it26 Aug 2021

1487 - Search - AndroidHow to install Frida into an Android application20 Aug 2021

1488 - Search - How-TosBreaking the NFC chips in tens of millions of smart phones, and a few PoS systems18 Aug 2021

1489 - Search - Red TeamingThe value of regulator-driven red teaming: CBEST12 Aug 2021

1490 - Search - AndroidBreaking the Android Bootloader on the Qualcomm Snapdragon 66009 Aug 2021

1491 - Search - OPSECOpSec Leaky Images04 Aug 2021

1492 - Search - Automotive SecuritySmart car chargers. Plug-n-play for hackers?30 Jul 2021

1493 - Search - Consumer AdviceAre you sharing your address on social media?30 Jul 2021

1494 - Search - Aviation Cyber SecurityThe Cloud in the clouds14 Jul 2021

1495 - Search - Cloud SecurityTop 10 Cloud security tips08 Jul 2021

1496 - Search - How-TosSNMP – Simply Not My Problem. Or is it?02 Jul 2021

1497 - Search - Aviation Cyber SecurityRansomware. In the air?02 Jul 2021

1498 - Search - OPSECGoogle for OpSec data discovery29 Jun 2021

1499 - Search - Red TeamingRed Teaming. Practice what you preach24 Jun 2021

1500 - Search - Vulnerability AdvisoryTracking Amazon delivery staff15 Jun 2021

1501 - Search - Aviation Cyber SecurityWhy hackers don’t fly coach11 Jun 2021

1502 - Search - Aviation Cyber SecurityDeploying EFBs securely04 Jun 2021

1503 - Search - OPSECDo you know your OpSec?28 May 2021

1504 - Search - How-TosSmart lighting security21 May 2021

1505 - Search - Aviation Cyber SecurityGetting a persistent shell on a 747 IFE21 May 2021

1506 - Search - Aviation Cyber SecurityEFB Tampering 3. Take-off pt117 May 2021

1507 - Search - Aviation Cyber SecurityEFB Tampering 3. Take-off pt217 May 2021

1508 - Search - Vulnerability AdvisoryEchelon PII Leak and Disclosure Fail14 May 2021

1509 - Search - Aviation Cyber SecurityEFB Safety Advice for Pilots07 May 2021

1510 - Search - Consumer AdviceTour de Peloton: Exposed user data05 May 2021

1511 - Search - Opinions2021. The age of the super vulnerability?26 Apr 2021

1512 - Search - Careers At PTPWe’re Hiring!23 Apr 2021

1513 - Search - Consumer AdviceTraining apps. Have their privacy settings improved in 5 years?21 Apr 2021

1514 - Search - Consumer AdviceHomeworking vs Homeschooling. The cyber challenge21 Apr 2021

1515 - Search - Aviation Cyber SecurityEFB Tampering 2. Device Integrity19 Apr 2021

1516 - Search - How-TosSecurity vs User Journey16 Apr 2021

1517 - Search - Red TeamingDumping LSASS in memory undetected using MirrorDump26 Mar 2021

1518 - Search - Red TeamingMulti-factor Authentication. Reset MFA you say?22 Mar 2021

1519 - Search - Maritime Cyber SecurityOut of cyber class. Maritime compliance.15 Mar 2021

1520 - Search - Internet Of ThingsIs IoT ever really yours?08 Mar 2021

1521 - Search - Aviation Cyber SecurityEFB Tampering 1. Introduction and Class Differences05 Mar 2021

1522 - Search - OT, ICS, IIoT, SCADAGrid. Locked.04 Mar 2021

1523 - Search - How-TosFeature and Permission Policies. Security issues23 Feb 2021

1524 - Search - Cyber Liability InsuranceK&R insurance. Kidnap and Ransom(ware)22 Feb 2021

1525 - Search - Reverse EngineeringReverse Engineering Keys from Firmware. A how-to08 Feb 2021

1526 - Search - Red TeamingEmail Relaying. A how-to and a reminder05 Feb 2021

1527 - Search - Cyber EssentialsCyber Essentials and the New Normal26 Jan 2021

1528 - Search - PasswordsThree Word Passwords19 Jan 2021

1529 - Search - How-TosCyber Security advice for Finance staff15 Jan 2021

1530 - Search - Cloud SecurityAzure AD. Attack of the Default Config12 Jan 2021

1531 - Search - Maritime Cyber SecurityWhere maritime cyber checklists fail11 Jan 2021

1532 - Search - OT, ICS, IIoT, SCADASchneider T200 RTU vulnerabilities07 Jan 2021

1533 - Search - How-TosHow to make a software BTRFS RAID1 with LUKS2 FDE22 Dec 2020

1534 - Search - How-TosHow to use Keepalived for high availability and load balancing22 Dec 2020

1535 - Search - How-TosA Logical Volume Manager / LVM primer for Linux21 Dec 2020

1536 - Search - Vulnerability AdvisoryMimosa Cloud. Invite friends, not hackers21 Dec 2020

1537 - Search - Vulnerability AdvisorySerious Vulnerabilities in Dualog Connection Suite10 Dec 2020

1538 - Search - Consumer AdviceLocking down your cyber life in lockdown04 Dec 2020

1539 - Search - Consumer AdviceWhat the cluck?! Cyber hygiene when eating out.02 Dec 2020

1540 - Search - How-TosUnderstanding Binary and Data Representation with CyberChef24 Nov 2020

1541 - Search - Automotive SecurityOBDeleven vulnerability18 Nov 2020

1542 - Search - How-TosBrute forcing device passwords16 Nov 2020

1543 - Search - DFIRDigital Forensics acquisition14 Nov 2020

1544 - Search - OT, ICS, IIoT, SCADASnakes and Ladder Logic10 Nov 2020

1545 - Search - Red TeamingPassword choice06 Nov 2020

1546 - Search - Red TeamingAbusing RDP’s Remote Credential Guard with Rubeus PTT22 Oct 2020

1547 - Search - How-TosCyber Security Month. What can you do?08 Oct 2020

1548 - Search - Internet Of ThingsSmart male chastity lock cock-up06 Oct 2020

1549 - Search - Red TeamingDLL Hijacking in NVIDIA SMI01 Oct 2020

1550 - Search - Vulnerability AdvisoryCloud-y, with a chance of hacking all the wireless things29 Sep 2020

1551 - Search - How-TosCVE-2020-1472/Zerologon. As an IT manager should I worry?23 Sep 2020

1552 - Search - Red TeamingThe Return of Raining SYSTEM Shells with Citrix Workspace app21 Sep 2020

1553 - Search - Maritime Cyber SecuritySpeed 2 – The Poseidon Adventure – Part Two17 Sep 2020

1554 - Search - Consumer AdviceConsumer advice: Giggle vulnerability14 Sep 2020

1555 - Search - Internet Of Things360lock Smart Lock Review11 Sep 2020

1556 - Search - Maritime Cyber SecuritySpeed 2 – The Poseidon Adventure – Part One08 Sep 2020

1557 - Search - Vulnerability AdvisoryCloud firewall management API SNAFU put 500k SonicWall customers at risk02 Sep 2020

1558 - Search - Vulnerability DisclosureA Vulnerability Disclosure Program is not just a page on a web site26 Aug 2020

1559 - Search - How-TosScanning for UK gov security.txt files26 Aug 2020

1560 - Search - Hardware HackingBreaking Samsung firmware, or turning your S8/S9/S10 into a DIY “Proxmark”18 Aug 2020

1561 - Search - Aviation Cyber SecurityDEF CON 28: 747 Walkthrough from a Hacker’s Perspective12 Aug 2020

1562 - Search - Aviation Cyber SecurityDEF CON 28: ILS and TCAS Spoofing11 Aug 2020

1563 - Search - Aviation Cyber SecurityDEF CON 28: Introduction to ACARS10 Aug 2020

1564 - Search - How-TosSecurity Awareness is as valuable today as ever07 Aug 2020

1565 - Search - How-TosBuilding a lab with Server 2019 Server Core and PowerShell …then attacking it!03 Aug 2020

1566 - Search - Vulnerability AdvisoryRaining SYSTEM Shells with Citrix Workspace app21 Jul 2020

1567 - Search - Internet Of ThingsThreat modelling and IoT hubs17 Jul 2020

1568 - Search - Red TeamingBridging the gaps between Red and Blue teaming13 Jul 2020

1569 - Search - Internet Of ThingsHacking smart devices to convince dementia sufferers to overdose09 Jul 2020

1570 - Search - Red TeamingPatchless AMSI bypass using SharpBlock07 Jul 2020

1571 - Search - Internet Of ThingsPwning smart garage door openers07 Jul 2020

1572 - Search - Internet Of ThingsIdentity in IoT01 Jul 2020

1573 - Search - Internet Of ThingsWhat an IoT assurance scheme could look like30 Jun 2020

1574 - Search - How-TosScams and how to spot them30 Jun 2020

1575 - Search - How-TosCongrats, you got everyone remote. But did you do it securely?29 Jun 2020

1576 - Search - OT, ICS, IIoT, SCADAEmbedded security fails in ICS17 Jun 2020

1577 - Search - How-TosRevisiting old tools12 Jun 2020

1578 - Search - OpinionsA cyber warning light. The canary in the mine11 Jun 2020

1579 - Search - Internet Of ThingsUnclamping the Barnacle04 Jun 2020

1580 - Search - OT, ICS, IIoT, SCADAIntroduction to PLCs and Ladder Logic01 Jun 2020

1581 - Search - Reverse EngineeringReverse Engineering a 5g ‘Bioshield’28 May 2020

1582 - Search - Aviation Cyber SecurityIn Flight Entertainment System Security27 May 2020

1583 - Search - Vulnerability AdvisoryDocker Desktop for Windows PrivEsc (CVE-2020-11492)22 May 2020

1584 - Search - Vulnerability DisclosureEthical dilemmas with responsible disclosure22 May 2020

1585 - Search - Macs / AppleShort beacon analysis on the NHS iOS Tracking application12 May 2020

1586 - Search - Red TeamingHousemates. The new Red Team?06 May 2020

1587 - Search - DFIRHow quickly can you respond?05 May 2020

1588 - Search - How-TosSpeaking at security events04 May 2020

1589 - Search - Aviation Cyber SecurityJeopardising aircraft through TCAS spoofing01 May 2020

1590 - Search - Vulnerability AdvisoryGDPR.EU has er… a data leakage issue27 Apr 2020

1591 - Search - Automotive SecurityFrom a TCU to Corporate Domain Admin24 Apr 2020

1592 - Search - Maritime Cyber SecurityAre you cyber seaworthy?17 Apr 2020

1593 - Search - Internet Of ThingsYou can’t build a great IoT system without a strong foundation17 Apr 2020

1594 - Search - Red TeamingSweetPotato – Service to SYSTEM14 Apr 2020

1595 - Search - Red TeamingAuthenticating your call centre when everyone is remote06 Apr 2020

1596 - Search - How-TosHoneyroasting. How to detect Kerberoast breaches with honeypots01 Apr 2020

1597 - Search - How-TosQuick wins with Adobe Experience Manager27 Mar 2020

1598 - Search - Hardware HackingTurning an OBD-II reader into a USB / NFC attack tool25 Mar 2020

1599 - Search - Vulnerability AdvisorySpying on old folks23 Mar 2020

1600 - Search - Vulnerability AdvisoryPrivEsc in Lenovo Vantage. Two minutes later20 Mar 2020

1601 - Search - Hardware HackingIntroduction to Bluetooth Low Energy12 Mar 2020

1602 - Search - How-Tos9 things to consider when staff work from home unexpectedly10 Mar 2020

1603 - Search - Hardware HackingHardware Router CTF10 Mar 2020

1604 - Search - PasswordsFill your Boots with credential stuffing protections06 Mar 2020

1605 - Search - A not so Clearview?04 Mar 2020

1606 - Search - How-TosFrom Minecraft to Metasploit. Game hacking could start your cyber security career03 Mar 2020

1607 - Search - Reverse EngineeringHardcoding Keys. Is that Wyse?25 Feb 2020

1608 - Search - Maritime Cyber SecurityShips can’t be hacked. Wrong20 Feb 2020

1609 - Search - Maritime Cyber SecurityOut Of Band, Out Of Sight, Out Of Mind17 Feb 2020

1610 - Search - How-TosBusiness Email Compromise. What to do14 Feb 2020

1611 - Search - Automotive SecurityReverse Engineering the Tesla Firmware Update Process12 Feb 2020

1612 - Search - Automotive SecurityReverse Engineering Tesla Hardware12 Feb 2020

1613 - Search - PasswordsPassword managers for all staff. Why the resistance?!10 Feb 2020

1614 - Search - PCI Advice2×4 Security07 Feb 2020

1615 - Search - Maritime Cyber SecurityPen Testing Ships. A year in review04 Feb 2020

1616 - Search - How-TosHTTP Request Smuggling. A how-to31 Jan 2020

1617 - Search - Aviation Cyber SecurityASSURE Aviation Cyber Security Testing30 Jan 2020

1618 - Search - Internet Of ThingsEmbedded devices. Typical security issues26 Jan 2020

1619 - Search - DFIRIR & Forensics in the Cloud10 Jan 2020

1620 - Search - How-TosQuick Wins to Combat Data Leaks08 Jan 2020

1621 - Search - Internet Of ThingsKids Tracker Watches: CloudPets, exploiting athletes and hijacking reality TV17 Dec 2019

1622 - Search - Internet Of ThingsXmas Light Security Improves… a bit10 Dec 2019

1623 - Search - Hardware HackingHacking Hardware Password Managers: The RecZone06 Dec 2019

1624 - Search - Hardware HackingHacking Hardware Password Managers: passwordsFAST06 Dec 2019

1625 - Search - Hardware HackingHacking Hardware Password Managers: Royal Vault Password Keeper06 Dec 2019

1626 - Search - OT, ICS, IIoT, SCADANuclear Satcoms04 Dec 2019

1627 - Search - Reverse EngineeringCommands and Tools for Embedded Reverse Engineering03 Dec 2019

1628 - Search - OT, ICS, IIoT, SCADAAnalysing the Attack Surface of an Industrial Data Acquisition Device03 Dec 2019

1629 - Search - How-TosThe snooping girl on a train, again. How to compromise a business02 Dec 2019

1630 - Search - Hardware HackingEmbedded device research. The tools you’ll need29 Nov 2019

1631 - Search - Maritime Cyber SecurityShips engines, a guide for pen testers29 Nov 2019

1632 - Search - How-TosChristmas socialising. Goodwill to all, and keep your devices safe28 Nov 2019

1633 - Search - DFIRThe Disgruntled Employee?15 Nov 2019

1634 - Search - Aviation Cyber SecurityUpdating Airplanes11 Nov 2019

1635 - Search - Aviation Cyber SecuritySchiphol hijack false alarm. An insiders view of what happened07 Nov 2019

1636 - Search - Internet Of ThingsPwning a Smart Car Charger, Building a Botnet06 Nov 2019

1637 - Search - Internet Of ThingsObjections to IoT regulation. A rational reply24 Oct 2019

1638 - Search - Maritime Cyber SecurityUnmasking mystery boxes on ship’s bridges14 Oct 2019

1639 - Search - Aviation Cyber SecurityMapping the Attack Surface of an Airport11 Oct 2019

1640 - Search - Consumer AdviceHelp, my accounts have been hacked! What should I do?10 Oct 2019

1641 - Search - Social EngineeringReal-life social engineering. Another two days in tweets04 Oct 2019

1642 - Search - Aviation Cyber SecurityOSINT for Avionics04 Oct 2019

1643 - Search - DFIRThe 5 breach readiness mistakes30 Sep 2019

1644 - Search - SustainabilityMy environmental journey28 Sep 2019

1645 - Search - How-TosA security researcher has made contact. What do I do?27 Sep 2019

1646 - Search - Breach HandlingThink you’ve had a breach? Top 5 things to do23 Sep 2019

1647 - Search - Internet Of ThingsDrilling open a smart door lock in 4 seconds23 Sep 2019

1648 - Search - Aviation Cyber SecurityA Pen Tester’s First Solo: Aviation Security 10120 Sep 2019

1649 - Search - Red TeamingHow to: Kerberoast like a boss18 Sep 2019

1650 - Search - Internet Of ThingsIoT security. A retrospective17 Sep 2019

1651 - Search - Red TeamingReal-life social engineering. Two days in tweets16 Sep 2019

1652 - Search - OT, ICS, IIoT, SCADAPwning a Siemens Scalance ICS switch through ARM reversing03 Sep 2019

1653 - Search - Internet Of ThingsA Secure “Smart” Kettle?30 Aug 2019

1654 - Search - Vulnerability AdvisoryPrivEsc in Lenovo Solution Centre, 10 minutes later22 Aug 2019

1655 - Search - Automotive SecurityLojack’d: Pwning Smart vehicle trackers14 Aug 2019

1656 - Search - Vulnerability AdvisoryDating apps that track users from home to work and everywhere in-between11 Aug 2019

1657 - Search - Hardware HackingReverse Engineering 4G Hotspots for fun, bugs and net financial loss10 Aug 2019

1658 - Search - Hardware HackingBreaking (Bad) Cross-Site Request Forgery Protection – The Netgear Nighthawk M110 Aug 2019

1659 - Search - Hardware HackingCVE-2019-12103 – Analysis of a Pre-Auth RCE on the TP-Link M7350, with Ghidra!10 Aug 2019

1660 - Search - Hardware HackingBreaking (bad) firmware encryption. Case study on the Netgear Nighthawk M110 Aug 2019

1661 - Search - Internet Of ThingsZTE MF910 – An end of life router, running lots of vivacious hidden code10 Aug 2019

1662 - Search - Internet Of ThingsGroup sex app leaks locations, pics and personal details. Identifies users in White House and Supreme Court08 Aug 2019

1663 - Search - Shameless Self PromotionPTP at DEF CON 2705 Aug 2019

1664 - Search - Internet Of ThingsDCMS Practical Guidelines. Actionable information02 Aug 2019

1665 - Search - Automotive SecurityVehicle Telematics Security; getting it right26 Jul 2019

1666 - Search - Social EngineeringSocial engineering. When you’re the mark…23 Jul 2019

1667 - Search - Internet Of ThingsFails and Fixes with IoT19 Jul 2019

1668 - Search - Internet Of ThingsBurning down the house with IoT12 Jul 2019

1669 - Search - Automotive SecurityGetting your head under the hood and out of the sand: Automotive security testing05 Jul 2019

1670 - Search - Vulnerability AdvisorySlok API03 Jul 2019

1671 - Search - Social EngineeringThe null choice. A social engineering example in the wild02 Jul 2019

1672 - Search - Red TeamingNinja Turtles in your network: LAN Turtle 3G. A how-to for red teaming01 Jul 2019

1673 - Search - Vulnerability AdvisoryDon’t ‘Roley’ your own encryption, says Bob the Builder28 Jun 2019

1674 - Search - Vulnerability AdvisoryThe not so ultra lock27 Jun 2019

1675 - Search - Vulnerability AdvisoryF5 Networks Endpoint Inspector – Browser-to-RCE?26 Jun 2019

1676 - Search - How-TosDouble-Free RCE in VLC. A honggfuzz how-to21 Jun 2019

1677 - Search - OpinionsWhy we shouldn’t use sequential booking references19 Jun 2019

1678 - Search - OT, ICS, IIoT, SCADAEwon Flexy IoT Router. A Deep dive18 Jun 2019

1679 - Search - OT, ICS, IIoT, SCADASharing the Secrets: Pwning an industrial IoT router18 Jun 2019

1680 - Search - How-TosCovert Keylogging: Sniping your Typing13 Jun 2019

1681 - Search - Red TeamingBloodhound walkthrough. A Tool for Many Tradecrafts07 Jun 2019

1682 - Search - Consumer AdviceDon’t get burnt on pay day. How to buy IoT gadgets sensibly31 May 2019

1683 - Search - Red TeamingSecuring your red team kit with Uncomplicated Firewall29 May 2019

1684 - Search - Vulnerability AdvisoryPwning the Nokelock API24 May 2019

1685 - Search - Automotive SecurityTesla Killer: The Fuzzed and the Furious16 May 2019

1686 - Search - Medical Device SecurityFUD 101: How not to report healthcare cybersecurity issues15 May 2019

1687 - Search - Vulnerability AdvisoryeyeDisk. Hacking the unhackable. Again09 May 2019

1688 - Search - Vulnerability AdvisoryPwning WordPress GraphQL08 May 2019

1689 - Search - How-TosHow To Do Firmware Analysis. Tools, Tips, and Tricks03 May 2019

1690 - Search - Consumer AdviceUK Government gets serious about consumer IoT security. Legislation on the way01 May 2019

1691 - Search - Internet Of ThingsTic Toc Pwned15 Apr 2019

1692 - Search - Red TeamingCobalt Strike. Walkthrough for Red Teamers15 Apr 2019

1693 - Search - Maritime Cyber SecurityHacking Superyachts. Advice for integrators01 Apr 2019

1694 - Search - Maritime Cyber SecurityHacking Superyachts. Advice for captains01 Apr 2019

1695 - Search - Maritime Cyber SecurityHacking Superyachts. Advice for owners01 Apr 2019

1696 - Search - OpinionsBusiness banking fraud. Keep your eggs in TWO baskets. Here’s why…26 Mar 2019

1697 - Search - Vulnerability AdvisoryRemote command injection through an endpoint security product21 Mar 2019

1698 - Search - Internet Of ThingsConnected camera cock up20 Mar 2019

1699 - Search - How-TosWalkthrough. Investigating an SSD15 Mar 2019

1700 - Search - Automotive SecurityGone in six seconds? Exploiting car alarms08 Mar 2019

1701 - Search - Internet Of ThingsHacking ski helmet audio04 Mar 2019

1702 - Search - Vulnerability AdvisoryCisco RV130 – It’s 2019, but yet: strcpy28 Feb 2019

1703 - Search - Internet Of ThingsDifferent ‘smart’ lock, similar security issues18 Feb 2019

1704 - Search - Maritime Cyber SecuritySinking a ship and hiding the evidence18 Feb 2019

1705 - Search - How-TosOracle MAF store bypass, a how-to15 Feb 2019

1706 - Search - Vulnerability DisclosureVulnerability disclosure buzzword bingo!14 Feb 2019

1707 - Search - Consumer AdviceBBC Inside Out. Consumer advice for the ‘smart’ homeowner11 Feb 2019

1708 - Search - How-TosBurp HMAC header extensions, a how-to07 Feb 2019

1709 - Search - Internet Of ThingsSuper-systemic IoT flaws05 Feb 2019

1710 - Search - Maritime Cyber SecurityHacking floating hotels. Cruise ship compromise on the high seas30 Jan 2019

1711 - Search - Internet Of ThingsGPS watch issues… AGAIN29 Jan 2019

1712 - Search - Internet Of ThingsIoT: OFF by default11 Jan 2019

1713 - Search - Maritime Cyber SecurityShipping operators, what you need to know about phishing and CEO fraud08 Jan 2019

1714 - Search - Internet Of ThingsHacking the Echo echo echo02 Jan 2019

1715 - Search - Internet Of ThingsHackers in Hot Water. Pwning smart hot tubs, yes really22 Dec 2018

1716 - Search - Maritime Cyber SecuritySatellite communications equipment security13 Dec 2018

1717 - Search - Consumer AdviceWorried about Spouseware?05 Dec 2018

1718 - Search - Consumer AdviceBBC: MiSafes’ child-tracking smartwatches are ‘easy to hack’26 Nov 2018

1719 - Search - Consumer AdviceITV: New rules to prevent children’s ‘smart’ toys from being hacked26 Nov 2018

1720 - Search - Consumer AdviceAdvice on buying ‘smart’ gadgets for Christmas21 Nov 2018

1721 - Search - Consumer AdviceConsumer Advice: Kids GPS tracker watch security15 Nov 2018

1722 - Search - Internet Of ThingsTracking and snooping on a million kids15 Nov 2018

1723 - Search - Internet Of ThingsFlogging a dead smart horse09 Nov 2018

1724 - Search - How-TosNo need for lock picking tools02 Nov 2018

1725 - Search - Ghost hardware. Device No.1, the Ghost Pro31 Oct 2018

1726 - Search - Internet Of ThingsGhost hardware. Device No.3, the Ghost Rover31 Oct 2018

1727 - Search - Ghost hardware. Device No.2, the Boo Buddy31 Oct 2018

1728 - Search - Internet Of ThingsHacking ghost hunters30 Oct 2018

1729 - Search - How-TosCisco device config dumping26 Oct 2018

1730 - Search - Vulnerability AdvisoryTime Travel Debugging: finding Windows GDI flaws10 Oct 2018

1731 - Search - Internet Of Things‘Secure by Design’ & SB-327. Standards for a secure IoT?09 Oct 2018

1732 - Search - Internet Of ThingsSmart male chastity lock cock-up – plot thickening09 Oct 2018

1733 - Search - Internet Of ThingsWhich? Magazine recommends vulnerable smart home camera08 Oct 2018

1734 - Search - How-TosRunning a security awareness program01 Oct 2018

1735 - Search - Internet Of ThingsSpeaking at TEDx28 Sep 2018

1736 - Search - Maritime Cyber SecurityContainer theft, the legal system and poor maritime security21 Sep 2018

1737 - Search - Maritime Cyber SecurityHacking AIS18 Sep 2018

1738 - Search - Internet Of ThingsHacking an assault tank… A Nerf one13 Sep 2018

1739 - Search - Maritime Cyber SecurityAutomotive theft affects shipping security07 Sep 2018

1740 - Search - Internet Of ThingsSmart Locks: Dumb Security31 Aug 2018

1741 - Search - Internet Of ThingsSmart Lock Security: Interview with hardware.io30 Aug 2018

1742 - Search - Internet Of ThingsPTP, IoT & the Norwegian Government15 Aug 2018

1743 - Search - OpinionsHacking the Bitfi Part 5: MITM transactions14 Aug 2018

1744 - Search - OpinionsBitfi research receives Pwnie Award for ‘lamest vendor response’09 Aug 2018

1745 - Search - How-TosTamper proofing review: the iZettle card payment terminal08 Aug 2018

1746 - Search - How-TosCopycat Kali, with mykali for Kali Linux07 Aug 2018

1747 - Search - OpinionsHacking the Bitfi Part 3: The device with no storage03 Aug 2018

1748 - Search - Maritime Cyber SecurityCOSCO incident. Phishing frenzy and exploding goods?03 Aug 2018

1749 - Search - OpinionsHacking the Bitfi. Part 2: John McAfee’s video02 Aug 2018

1750 - Search - OpinionsHacking the Bitfi. Part 131 Jul 2018

1751 - Search - Opinions“Unhackable” Bitfi crypto wallet. What’s all the fuss about?30 Jul 2018

1752 - Search - Internet Of ThingsSecurity Alarm Round-up30 Jul 2018

1753 - Search - Internet Of ThingsFLIR FX / Lorex video stream hijack: Disclosure train wreck26 Jul 2018

1754 - Search - Internet Of ThingsHacking Swann & FLIR/Lorex home security camera video26 Jul 2018

1755 - Search - Vulnerability AdvisoryBluetooth vuln CVE-2018-5383 explained24 Jul 2018

1756 - Search - Internet Of ThingsEU Cybersecurity Act IoT FAIL19 Jul 2018

1757 - Search - How-TosData exfiltration techniques11 Jul 2018

1758 - Search - Internet Of ThingsBreaking up is hard to do… with IoT06 Jul 2018

1759 - Search - Maritime Cyber SecurityHacking Navtex maritime warning messages03 Jul 2018

1760 - Search - Maritime Cyber SecurityHacking Serial Networks on Ships25 Jun 2018

1761 - Search - Reverse EngineeringHardware reverse engineering. A tale from the workbench22 Jun 2018

1762 - Search - How-TosWindows Server settings. Administrative Templates – Network Items. A security how-to21 Jun 2018

1763 - Search - Internet Of ThingsTotally Pwning the Tapplock (the API way)15 Jun 2018

1764 - Search - Internet Of ThingsTotally Pwning the Tapplock Smart Lock13 Jun 2018

1765 - Search - Maritime Cyber SecurityHacking, tracking, stealing and sinking ships04 Jun 2018

1766 - Search - How-TosSo, you just caused a data breach, by CCing the wrong person in an email…01 Jun 2018

1767 - Search - Internet Of ThingsZ-Shave. Exploiting Z-Wave downgrade attacks23 May 2018

1768 - Search - How-TosPenetration Testing Requirements for GDPR18 May 2018

1769 - Search - Internet Of ThingsHijacking Philips Hue16 May 2018

1770 - Search - Maritime Cyber SecurityStealing container ship cargo through LOC messaging15 May 2018

1771 - Search - Maritime Cyber SecurityWhat can maritime insurers learn from cyber liability insurers?10 May 2018

1772 - Search - How-TosHacking train passenger Wi-Fi08 May 2018

1773 - Search - Social EngineeringMan Climbs Severn Bridge. Your office is twice as easy and half as scary03 May 2018

1774 - Search - Internet Of Things‘Hacking’ the Nespresso Prodigio and Jura E8 coffee machines17 Apr 2018

1775 - Search - How-TosSoldering for Reverse Engineering. Swapping out eSIMs with “normal” SIMs13 Apr 2018

1776 - Search - How-TosAccidentally “hacking” Red Hat08 Apr 2018

1777 - Search - Consumer AdviceA day in the life of Open Banking06 Apr 2018

1778 - Search - How-TosFrom PNG tEXt to Persistent XSS06 Apr 2018

1779 - Search - Maritime Cyber SecurityMaersk wasn’t hacked03 Apr 2018

1780 - Search - Maritime Cyber SecurityCrashing ships by hacking NMEA sentences26 Mar 2018

1781 - Search - Internet Of ThingsPTP and Microsoft to brief EU Parliament19 Mar 2018

1782 - Search - How-TosAbusing Duo 2FA16 Mar 2018

1783 - Search - Maritime Cyber SecurityTactical Advice for Maritime Cyber Security – Top 1012 Mar 2018

1784 - Search - How-TosIf you aren’t soldering, you probably aren’t testing IoT thoroughly08 Mar 2018

1785 - Search - How-TosDocker for Hackers? A pen tester’s guide08 Mar 2018

1786 - Search - Internet Of ThingsWHY is consumer IoT insecure?07 Mar 2018

1787 - Search - Internet Of ThingsSecurity by Design. UK Gov’s first stab at IoT consumer protection isn’t good enough07 Mar 2018

1788 - Search - Internet Of ThingsHijacking & rick rolling a smart guitar amp26 Feb 2018

1789 - Search - Internet Of ThingsReverse Engineering BLE from Android apps with Frida23 Feb 2018

1790 - Search - Internet Of ThingsIoT vulns are unexploitable by the masses. Wrong21 Feb 2018

1791 - Search - Internet Of ThingsXiong Mai DVR Revisited19 Feb 2018

1792 - Search - Internet Of ThingsHacking / ruining the Samsung Smart Fridge14 Feb 2018

1793 - Search - Maritime Cyber SecurityHacking maritime blockchains12 Feb 2018

1794 - Search - Internet Of ThingsA smart sex toy that pings your employer?12 Feb 2018

1795 - Search - Reverse EngineeringReverse engineering microcontrollers WITHOUT a datasheet09 Feb 2018

1796 - Search - Internet Of ThingsWant entropy? Don’t use a floating ADC input06 Feb 2018

1797 - Search - Internet Of ThingsRuntastic deserves more ‘heat’ than Strava!02 Feb 2018

1798 - Search - BlockchainBlockchain. Changing the attackers aim26 Jan 2018

1799 - Search - Internet Of ThingsNoT: Taking the ‘internet’ out of IoT25 Jan 2018

1800 - Search - OpinionsVTech strikes again18 Jan 2018

1801 - Search - How-TosBuilding half a ‘Proxmark’ for $1018 Jan 2018

1802 - Search - Maritime Cyber SecurityHacking maritime IFTFCC messaging for invoice fraud09 Jan 2018

1803 - Search - How-TosNRF51822 code readout protection bypass- a how-to05 Jan 2018

1804 - Search - Maritime Cyber SecurityTracking & hacking ships with Shodan & AIS03 Jan 2018

1805 - Search - OT, ICS, IIoT, SCADATop 10 things to improve OT security03 Jan 2018

1806 - Search - Internet Of ThingsThe most common IoT device security failings of 201702 Jan 2018

1807 - Search - Maritime Cyber SecuritySinking bulk carrier ships by hacking HSMS13 Dec 2017

1808 - Search - OT, ICS, IIoT, SCADAToo cold to work? School closed? Sure your BMS hasn’t been hacked?11 Dec 2017

1809 - Search - How-TosHacking a talking toy parrot01 Dec 2017

1810 - Search - Internet Of ThingsThis week’s IoT security news27 Nov 2017

1811 - Search - Automotive SecurityPractical security advice for keyless cars27 Nov 2017

1812 - Search - How-TosHacking your office through your screen caster24 Nov 2017

1813 - Search - Internet Of ThingsDestroy kids GPS watches says German Federal Network Agency17 Nov 2017

1814 - Search - Internet Of ThingsIoT vendors. Avoid recalls, choose a secure chip17 Nov 2017

1815 - Search - Maritime Cyber SecurityMaking prawn espressos, or hacking ships by deciphering BAPLIE EDIFACT messaging17 Nov 2017

1816 - Search - Maritime Cyber SecuritySinking container ships by hacking load plan software16 Nov 2017

1817 - Search - How-TosExfiltration by encoding data in pixel colour values08 Nov 2017

1818 - Search - How-TosHow to crack private APN keys with hashcat31 Oct 2017

1819 - Search - Automotive SecurityHacking IoT vendors & smart cars via private APNs23 Oct 2017

1820 - Search - Vulnerability AdvisoryCompromising unencrypted butt plug comms18 Oct 2017

1821 - Search - Maritime Cyber SecurityOSINT from ship satcoms13 Oct 2017

1822 - Search - How-TosGirl on a train. The snooping girl on a train: The Sequel12 Oct 2017

1823 - Search - Maritime Cyber SecurityMaritime OT networks. A Primer10 Oct 2017

1824 - Search - Internet Of ThingsThe art of finding JTAG on PCBs04 Oct 2017

1825 - Search - Internet Of ThingsScrewdriving. Locating and exploiting smart adult toys29 Sep 2017

1826 - Search - Internet Of ThingsDumping CC2540 Firmware. An IoT how-to18 Sep 2017

1827 - Search - Social EngineeringSocial engineering in the (festival) field05 Sep 2017

1828 - Search - Internet Of ThingsTearing down the Star Wars Battle Drone toy from Propel01 Sep 2017

1829 - Search - How-TosBypass Windows auth & BitLocker with forgotten password function25 Aug 2017

1830 - Search - Internet Of ThingsIoT: Convenience vs. Privacy. Where do you draw the line?24 Aug 2017

1831 - Search - BlockchainBlockchain Implementation Security. A hardening how-to22 Aug 2017

1832 - Search - Internet Of ThingsBrick or Bot? Solving OTA update issues16 Aug 2017

1833 - Search - Internet Of ThingsAnalysis: Draft US Senate IoT security bill10 Aug 2017

1834 - Search - Internet Of Things“Alexa, use IoT to kill the power grid”07 Aug 2017

1835 - Search - Consumer AdviceWhich IoT product should I buy?01 Aug 2017

1836 - Search - OT, ICS, IIoT, SCADAUpdate your PLC firmware. A reminder25 Jul 2017

1837 - Search - Internet Of ThingsAdult IoT toys. Privacy invasion or worse?24 Jul 2017

1838 - Search - Internet Of ThingsIoT security testing methodologies20 Jul 2017

1839 - Search - How-TosProject Dumb2Smart. How to build a secure IoT device. Part One: Dumb18 Jul 2017

1840 - Search - Internet Of ThingsCould ‘Right to Repair’ heighten the risk for IoT and smart devices?12 Jul 2017

1841 - Search - Internet Of ThingsUnBrickerBot? XiongMai fix Mirai DVR security issues… and fail03 Jul 2017

1842 - Search - Hardware HackingObfuscating consumer IoT hardware. Is it worth it?29 Jun 2017

1843 - Search - OpinionsPetya/NotPetya. What you need to know28 Jun 2017

1844 - Search - OpinionsCyber Mum Vs Cyber Daughter28 Jun 2017

1845 - Search - Consumer AdviceHome Wi-Fi routers. Is yours secure?23 Jun 2017

1846 - Search - Internet Of ThingsWhat did Mirai Miss? Making a better, bigger botnet06 Jun 2017

1847 - Search - Internet Of ThingsHacking wireless house alarms05 Jun 2017

1848 - Search - Internet Of ThingsIN THE NEWS: BBC Click. The IoT at Dover Castle24 May 2017

1849 - Search - OpinionsIN THE NEWS: Samsung’s S8 Iris and biometric revocation24 May 2017

1850 - Search - How-TosWhat I learned about managing worm outbreaks… 14 years ago16 May 2017

1851 - Search - OpinionsWannaCry ransomware. It’s not all bad news15 May 2017

1852 - Search - How-TosHow to reverse engineer MSWord malware08 May 2017

1853 - Search - Vulnerability DisclosureResponsible disclosure didn’t work? How to get an IoT vendor to take notice05 May 2017

1854 - Search - How-TosFaster EEPROM firmware reads? Use a Pi!04 May 2017

1855 - Search - How-TosGirl on a train. The snooping girl on a train28 Apr 2017

1856 - Search - Automotive SecurityHacking tractors is a thing. Is it the start of something else for connected cars?26 Apr 2017

1857 - Search - AndroidDecoding React Native creds on Android21 Apr 2017

1858 - Search - Internet Of ThingsKeep your IoT schematics private19 Apr 2017

1859 - Search - Internet Of ThingsIoT Aga. Cast iron Security Flaw12 Apr 2017

1860 - Search - Internet Of ThingsVulnerable Wi-Fi dildo camera endoscope. Yes really03 Apr 2017

1861 - Search - Internet Of ThingsNifty XSS in Annke SP1 HD wireless camera23 Mar 2017

1862 - Search - Internet Of ThingsJurassic Poke: Hacking a Dino toy16 Mar 2017

1863 - Search - Automotive SecurityIn The News. DW TV. Driverless/connected car security14 Mar 2017

1864 - Search - How-TosLAN surfing. How to use JavaScript to Execute Arbitrary Code on Routers13 Mar 2017

1865 - Search - Internet Of ThingsWeeping Angel / Fake OFF for Android TV08 Mar 2017

1866 - Search - Internet Of ThingsWeeping Angel. Old News?08 Mar 2017

1867 - Search - Internet Of ThingsNo Genesis Toys, My Friend Cayla can be hacked even if you do follow the instructions!06 Mar 2017

1868 - Search - OpinionsYou can have your cookie and eat it!03 Mar 2017

1869 - Search - Consumer AdviceCloudPets data breach28 Feb 2017

1870 - Search - Automotive SecurityPathway to driverless cars. UK law and liability.27 Feb 2017

1871 - Search - OpinionsPTP brief UK Government on Cyber Security and call for IoT legislation23 Feb 2017

1872 - Search - Internet Of ThingsMyFriendCayla banned. Are all listening Bluetooth devices set for the bin?21 Feb 2017

1873 - Search - Internet Of ThingsOur Friend Cayla: No Longer Welcome in Germany!17 Feb 2017

1874 - Search - How-TosHelp users spot phishing. Tag fake “internal” emails for them16 Feb 2017

1875 - Search - Internet Of ThingsScrew Cayla: Use Chromecast for rogue Amazon Echo voice control!14 Feb 2017

1876 - Search - BlockchainSecure all the things with other things via the Blockchain!10 Feb 2017

1877 - Search - Internet Of ThingsEnd of the line, Internet of Things02 Feb 2017

1878 - Search - Consumer AdviceHow to avoid blowing your privacy online25 Jan 2017

1879 - Search - Internet Of ThingsLeaked DVR creds added to the IoT Fail list11 Jan 2017

1880 - Search - Internet Of ThingsWho wants a hairbrush that’s connected to the internet?06 Jan 2017

1881 - Search - Internet Of ThingsEdimax Wi-Fi Extender can disclose your WPA key06 Jan 2017

1882 - Search - Internet Of ThingsChristmas lights. Festive security issues?05 Jan 2017

1883 - Search - Automotive SecurityBMW integrates Alexa / Echo. Did I read that right?!16 Dec 2016

1884 - Search - Internet Of ThingsJust in time for Christmas- the Cayla reminder16 Dec 2016

1885 - Search - In the newsTalkTalk router hack. Consumers, what should you do?07 Dec 2016

1886 - Search - Internet Of ThingsIoT Encryption: The challenge of missing entropy07 Dec 2016

1887 - Search - Internet Of ThingsMy Friend Cayla wakes up and smells the lawsuits06 Dec 2016

1888 - Search - Internet Of ThingsTalkTalk and other ISPs need to replace customer routers urgently03 Dec 2016

1889 - Search - Internet Of ThingsTR-064 worm. It’s not Mirai and the outages are interesting02 Dec 2016

1890 - Search - PasswordsPassword stuffing: How to avoid breaches from password re-use30 Nov 2016

1891 - Search - Internet Of ThingsCan Linux really be owned by holding the Enter key?16 Nov 2016

1892 - Search - Vulnerability AdvisoryNetgear EX7000 Wi-Fi Range Extender. Minor XSS and Poor Password Handling15 Nov 2016

1893 - Search - Internet Of ThingsFilling in gaps in Mirai. It’s about DVRs, not cameras11 Nov 2016

1894 - Search - How-TosCan’t get data onto that machine? Download a tunnel client over DNS10 Nov 2016

1895 - Search - Internet Of ThingsThe Wi-Fi enabled LG air conditioner08 Nov 2016

1896 - Search - How-TosScripting Metasploit to exploit a group of hosts. A how-to.04 Nov 2016

1897 - Search - Internet Of ThingsWhat is Mirai? The malware explained03 Nov 2016

1898 - Search - Internet Of ThingsToo little, too late. IoT vendors wake up and smell the coffee. …and the lawsuits27 Oct 2016

1899 - Search - Internet Of ThingsSmart Fridge. Dumb idea?21 Oct 2016

1900 - Search - Vulnerability AdvisoryA “Neet” CSRF to Reverse Shell in Wi-Fi music streamer13 Oct 2016

1901 - Search - Internet Of ThingsOptimising Mirai: A better IoT DDoS botnet?06 Oct 2016

1902 - Search - Internet Of ThingsYet another vulnerability in the Smarter Wi-Fi Kettle06 Oct 2016

1903 - Search - Internet Of ThingsIoT DDoS – we haven’t seen the half of it yet. Nor have utilities…27 Sep 2016

1904 - Search - How-TosASUS RT-AC66U router. A couple of bug fixes27 Sep 2016

1905 - Search - AndroidAttacking Android through custom updates20 Sep 2016

1906 - Search - Vulnerability AdvisoryBT Wi-Fi Extender. Multiple security issues. Upgrade ASAP19 Sep 2016

1907 - Search - AndroidArgos MyTablet FUBAR09 Sep 2016

1908 - Search - How-TosCSRFing Facebook games07 Sep 2016

1909 - Search - Internet Of ThingsAll your video are belong to us part 3. The D-Link 932L webcam05 Sep 2016

1910 - Search - Vulnerability AdvisorySandbox vuln in Tales of Maj’Eyal05 Sep 2016

1911 - Search - How-TosHow to abuse SSH keys31 Aug 2016

1912 - Search - Internet Of ThingsStupidly insecure electronic / RFID door lock19 Aug 2016

1913 - Search - Automotive Securitywigle.net suppresses Mitsubishi Outlander Wi-Fi hits11 Aug 2016

1914 - Search - Internet Of ThingsSamsung’s smart camera. A tale of IoT & network security11 Aug 2016

1915 - Search - Internet Of ThingsThermostat Ransomware: a lesson in IoT security08 Aug 2016

1916 - Search - Internet Of ThingsSmarter Coffee machines still being found unconfigured19 Jul 2016

1917 - Search - Vulnerability AdvisoryXSS in SAP BI Documents12 Jul 2016

1918 - Search - Internet Of ThingsHome security camera isn’t secure. SpotCam in the spotlight07 Jul 2016

1919 - Search - Vulnerability AdvisorySymantec endpoint protection. Update now!06 Jul 2016

1920 - Search - Internet Of ThingsAlarm systems alarmingly insecure. Oh the irony29 Jun 2016

1921 - Search - Internet Of ThingsAll your video are belong to us part 2. The TP Link TL-SC3230’s CSRF27 Jun 2016

1922 - Search - Internet Of ThingsAll your video are belong to us. The Foscam webcam21 Jun 2016

1923 - Search - Automotive SecurityHacking the Mitsubishi Outlander. Working out the protocol14 Jun 2016

1924 - Search - Consumer IoT security is often terrible, but it doesn’t have to be…14 Jun 2016

1925 - Search - Automotive SecurityHacking the Mitsubishi Outlander PHEV hybrid05 Jun 2016

1926 - Search - Vulnerability AdvisoryMoodle e-Learning platform vulnerability01 Jun 2016

1927 - Search - AndroidSnooping Sony Bravia TV20 May 2016

1928 - Search - How-TosHow I can gain control of your TP-LINK home switch20 May 2016

1929 - Search - How-TosAn interesting route to domain admin- iSCSI18 May 2016

1930 - Search - Automotive SecurityDiscrimination by telematics?09 May 2016

1931 - Search - How-TosRATing through the Steam Workshop28 Apr 2016

1932 - Search - Internet Of ThingsAdvice for IoT device manufacturers22 Apr 2016

1933 - Search - Internet Of ThingsSnooping where the sun doesn’t shine22 Apr 2016

1934 - Search - BBC Panorama. How we hacked the house16 Apr 2016

1935 - Search - AndroidHow-to subvert Android backups to export sandboxed app files14 Apr 2016

1936 - Search - Vulnerability AdvisoryXSS in SAP Business Intelligence Documents12 Apr 2016

1937 - Search - Macs / AppleMobile App Tips. Dealing with iOS and device requirements10 Apr 2016

1938 - Search - Vulnerability AdvisoryDOM XSS in iThemes Security Pro05 Apr 2016

1939 - Search - How-TosHow a Pentester books a Squash court31 Mar 2016

1940 - Search - AndroidAnother (un)smart Smarter app24 Mar 2016

1941 - Search - AndroidHow we made the listening-in Android app23 Mar 2016

1942 - Search - How-TosHow to defend against Pass-the-Hash (PtH) attacks21 Mar 2016

1943 - Search - How-TosDIY: How to build your own host-based IDS (HIDS) using OSSEC16 Mar 2016

1944 - Search - AndroidApps and Après. Skiing and privacy15 Mar 2016

1945 - Search - AndroidNew Chromecast & Chromecast Audio. Have they fixed their hijacking issue?11 Mar 2016

1946 - Search - AndroidBLN’s IoT Forum. What went down10 Mar 2016

1947 - Search - AndroidAre your phones listening to you?02 Mar 2016

1948 - Search - How-TosHow to exploit XSS with CSRF26 Feb 2016

1949 - Search - How-Tosglibc stack-based buffer overflow. What you need to know: UPDATE24 Feb 2016

1950 - Search - How-TosPwning CCTV cameras: Update23 Feb 2016

1951 - Search - How-Tosglibc stack-based buffer overflow. What you need to know22 Feb 2016

1952 - Search - How-TosPowerShell and VBScript: Getting full DB access via restricted desktop apps18 Feb 2016

1953 - Search - How-TosCisco ASA Remote Code Execution – Buffer Overflow in IKE code16 Feb 2016

1954 - Search - OpinionsWhen VTech meets the GDPR11 Feb 2016

1955 - Search - How-TosPwning CCTV cameras10 Feb 2016

1956 - Search - How-TosHow to reverse Wyse terminal password crypto: Method Two10 Feb 2016

1957 - Search - How-TosHow to reverse Wyse terminal password crypto: Method One09 Feb 2016

1958 - Search - How-TosJust how secure is the average home Wi-Fi router?08 Feb 2016

1959 - Search - AndroidWhy I think that U.S. house is hounded by phone trackers25 Jan 2016After the BBC contacted us for comment on this story I thought it’d be useful and interesting to share the details that were omitted, as well as the reasoning behind some of my assumptions (none of which involve the Bermuda triangle BTW).

1960 - Search - How-TosReading Atmel AVR MCUs23 Jan 2016

1961 - Search - AndroidWho is tracking your run? Run and bike activity tracking app privacy issues investigated22 Jan 2016

1962 - Search - How-TosSteal your Wi-Fi key from your doorbell? IoT WTF! UPDATE12 Jan 2016

1963 - Search - AndroidSteal your Wi-Fi key from your doorbell? IoT WTF!08 Jan 2016

1964 - Search - AndroidStar Wars BB-8 IoT toy: awesome fun, but can it be turned to the Dark Side with this vulnerability?06 Jan 2016

1965 - Search - Internet Of ThingsWi-Fi HaLow 802.11ah for IoT. 802.11uh-oh?05 Jan 2016

1966 - Search - AndroidOWASP Birmingham IoT Hackathon17 Dec 2015

1967 - Search - Consumer AdviceWhy buying a smart toy for a child might be the craziest thing you could do10 Dec 2015

1968 - Search - AndroidVtech Innotab Max file extraction: Finding the Superblock07 Dec 2015

1969 - Search - AndroidVTech Innotab Max: it’s getting even worse! Apps run in debug mode03 Dec 2015

1970 - Search - AndroidVTech Innotab Max vulnerable to trivial data extraction02 Dec 2015

1971 - Search - How-TosCollateral Damage: Top 5 Reasons You Should be Scared of Your Customers26 Nov 2015

1972 - Search - New Furby Teardown24 Nov 2015

1973 - Search - AndroidNew, easier ways to make My Friend Cayla swear20 Nov 2015

1974 - Search - Internet Of ThingsThe IoT: Innovation or Exploitation?18 Nov 2015

1975 - Search - Yet another Lovense smart vibrator flaw17 Nov 2015

1976 - Search - How-TosHacking a Wi-Fi Coffee Machine – Part 116 Nov 2015

1977 - Search - Consumer AdviceSome simple security advice for computer and smartphone users13 Nov 2015

1978 - Search - Internet Of ThingsWhat if your fridge said “no”? What if indeed?11 Nov 2015

1979 - Search - OpinionsConcerned about KeeFarce? Don’t be. Why you should still use a password vault09 Nov 2015

1980 - Search - How-TosThe TalkTalk breach, Ken Munro will be on the BBC later…23 Oct 2015

1981 - Search - AndroidNew Wi-Fi kettle, same old security issues? Meh.15 Oct 2015

1982 - Search - AndroidTonight’s CSI Cyber: implausible Marla talking doll hack. Fiction stranger than truth for once06 Oct 2015

1983 - Search - How-TosHacking the Aldi IP CCTV Camera (part 2)02 Oct 2015

1984 - Search - Social EngineeringMicrosoft, phishing emails, and lessons to learn25 Sep 2015

1985 - Search - AndroidShould I enable encryption my Android handset?23 Sep 2015

1986 - Search - How-TosHow to get Windows to give you credentials through LLMNR22 Sep 2015

1987 - Search - AndroidAndroid Lock Screen Bypass16 Sep 2015

1988 - Search - How-TosCESG and CPNI put passwords back in the spotlight. Have they got it right?16 Sep 2015

1989 - Search - How-Tos44CON London: Our IoT Security Workshop11 Sep 2015

1990 - Search - How-TosTweaking nmap for hostile networks. A How-to09 Sep 2015

1991 - Search - Internet Of ThingsPen Test Partners IoT workshop at 44CON London07 Sep 2015

1992 - Search - How-TosHow do you know that you aren’t compromised?28 Aug 2015

1993 - Search - How-TosGrab the UI lock password from McAfee A/V, kill the service, send in the malware26 Aug 2015

1994 - Search - AndroidHow to extract sensitive plaintext data from Android memory19 Aug 2015

1995 - Search - AndroidHacking DefCon 23’s IoT Village Samsung fridge18 Aug 2015

1996 - Search - How-TosAirDrop and Cyber Flashing, what’s the deal?13 Aug 2015

1997 - Search - AndroidInside the spy tank; a hardware review.11 Aug 2015

1998 - Search - How-TosDenial-of-Service bug in BIND04 Aug 2015

1999 - Search - How-TosHow to create poisoned Office documents for your staff awareness training – part 230 Jul 2015

2000 - Search - Shameless Self PromotionGoing to DefCon 23? Come to our IoT Village workshop!29 Jul 2015

2001 - Search - How-TosHow to create poisoned Office documents for your staff awareness training – part 128 Jul 2015

2002 - Search - AndroidHow to hack an app enabled device to make it truly internet enabled17 Jul 2015

2003 - Search - AndroidAndroid debug mode and apps. A cautionary tale15 Jul 2015

2004 - Search - How-TosHydra the logon cracker, a brute-forcing how-to user guide13 Jul 2015

2005 - Search - AndroidBasic safety tips for mobile devices08 Jul 2015

2006 - Search - How-TosThe tiniest PHP system shell ever?07 Jul 2015

2007 - Search - OpinionsOracle wants you to run vulnerable Java to remove vulnerable versions of Java03 Jul 2015

2008 - Search - How-TosFinding wireless kettles with social networks01 Jul 2015

2009 - Search - How-TosAbusing software updates. GoPro Studio desktop app: Samsung keyboard app-style fail29 Jun 2015

2010 - Search - HoneypotsShiva, the spam honeypot. Tips and tricks for getting it up and running.26 Jun 2015

2011 - Search - AndroidYet another attack against the iKettle wireless kettle. Rumpy pumpy and fire alarms?23 Jun 2015

2012 - Search - AndroidMy Friend Cayla. Updated app; Updated security fails. How to make her swear (again!)22 Jun 2015Encrypting the database has done virtually nothing to secure the doll and app.

2013 - Search - PasswordsChange your password to smiling, winking, pensive, sleepy….17 Jun 2015Or not. Why I think emoji PINs are mostly pointless.

2014 - Search - AndroidCommon coding fails when writing Android mobile apps17 Jun 2015It’s amazing how many simple issues create significant security holes.

2015 - Search - AndroidWhy you’re better off buying expensive smart scales15 Jun 2015

2016 - Search - OpinionsCVSSv3. What’s changed? …or why even bother?12 Jun 2015

2017 - Search - How-TosExtracting your WPA PSK from bathroom scales08 Jun 2015

2018 - Search - AndroidHacking kettles & extracting plain text WPA PSKs. Yes really!08 Jun 2015

2019 - Search - How-TosInfosecurity Europe 2015 round up05 Jun 2015

2020 - Search - AndroidGoPro Wi-Fi issues could mean stolen video, or worse…01 Jun 2015

2021 - Search - AndroidShort mobile PINs ARE bad, but I hate vendor FUD more!29 May 2015

2022 - Search - Cyber Liability InsuranceCyber liability insurance. Will your underwriter wriggle out of the claim?28 May 2015

2023 - Search - OpinionsThought you had seen FUD? Now see this: a rock can protect your computer from viruses22 May 2015

2024 - Search - OpinionsWhy I hate named vulnerabilities22 May 2015

2025 - Search - Vulnerability DisclosureEthical disclosure and the Internet of Things20 May 2015

2026 - Search - PasswordsWhy you need to make your passwords more complex13 May 2015

2027 - Search - AndroidZero-code platforms? More like zero-clue platforms07 May 2015

2028 - Search - HoneypotsHoneypots; a usage guide05 May 2015

2029 - Search - Cyber Liability InsuranceRyanair. A timely reminder why Europeans need First Party Cyber Liability Insurance01 May 2015

2030 - Search - How-TosHow to read from an EEPROM27 Apr 2015

2031 - Search - How-TosMS15-034. What you need to know16 Apr 2015

2032 - Search - How-TosHacking the IP camera (part 1)10 Apr 2015

2033 - Search - AndroidMove over SHA-1, SHA-2 is coming. Here’s the why and the how09 Apr 2015

2034 - Search - How-TosProtecting yourself from your customers31 Mar 2015

2035 - Search - AndroidDIY dual boot Nexus tablet; make your own mobile test rig with NetHunter24 Mar 2015

2036 - Search - How-TosEAP-TLS: Where Mac security is worse than Windows19 Mar 2015

2037 - Search - AndroidMessing around with dildos. How to drive a vibrator with RealTerm13 Mar 2015

2038 - Search - Macs / AppleApple watch. A must-have or another personal security nightmare?11 Mar 2015

2039 - Search - How-TosSamsung TV voice encryption UPDATE: Fixed, but not quite…06 Mar 2015

2040 - Search - How-TosThe lowdown on the SKIP-TLS and FREAK flaws UPDATE06 Mar 2015

2041 - Search - How-TosThe lowdown on the SKIP-TLS and FREAK flaws05 Mar 2015

2042 - Search - OpinionsBiometric revocation not an option04 Mar 2015

2043 - Search - AndroidSpeech recognition mobile assistants, the lowdown starts here02 Mar 2015

2044 - Search - OpinionsIs your Samsung TV listening to you? – UPDATE27 Feb 2015

2045 - Search - How-TosThe Right Way To Do Session Management25 Feb 2015

2046 - Search - AndroidFight! Fight! Hello Barbie vs My Friend Cayla18 Feb 2015

2047 - Search - How-TosIs your Samsung TV listening to you?16 Feb 2015

2048 - Search - How-TosExploiting SUID Executables09 Feb 2015

2049 - Search - AndroidCracking Android passwords, a how-to02 Feb 2015

2050 - Search - AndroidMaking children’s toys swear23 Jan 2015

2051 - Search - How-TosRC4 cipher considered harmful?22 Jan 2015

2052 - Search - How-TosHow to test wireless systems: A step-by-step guide (part 2)20 Jan 2015

2053 - Search - How-TosAre your smart weighing scales lying to you? Quite possibly (part 2)09 Jan 2015

2054 - Search - How-TosAre your smart weighing scales lying to you? Quite possibly (part 1)06 Jan 2015

2055 - Search - How-TosHow to test wireless systems: A step-by-step guide05 Jan 2015

2056 - Search - How-TosVisual Basic for Applications and the dangers of allowing Office macros30 Dec 2014

2057 - Search - How-TosPwning git: A Proof of Concept (PoC)24 Dec 2014

2058 - Search - OpinionsThe internet of toys, and why we’re holding back this Xmas23 Dec 2014

2059 - Search - How-TosGit client – time to patch!19 Dec 2014

2060 - Search - OpinionsGoogle’s No CAPTCHA reCAPTCHA, what we think15 Dec 2014

2061 - Search - AndroidData tethering on mobile devices – what are the risks?09 Dec 2014

2062 - Search - How-TosHacking Oracle Reporter- A how-to02 Dec 2014

2063 - Search - Bring Your Own Device or Bring Your Own Security Disaster? Some simple MDM policy advice29 Nov 2014

2064 - Search - OpinionsProtocol vs Implementation. Why MS14-066 and SChannel got my goat12 Nov 2014

2065 - Search - How-TosPatch management, it’s sexy, here’s why11 Nov 2014

2066 - Search - AndroidApp creep: Facebook security issues10 Nov 2014

2067 - Search - Social EngineeringThe spoofed number phone call scam03 Nov 2014

2068 - Search - How-TosUsing nfsshell to compromise older environments24 Oct 2014

2069 - Search - AndroidTearing down and reverse engineering Android (toys)23 Oct 2014

2070 - Search - How-TosUsing hexdump analysis for firmware extraction: A how-to20 Oct 2014

2071 - Search - How-TosEfficient Password Cracking Where LM Hashes Exist for Some Users17 Oct 2014

2072 - Search - How-TosCritical SQL Injection Vulnerability in Drupal 7.0-7.3116 Oct 2014

2073 - Search - How-TosPOODLE SSLv3 Redux: How to fix it15 Oct 2014

2074 - Search - AndroidFurther Rockchip Android brokenness13 Oct 2014

2075 - Search - AndroidBBC article: Prevent devices being remotely wiped, here’s how to do it properly10 Oct 2014

2076 - Search - AndroidFirst Hudl2 Teardown?08 Oct 2014

2077 - Search - How-TosUsing Applocker to protect your users from themselves, and you from your users06 Oct 2014

2078 - Search - Shell Shock: What it is, and what you can do25 Sep 2014

2079 - Search - Social EngineeringWho watches the watchmen? A social engineer’s cautionary tale of spy watches24 Sep 2014

2080 - Search - How-TosNmap for Sysadmins22 Sep 2014

2081 - Search - AndroidSecond hand budget Android tablets spark privacy and online safety concerns17 Sep 2014

2082 - Search - AndroidIs a remote wipe any better than a factory reset on an Android device?16 Sep 2014

2083 - Search - AndroidRecovering data from ‘wiped’ Android devices: A How To Guide15 Sep 2014

2084 - Search - How-TosMore on tuning John the Ripper15 Sep 2014

2085 - Search - How-TosCustom charsets and rules with John The Ripper and oclhashcat10 Sep 2014

2086 - Search - OpinionsToday’s BBC Article: Securing your nudie selfies02 Sep 2014

2087 - Search - AndroidAldi Lifetab also vulnerable to data recovery from memory28 Aug 2014

2088 - Search - OpinionsBBC Article: Tracking smartphones using Wi-Fi emissions26 Aug 2014

2089 - Search - AndroidNew Rockchip firmware being released, but who is going to flash my grandma’s tablet?22 Aug 2014

2090 - Search - AndroidTop 10 ways to compromise your mobile security that you’d never believe20 Aug 2014

2091 - Search - AndroidTesco Hudl 2 – our wish list18 Aug 2014

2092 - Search - How-TosTop 10 stupidest ways we’ve got domain admin13 Aug 2014

2093 - Search - Automotive SecurityYes, really. A car review on a pen test blog. It’s topical, honest!07 Aug 2014

2094 - Search - AndroidAdvanced traffic interception for mobile apps using Mallory and Burp06 Aug 2014

2095 - Search - PasswordsAdobe, eBay and other breaches. Should you change your password? Yes, but only if it’s a lousy password05 Aug 2014

2096 - Search - How-TosFurther IBM Maximo Asset Management Vulnerabilities Reported31 Jul 2014

2097 - Search - HoneypotsWork on our honeynet continues apace30 Jul 2014

2098 - Search - OpinionsShiny New Pen Test Report! So What…29 Jul 2014

2099 - Search - AndroidDon’t use PIN Patterns on Android25 Jul 2014

2100 - Search - Vulnerability DisclosureICO makes a mockery of disclosure23 Jul 2014

2101 - Search - Cyber Liability InsuranceSketchy BIS Report Data, FUD, and Why You Need Cyber Liability Insurance11 Jul 2014

2102 - Search - Code RepositoryPTP Code Respository07 Jul 2014

2103 - Search - How-TosAuditing AWS Security Groups – Part 207 Jul 2014

2104 - Search - How-TosHacking Sat Navs04 Jul 2014

2105 - Search - PasswordsUnicode – the future of passwords? Possibly…03 Jul 2014

2106 - Search - How-TosAuditing AWS Security Groups02 Jul 2014

2107 - Search - AndroidKey Sniffing with Android20 Jun 2014

2108 - Search - PasswordsPostal Services Breached, customers urged to change house numbers urgently18 Jun 2014

2109 - Search - How-TosIs everything actually broken? Software will always be flawed, but here’s what you can do about it17 Jun 2014

2110 - Search - PasswordsOne-way password hashing is essential, but it’s even better if you select the right algorithm12 Jun 2014

2111 - Search - How-TosOld pre-smartphones from eBay – Blackmail Central!10 Jun 2014

2112 - Search - How-TosBreaking Out of Citrix and other Restricted Desktop Environments06 Jun 2014

2113 - Search - AndroidHow to scrape plain text from an encrypted Android phone OR why most MDM products just don’t cut it04 Jun 2014

2114 - Search - PasswordsCorrectHorseBatteryStaple isn’t a good password. Here’s why.29 May 2014

2115 - Search - AndroidHow to hardware hack Android over UART29 May 2014

2116 - Search - How-TosBMW i3 password issues28 May 2014

2117 - Search - OpinionsThe truth behind vulnerabilities, a missive from the trenches23 May 2014

2118 - Search - AndroidHow to Hack the Hudl – We give Rockchip a good seeing to22 May 2014

2119 - Search - How-TosDefeating corporate anti-virus20 May 2014

2120 - Search - How-TosQuick and dirty binary analysis using sandboxes14 May 2014

2121 - Search - AndroidShameless self promotion – Pen Test Partners at Infosecurity Europe 201430 Apr 2014

2122 - Search - AndroidKeep your Android versions updated. Why? If you have to ask…24 Apr 2014

2123 - Search - HeartbleedWildcard SSL certificates, not good value any more, my Heartbleeds15 Apr 2014

2124 - Search - HeartbleedSecurity vs the community: you’re doing it right!14 Apr 2014

2125 - Search - HeartbleedHeartbleed in the wild, the call of duty14 Apr 2014

2126 - Search - How-TosNew Zeus variant may get lost in the clamour of Heartbleed11 Apr 2014

2127 - Search - HeartbleedWTF Heartbleed? Don’t make me move all my HTTPS services to HTTP and ditch SSL completely09 Apr 2014

2128 - Search - HeartbleedHeartbleed OpenSSL bug- overview and fixes08 Apr 2014

2129 - Search - How-TosWAF (Web Application Firewall) Testing for dummies08 Apr 2014

2130 - Search - OpinionsWhy you might want to rethink providing free wi-fi07 Apr 2014

2131 - Search - How-TosTop Tips For Internet Privacy04 Apr 2014

2132 - Search - How-TosScanning for Default Files01 Apr 2014

2133 - Search - HoneypotsHoney traps, a lesson in espionage, and managing your ego25 Mar 2014

2134 - Search - HoneypotsCreate a honeynet, dupe your attackers, build threat intelligence24 Mar 2014

2135 - Search - How-TosHacking Computer Games20 Mar 2014

2136 - Search - OpinionsConnected cars, signals systems, mischief and European drivers. These scare me.14 Mar 2014

2137 - Search - How-Tos8 ways to be great at password management, and protect your customers13 Mar 2014

2138 - Search - OpinionsReally? A notebook to write down your passwords in, sold by Amazon?10 Mar 2014

2139 - Search - How-TosPasswords: A step-by-step analysis of breaking them06 Mar 2014

2140 - Search - HoneypotsNeed to avoid a honeypot? Here’s how05 Mar 2014

2141 - Search - How-TosWebcam Security: I can SEE you!04 Mar 2014

2142 - Search - How-TosKeylogging domain creds; who needs a hash? Lock the victim’s workstation to order and snarf them immediately03 Mar 2014

2143 - Search - How-TosThreat Intelligence: Log File Hacking26 Feb 2014

2144 - Search - How-TosPassword re-use: the game is changing, SO USE A PASSWORD VAULT!21 Feb 2014

2145 - Search - How-TosCan you really wipe a mobile device remotely?20 Feb 2014

2146 - Search - How-TosDIY – Build Your Own “Pwn Pad” Style Nexus 7 Hack Box19 Feb 2014

2147 - Search - How-TosAnalysis of reported Tesco account and password data14 Feb 2014

2148 - Search - How-TosHow can I be tracked using my mobile devices? Here’s how…13 Feb 2014

2149 - Search - How-TosIt’s Safer Internet Day and we’ve got six tips to help you stay out of trouble11 Feb 2014

2150 - Search - Cyber Liability InsuranceCyber liability insurance, you need it, and here’s why…11 Feb 2014

2151 - Search - Hacker High School06 Feb 2014

2152 - Search - OpinionsThere are “pen tests” and then there are “PEN TESTS”…28 Jan 2014

2153 - Search - OpinionsEncryption and cloud based storage27 Jan 2014

2154 - Search - How-TosPasswords, passwords, passwords (repeat)24 Jan 2014

2155 - Search - How-TosBelt AND Braces: Web apps and mod_security22 Jan 2014

2156 - Search - How-TosData Exfiltration: DNS tunnelling using iodine20 Jan 2014

2157 - Search - How-TosTest early, test often: 6 things you should know about application security testing17 Jan 2014

2158 - Search - How-TosIBM Maximo Asset Management Vulnerability Reported16 Jan 2014

2159 - Search - How-TosAbusing Group Policy Preferences to Elevate Privileges06 Jan 2014

2160 - Search - Web application Unicode character transforms03 Jan 2014

2161 - Search - NSA – Never Safe Again?02 Jan 2014

2162 - Search - OpinionsCyber security kite mark being touted, but for what exactly? People? Passwords? Patches?12 Dec 2013

2163 - Search - Macs / AppleiOS phone users still vulnerable to old PIN bypass vulnerabilities: Lesson – Update your stuff09 Dec 2013

2164 - Search - How-TosTransferring Data the Low Tech Way04 Dec 2013

2165 - Search - How-TosWhat we can learn from Meerkats?03 Dec 2013

2166 - Search - Internet Of ThingsThe Coming Revolution: Hardware attacks and the internet of things26 Nov 2013

2167 - Search - AndroidBrute Forcing Android PINs (or why you should never enable ADB part 2)25 Nov 2013

2168 - Search - AndroidBrute Forcing Android PINs (or why you should never enable ADB part 1)14 Nov 2013

2169 - Search - How-TosHow to get into Information Security13 Nov 2013

2170 - Search - How-TosBackwards phishing with Unicode – edocinU htiw gnihsihp sdrawkcaB07 Nov 2013

2171 - Search - OpinionsIs that a bug in your pocket or are you just happy to see me?05 Nov 2013

2172 - Search - How-TosHow to remove IIS server response header banners29 Oct 2013

2173 - Search - How-TosGet your Macs back on track- Apple security for Windows experts28 Oct 2013

2174 - Search - How-TosThe Salmon Fishing Bear Attack OR Grabbing password hashes off the network via NetBIOS24 Oct 2013

2175 - Search - How-TosThe Antwerp hackers bundle demystified23 Oct 2013

2176 - Search - Pen Test Partners review online banking security for Which? Magazine21 Oct 2013

2177 - Search - How-TosClickjacking explained, in detail17 Oct 2013

2178 - Search - How-TosPatch Tuesday 08/10/2013- notable items09 Oct 2013

2179 - Search - OpinionsDRM – The conundrum for protecting intellectual property09 Oct 2013

2180 - Search - How-TosDuplicate Passwords: Why IT Support Needs a Wake Up Call08 Oct 2013

2181 - Search - How-TosGit Extraction – Abusing version control systems04 Oct 2013

2182 - Search - How-TosSimple steps to stop Social Engineers01 Oct 2013

2183 - Search - How-TosHow to reverse engineer a protocol24 Sep 2013

2184 - Search - How-TosBrowser support for TLS 1.1 and 1.217 Sep 2013

2185 - Search - How-TosWhat to do if you find yourself being DDoSed16 Sep 2013

2186 - Search - OpinionsWhy porn is an effective malware distribution mechanism13 Sep 2013

2187 - Search - The Future of the Datacenter

2188 - Search - AWS Global Partner Security Initiative

2189 - Search - RapidScale – AWS Security & Compliance

2190 - Search - Amazon Web Services (AWS) New Horizon in Cloud Computing

2191 - Search - Do not sell my personal information

2192 - Search - National Social Security Fund of Morocco Suffers Data Breach

2193 - Search - Critical Fortinet FortiSwitch flaw allows remote attackers to change admin passwords

2194 - Search - The US Treasury’s OCC disclosed an undetected major email breach for over a year

2195 - Search - U.S. CISA adds Gladinet CentreStack and ZTA Microsoft Windows Common Log File System (CLFS) Driver flaws to its Known Exploited Vulnerabilities catalog

2196 - Search - WhatsApp fixed a spoofing flaw that could enable Remote Code Execution

2197 - Search - Everest ransomware group’s Tor leak site offline after a defacement

2198 - Search - Google fixed two actively exploited Android zero-days

2199 - Search - U.S. CISA adds Ivanti Connect Secure, Policy Secure and ZTA Gateways flaw to its Known Exploited Vulnerabilities catalog

2200 - Search - A member of the Scattered Spider cybercrime group pleads guilty

2201 - Search - The controversial case of the threat actor EncryptHub

2202 - Search - PoisonSeed Campaign uses stolen email credentials to spread crypto seed scams and and empty wallets

2203 - Search - EDR-as-a-Service makes the headlines in the cybercrime landscape

2204 - Search - Oracle privately notifies Cloud data breach to customers

2205 - Search - SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 40

2206 - Search - Security Affairs newsletter Round 518 by Pierluigi Paganini – INTERNATIONAL EDITION

2207 - Search - Expert used ChatGPT-4o to create a replica of his passport in just 5 minutes bypassing KYC

2208 - Search - A flaw in Verizon’s iOS Call Filter app exposed call records of millions

2209 - Search - Port of Seattle ’s August data breach impacted 90,000 people

2210 - Search - President Trump fired the head of U.S. Cyber Command and NSA

2211 - Search - Critical flaw in Apache Parquet’s Java Library allows remote code execution

2212 - Search - CERT-UA reports attacks in March 2025 targeting Ukrainian agencies with WRECKSTEEL Malware

2213 - Search - 39M secrets exposed: GitHub rolls out new security tools

2214 - Search - China-linked group UNC5221 exploited Ivanti Connect Secure zero-day since mid-March

2215 - Search - Europol-led operation shuts down CSAM platform Kidflix, leading to 79 arrests

2216 - Search - New Triada Trojan comes preinstalled on Android devices

2217 - Search - New advanced FIN7’s Anubis backdoor allows to gain full system control on Windows

2218 - Search - U.S. CISA adds Apache Tomcat flaw to its Known Exploited Vulnerabilities catalog

2219 - Search - Apple backported fixes for three actively exploited flaws to older devices

2220 - Search - Spike in Palo Alto Networks scanner activity suggests imminent cyber threats

2221 - Search - Microsoft warns of critical flaw in Canon printer drivers

2222 - Search - CrushFTP CVE-2025-2825 flaw actively exploited in the wild

2223 - Search - France’s antitrust authority fines Apple €150M for issues related to its App Tracking Transparency

2224 - Search - Hiding WordPress malware in the mu-plugins directory to avoid detection

2225 - Search - U.S. CISA adds Cisco Smart Licensing Utility flaw to its Known Exploited Vulnerabilities catalog

2226 - Search - Russia-linked Gamaredon targets Ukraine with Remcos RAT

2227 - Search - CoffeeLoader uses a GPU-based packer to evade detection

2228 - Search - Morphing Meerkat phishing kits exploit DNS MX records

2229 - Search - SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 39

2230 - Search - Security Affairs newsletter Round 517 by Pierluigi Paganini – INTERNATIONAL EDITION

2231 - Search - Sam’s Club Investigates Alleged Cl0p Ransomware Breach

2232 - Search - FBI and DOJ seize $8.2 Million in romance baiting crypto fraud scheme

2233 - Search - Experts warn of the new sophisticate Crocodilus mobile banking Trojan

2234 - Search - Crooks are reviving the Grandoreiro banking trojan

2235 - Search - Russian authorities arrest three suspects behind Mamont Android banking trojan

2236 - Search - Mozilla fixed critical Firefox vulnerability CVE-2025-2857

2237 - Search - U.S. CISA adds Google Chromium Mojo flaw to its Known Exploited Vulnerabilities catalog

2238 - Search - Crooks target DeepSeek users with fake sponsored Google ads to deliver malware

2239 - Search - U.S. CISA adds Sitecore CMS and XP, and GitHub Action flaws to its Known Exploited Vulnerabilities catalog

2240 - Search - Arkana Security group claims the hack of US telco provider WideOpenWest (WOW!)

2241 - Search - New ReaderUpdate malware variants target macOS users

2242 - Search - BlackLock Ransomware Targeted by Cybersecurity Firm

2243 - Search - Google fixed the first actively exploited Chrome zero-day since the start of the year

2244 - Search - Authentication bypass CVE-2025-22230 impacts VMware Windows Tools

2245 - Search - Android malware campaigns use .NET MAUI to evade detection

2246 - Search - Astral Foods, South Africa’s largest poultry producer, lost over $1M due to a cyberattack

2247 - Search - A cyberattack hits Ukraine’s national railway operator Ukrzaliznytsia

2248 - Search - Chinese APT Weaver Ant infiltrated a telco in Asia for over four years

2249 - Search - Medusa ransomware uses malicious Windows driver ABYSSWORKER to disable security tools

2250 - Search - Attackers can bypass middleware auth checks by exploiting critical Next.js flaw

2251 - Search - FBI warns of malicious free online document converters spreading malware

2252 - Search - Cloak ransomware group hacked the Virginia Attorney General’s Office

2253 - Search - SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 38

2254 - Search - Security Affairs newsletter Round 516 by Pierluigi Paganini – INTERNATIONAL EDITION

2255 - Search - UAT-5918 ATP group targets critical Taiwan

2256 - Search - U.S. Treasury removed sanctions against the crypto mixer service Tornado Cash

2257 - Search - Zero-day broker Operation Zero offers up to $4 million for Telegram exploits

2258 - Search - RansomHub affiliate uses custom backdoor Betruger

2259 - Search - Cisco Smart Licensing Utility flaws actively exploited in the wild

2260 - Search - Pennsylvania State Education Association data breach impacts 500,000 individuals

2261 - Search - Veeam fixed critical Backup & Replication flaw CVE-2025-23120

2262 - Search - U.S. CISA adds Edimax IC-7100 IP Camera, NAKIVO, and SAP NetWeaver AS Java flaws to its Known Exploited Vulnerabilities catalog

2263 - Search - CERT-UA warns of cyber espionage against the Ukrainian defense industry using Dark Crystal RAT

2264 - Search - WhatsApp fixed zero-day flaw used to deploy Paragon Graphite spyware

2265 - Search - California Cryobank, the largest US sperm bank, disclosed a data breach

2266 - Search - Rules File Backdoor: AI Code Editors exploited for silent supply chain attacks

2267 - Search - U.S. CISA adds Fortinet FortiOS/FortiProxy and GitHub Action flaws to its Known Exploited Vulnerabilities catalog

2268 - Search - Nation-state actors and cybercrime gangs abuse malicious .lnk files for espionage and data theft

2269 - Search - ChatGPT SSRF bug quickly becomes a favorite attack vector

2270 - Search - GitHub Action tj-actions/changed-files was compromised in supply chain attack

2271 - Search - New StilachiRAT uses sophisticated techniques to avoid detection

2272 - Search - Threat actors rapidly exploit new Apache Tomcat flaw following PoC release

2273 - Search - Attackers use CSS to create evasive phishing messages

2274 - Search - Researcher releases free GPU-Based decryptor for Linux Akira ransomware

2275 - Search - Denmark warns of increased state-sponsored campaigns targeting the European telcos

2276 - Search - SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 37

2277 - Search - Security Affairs newsletter Round 515 by Pierluigi Paganini – INTERNATIONAL EDITION

2278 - Search - A ransomware attack hit the Micronesian state of Yap, causing the health system network to go down.

2279 - Search - New MassJacker clipper targets pirated software seekers

2280 - Search - Cisco IOS XR flaw allows attackers to crash BGP process on routers

2281 - Search - LockBit ransomware developer Rostislav Panev was extradited from Israel to the U.S.

2282 - Search - SuperBlack Ransomware operators exploit Fortinet Firewall flaws in recent attacks

2283 - Search - U.S. CISA adds Apple products and Juniper Junos OS flaws to its Known Exploited Vulnerabilities catalog

2284 - Search - GitLab addressed critical auth bypass flaws in CE and EE

2285 - Search - North Korea-linked APT group ScarCruft spotted using new Android spyware KoSpy

2286 - Search - Meta warns of actively exploited flaw in FreeType library

2287 - Search - Medusa ransomware hit over 300 critical infrastructure organizations until February 2025

2288 - Search - China-linked APT UNC3886 targets EoL Juniper routers

2289 - Search - U.S. CISA adds six Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog

2290 - Search - Microsoft Patch Tuesday security updates for March 2025 fix six actively exploited zero-days

2291 - Search - New Ballista Botnet spreads using TP-Link flaw. Is it an Italian job?

2292 - Search - Apple fixed the third actively exploited zero-day of 2025

2293 - Search - Switzerland’s NCSC requires cyberattack reporting for critical infrastructure within 24 hours

2294 - Search - SideWinder APT targets maritime and nuclear sectors with enhanced toolset

2295 - Search - U.S. CISA adds Advantive VeraCore and Ivanti EPM flaws to its Known Exploited Vulnerabilities catalog

2296 - Search - Cybersecurity Challenges in Cross-Border Data Transfers and Regulatory Compliance Strategies

2297 - Search - Elon Musk blames a massive cyberattack for the X outages

2298 - Search - Experts warn of mass exploitation of critical PHP flaw CVE-2024-4577

2299 - Search - RansomHouse gang claims the hack of the Loretto Hospital in Chicago

2300 - Search - North Korea-linked APT Moonstone used Qilin ransomware in limited attacks

2301 - Search - Large-scale cryptocurrency miner campaign targets Russian users with SilentCryptoMiner

2302 - Search - Feds seized $23 million in crypto stolen using keys from LastPass breaches

2303 - Search - Undocumented hidden feature found in Espressif ESP32 microchip

2304 - Search - SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 36

2305 - Search - Security Affairs newsletter Round 514 by Pierluigi Paganini – INTERNATIONAL EDITION

2306 - Search - Akira ransomware gang used an unsecured webcam to bypass EDR

2307 - Search - Japanese telecom giant NTT suffered a data breach that impacted 18,000 companies

2308 - Search - Mirai-based botnets exploit CVE-2025-1316 zero-day in Edimax IP cameras

2309 - Search - The Role of Differential Privacy in Protecting Sensitive Information in the Era of Artificial Intelligence

2310 - Search - International law enforcement operation seized the domain of the Russian crypto exchange Garantex

2311 - Search - Medusa Ransomware targeted over 40 organizations in 2025

2312 - Search - Elastic patches critical Kibana flaw allowing code execution

2313 - Search - The U.S. DoJ charges 12 Chinese nationals for state-linked cyber operations

2314 - Search - Chinese Lotus Blossom APT targets multiple sectors with Sagerunex backdoor

2315 - Search - China-linked APT Silk Typhoon targets IT Supply Chain

2316 - Search - Hunters International gang claims the theft of 1.4 TB of data allegedly stolen from Tata Technologies

2317 - Search - New Eleven11bot botnet infected +86K IoT devices

2318 - Search - Polish Space Agency POLSA disconnected its network following a cyberattack

2319 - Search - U.S. CISA adds Linux kernel and VMware ESXi and Workstation flaws to its Known Exploited Vulnerabilities catalog

2320 - Search - VMware fixed three actively exploited zero-days in ESX products

2321 - Search - Digital nomads and risk associated with the threat of infiltred employees

2322 - Search - Google fixed two actively exploited Android flaws

2323 - Search - Mass exploitation campaign hit 4,000+ ISP networks to deploy info stealers and crypto miners

2324 - Search - CISA maintains stance on Russian cyber threats despite policy shift

2325 - Search - U.S. CISA adds Multiple Cisco Small Business RV Series Routers, Hitachi Vantara Pentaho BA Server, Microsoft Windows Win32k, and Progress WhatsUp Gold flaws to its Known Exploited Vulnerabilities catalog

2326 - Search - U.S. Authorities recovered $31 Million Related to 2021 Uranium Finance cyber heist

2327 - Search - Serbian student activist’s phone hacked using Cellebrite zero-day exploit

2328 - Search - Qilin ransomware gang claimed responsibility for the Lee Enterprises attack

2329 - Search - SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 35

2330 - Search - Security Affairs newsletter Round 513 by Pierluigi Paganini – INTERNATIONAL EDITION

2331 - Search - Meta fired 20 employees for leaking information, more firings expected

2332 - Search - Ransomware gangs exploit a Paragon Partition Manager BioNTdrv.sys driver zero-day

2333 - Search - Microsoft disrupted a global cybercrime ring abusing Azure OpenAI Service

2334 - Search - Attackers could hack smart solar systems and cause serious damages

2335 - Search - Enhanced capabilities sustain the rapid growth of Vo1d botnet

2336 - Search - Cisco fixed command injection and DoS flaws in Nexus switches

2337 - Search - China-linked threat actors stole 10% of Belgian State Security Service (VSSE)’s staff emails

2338 - Search - FBI: North Korea-linked TraderTraitor is responsible for $1.5 Billion Bybit hack

2339 - Search - Criminal group UAC-0173 targets the Notary Office of Ukraine

2340 - Search - Cellebrite blocked Serbia from using its solution because misuse of the equipment for political reasons

2341 - Search - New Ghostwriter campaign targets Ukrainian Government and opposition activists in Belarus

2342 - Search - New LightSpy spyware variant comes with enhanced data collection features targeting social media platforms

2343 - Search - U.S. CISA adds Microsoft Partner Center and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalog

2344 - Search - GitVenom campaign targets gamers and crypto investors by posing as fake GitHub projects

2345 - Search - LockBit taunts FBI Director Kash Patel with alleged “Classified” leak threat

2346 - Search - EU sanctioned the leader of North Korea-linked APT groups

2347 - Search - U.S. CISA adds Adobe ColdFusion and Oracle Agile PLM flaws to its Known Exploited Vulnerabilities catalog

2348 - Search - Russia warns financial sector organizations of IT service provider LANIT compromise

2349 - Search - A large botnet targets M365 accounts with password spraying attacks

2350 - Search - Australia bans Kaspersky over national security concerns

2351 - Search - A data leak exposes the operations of the Chinese private firm TopSec, which provides Censorship-as-a-Service

2352 - Search - SpyLend Android malware found on Google Play enabled financial cyber crime and extortion

2353 - Search - Leaked Black Basta chat logs reveal the gang’s operations

2354 - Search - U.S. CISA adds Microsoft Power Pages flaw to its Known Exploited Vulnerabilities catalog

2355 - Search - SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 34

2356 - Search - Security Affairs newsletter Round 512 by Pierluigi Paganini – INTERNATIONAL EDITION

2357 - Search - Lazarus APT stole $1.5B from Bybit, it is the largest cryptocurrency heist ever

2358 - Search - Apple removes iCloud encryption in UK following backdoor demand

2359 - Search - B1ack’s Stash released 1 Million credit cards

2360 - Search - Atlassian fixed critical flaws in Confluence and Crowd

2361 - Search - Salt Typhoon used custom malware JumbledPath to spy U.S. telecom providers

2362 - Search - NailaoLocker ransomware targets EU healthcare-related entities

2363 - Search - Microsoft fixed actively exploited flaw in Power Pages

2364 - Search - Citrix addressed NetScaler console privilege escalation flaw

2365 - Search - Palo Alto Networks warns that CVE-2025-0111 flaw is actively exploited in attacks

2366 - Search - Russia-linked APTs target Signal messenger

2367 - Search - Venture capital firm Insight Partners discloses security breach

2368 - Search - OpenSSH bugs allows Man-in-the-Middle and DoS Attacks

2369 - Search - U.S. CISA adds SonicWall SonicOS and Palo Alto PAN-OS flaws to its Known Exploited Vulnerabilities catalog

2370 - Search - Juniper Networks fixed a critical flaw in Session Smart Routers

2371 - Search - China-linked APT group Winnti targets Japanese organizations since March 2024

2372 - Search - Xerox VersaLink C7025 Multifunction printer flaws may expose Windows Active Directory credentials to attackers

2373 - Search - New XCSSET macOS malware variant used in limited attacks

2374 - Search - New Golang-based backdoor relies on Telegram for C2 communication

2375 - Search - Pro-Russia collective NoName057(16) launched a new wave of DDoS attacks on Italian sites

2376 - Search - whoAMI attack could allow remote code execution within AWS account

2377 - Search - Storm-2372 used the device code phishing technique since August 2024

2378 - Search - SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 33

2379 - Search - Security Affairs newsletter Round 511 by Pierluigi Paganini – INTERNATIONAL EDITION

2380 - Search - U.S. CISA adds Apple iOS and iPadOS and Mitel SIP Phones flaws to its Known Exploited Vulnerabilities catalog

2381 - Search - Attackers exploit recently disclosed Palo Alto Networks PAN-OS firewalls bug

2382 - Search - China-linked APT Salt Typhoon breached telecoms by exploiting Cisco router flaws

2383 - Search - Experts discovered PostgreSQL flaw chained with BeyondTrust zeroday in targeted attacks

2384 - Search - Valve removed the game PirateFi from the Steam video game platform because contained a malware

2385 - Search - China-linked APTs’ tool employed in RA World Ransomware attack

2386 - Search - Russia-linked APT Seashell Blizzard is behind the long running global access operation BadPilot campaign

2387 - Search - Sarcoma ransomware gang claims the theft of sensitive data from PCB maker Unimicron

2388 - Search - Russian cybercriminal Alexander Vinnik is being released from U.S. custody in exchange for Marc Fogel

2389 - Search - North Korea-linked APT Emerald Sleet is using a new tactic

2390 - Search - Microsoft Patch Tuesday security updates for February 2025 ficed 2 actively exploited bugs

2391 - Search - Attackers exploit a new zero-day to hijack Fortinet firewalls

2392 - Search - OpenSSL patched high-severity flaw CVE-2024-12797

2393 - Search - Progress Software fixed multiple high-severity LoadMaster flaws

2394 - Search - Artificial intelligence (AI) as an Enabler for Enhanced Data Security

2395 - Search - Crooks use Google Tag Manager skimmer to steal credit card data from a Magento-based e-stores

2396 - Search - Operation Phobos Aetor: Police dismantled 8Base ransomware gang

2397 - Search - Apple fixes iPhone and iPad bug exploited in ‘extremely sophisticated attacks’

2398 - Search - HPE is notifying individuals affected by a December 2023 attack

2399 - Search - XE Group shifts from credit card skimming to exploiting zero-days

2400 - Search - UK Gov demands backdoor to access Apple iCloud backups worldwide

2401 - Search - SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 32

2402 - Search - Security Affairs newsletter Round 510 by Pierluigi Paganini – INTERNATIONAL EDITION

2403 - Search - PlayStation Network outage has been going on for over 24 hours

2404 - Search - Kimsuky APT group used custom RDP Wrapper version and forceCopy stealer

2405 - Search - Russia’s intelligence recruits Ukrainians for terror attacks via messaging apps

2406 - Search - Hospital Sisters Health System impacted 882,782 individuals

2407 - Search - Attackers used a public ASP.NET machine to conduct ViewState code injection attacks

2408 - Search - U.S. CISA adds Microsoft Outlook, Sophos XG Firewall, and other flaws to its Known Exploited Vulnerabilities catalog

2409 - Search - Notorious hacker behind 40+ cyberattacks on strategic organizations arrested

2410 - Search - Lazarus APT targets crypto wallets using cross-platform JavaScript stealer

2411 - Search - U.S. CISA adds Linux kernel flaw to its Known Exploited Vulnerabilities catalog

2412 - Search - U.S. CISA adds Microsoft .NET Framework, Apache OFBiz, and Paessler PRTG Network Monitor flaws to its Known Exploited Vulnerabilities catalog

2413 - Search - SparkCat campaign target crypto wallets using OCR to steal recovery phrases

2414 - Search - International Civil Aviation Organization (ICAO) and ACAO Breached: Cyberespionage Groups Targeting Aviation Safety Specialists

2415 - Search - Online food ordering and delivery platform GrubHub discloses a data breach

2416 - Search - Netgear urges users to upgrade two flaws impacting WiFi router models

2417 - Search - AMD fixed a flaw that allowed to load malicious microcode

2418 - Search - Coyote Banking Trojan targets Brazilian users, stealing data from 70+ financial apps and websites

2419 - Search - Google fixed actively exploited kernel zero-day flaw

2420 - Search - Web Skimmer found on at least 17 websites, including Casio UK

2421 - Search - Crazy Evil gang runs over 10 highly specialized social media scams

2422 - Search - Elon Musk ’s DOGE team granted ‘full access’ to sensitive Treasury systems. What are the risks?

2423 - Search - Texas is the first state to ban DeepSeek on government devices

2424 - Search - Law enforcement seized the domains of HeartSender cybercrime marketplaces

2425 - Search - Security Affairs newsletter Round 509 by Pierluigi Paganini – INTERNATIONAL EDITION

2426 - Search - WhatsApp disrupted a hacking campaign targeting journalists with Paragon spyware

2427 - Search - Ransomware attack hit Indian multinational Tata Technologies

2428 - Search - A ransomware attack forced New York Blood Center to reschedule appointments

2429 - Search - Contec CMS8000 patient monitors contain a hidden backdoor

2430 - Search - Community Health Center data breach impacted over 1 million patients

2431 - Search - Italy’s data protection authority Garante blocked the DeepSeek AI platform

2432 - Search - Broadcom fixed information disclosure flaws in VMware Aria Operations

2433 - Search - DeepSeek database exposed highly sensitive information

2434 - Search - TeamViewer fixed a vulnerability in Windows client and host applications

2435 - Search - Operation Talent: An international law enforcement operation seized Cracked, Nulled and other cybercrime websites

2436 - Search - PHP package Voyager flaws expose to one-click RCE exploits

2437 - Search - Italy’s Data Protection Authority Garante requested information from Deepseek

2438 - Search - U.S. CISA adds Apple products’ flaw to its Known Exploited Vulnerabilities catalog

2439 - Search - Aquabot variant v3 targets Mitel SIP phones

2440 - Search - Critical remote code execution bug found in Cacti framework

2441 - Search - Attackers actively exploit a critical zero-day in Zyxel CPE Series devices

2442 - Search - Attackers exploit SimpleHelp RMM Software flaws for initial access

2443 - Search - VMware fixed a flaw in Avi Load Balancer

2444 - Search - EU announced sanctions on three members of Russia’s GRU Unit 29155

2445 - Search - Chinese AI platform DeepSeek faced a “large-scale” cyberattack

2446 - Search - Apple fixed the first actively exploited zero-day of 2025

2447 - Search - TalkTalk confirms data breach involving a third-party platform

2448 - Search - Multiple Git flaws led to credentials compromise

2449 - Search - GamaCopy targets Russia mimicking Russia-linked Gamaredon APT

2450 - Search - ESXi ransomware attacks use SSH tunnels to avoid detection

2451 - Search - Attackers allegedly stole $69 million from cryptocurrency platform Phemex

2452 - Search - Change Healthcare data breach exposed the private data of over half the U.S.

2453 - Search - SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 30

2454 - Search - Security Affairs newsletter Round 508 by Pierluigi Paganini – INTERNATIONAL EDITION

2455 - Search - Cisco warns of a ClamAV bug with PoC exploit

2456 - Search - Subaru Starlink flaw allowed experts to remotely hack cars

2457 - Search - U.S. CISA adds SonicWall SMA1000 flaw to its Known Exploited Vulnerabilities catalog

2458 - Search - J-magic malware campaign targets Juniper routers

2459 - Search - SonicWall warns of a critical CVE-2025-23006 zero-day likely exploited in the wild

2460 - Search - U.S. CISA adds JQuery flaw to its Known Exploited Vulnerabilities catalog

2461 - Search - Pwn2Own Automotive 2025 Day 2: organizers awarded $335,500

2462 - Search - Chinese threat actors used two advanced exploit chains to hack Ivanti CSA

2463 - Search - Cisco addresses a critical privilege escalation bug in Meeting Management

2464 - Search - U.S. President Donald Trump granted a “full and unconditional pardon” to Ross Ulbricht, Silk Road creator

2465 - Search - Pwn2Own Automotive 2025 Day 1: organizers awarded $382,750 for 16 zero-days

2466 - Search - Two ransomware groups abuse Microsoft’s Office 365 platform to gain access to target organizations

2467 - Search - A 7-Zip bug allows to bypass the Mark of the Web (MotW) feature

2468 - Search - Former CIA analyst pleaded guilty to leaking top-secret documents

2469 - Search - New Mirai botnet variant Murdoc Botnet targets AVTECH IP cameras and Huawei HG532 routers

2470 - Search - CERT-UA warned of scammers impersonating the agency using fake AnyDesk requests

2471 - Search - Experts found multiple flaws in Mercedes-Benz infotainment system

2472 - Search - HPE is investigating IntelBroker’s claims of the company hack

2473 - Search - Esperts found new DoNot Team APT group’s Android malware

2474 - Search - Malicious npm and PyPI target Solana Private keys to steal funds from victims’ wallets

2475 - Search - Planet WGS-804HPT Industrial Switch flaws could be chained to achieve remote code execution

2476 - Search - SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 29

2477 - Search - Security Affairs newsletter Round 507 by Pierluigi Paganini – INTERNATIONAL EDITION

2478 - Search - A flaw in the W3 Total Cache plugin exposes hundreds of thousands of WordPress sites to attacks

2479 - Search - U.S. Treasury Sanctions Chinese cybersecurity firm and actor over federal agency breach tied to Salt Typhoon

2480 - Search - EU privacy non-profit group filed complaints against TikTok, SHEIN, AliExpress, and other Chinese companies

2481 - Search - ESET detailed a flaw that could allow a bypass of the Secure Boot in UEFI systems

2482 - Search - Russia-linked APT Star Blizzard targets WhatsApp accounts

2483 - Search - Prominent US law firm Wolf Haldenstein disclosed a data breach

2484 - Search - Clop Ransomware exploits Cleo File Transfer flaw: dozens of claims, disputed breaches

2485 - Search - MikroTik botnet relies on DNS misconfiguration to spread malware

2486 - Search - Threat actor leaked config files and VPN passwords for over Fortinet Fortigate devices

2487 - Search - Microsoft Patch Tuesday updates for January 2025 fixed three actively exploited flaws

2488 - Search - U.S. CISA adds Fortinet FortiOS flaw to its Known Exploited Vulnerabilities catalog

2489 - Search - Codefinger ransomware gang uses compromised AWS keys to encrypt S3 bucket

2490 - Search - CVE-2024-44243 macOS flaw allows persistent malware installation

2491 - Search - FBI deleted China-linked PlugX malware from over 4,200 US computers

2492 - Search - Russia-linked APT UAC-0063 target Kazakhstan in with HATVIBE malware

2493 - Search - A new campaign is likely targeting a zero-day in Fortinet FortiGate firewalls

2494 - Search - Threat actors exploit Aviatrix Controller flaw to deploy backdoors and cryptocurrency miners

2495 - Search - U.S. CISA adds BeyondTrust PRA and RS and Qlik Sense flaws to its Known Exploited Vulnerabilities catalog

2496 - Search - Inexperienced actors developed the FunkSec ransomware using AI tools

2497 - Search - Credit Card Skimmer campaign targets WordPress via database injection

2498 - Search - Microsoft took legal action against crooks who developed a tool to abuse its AI-based services

2499 - Search - Pro-Russia hackers NoName057 targets Italy again after Zelensky’s visit to the country

2500 - Search - Security Affairs newsletter Round 506 by Pierluigi Paganini – INTERNATIONAL EDITION

2501 - Search - How a researcher earned $100,000 hacking a Facebook server

2502 - Search - DoJ charged three Russian citizens with operating crypto-mixing services

2503 - Search - U.S. cannabis dispensary STIIIZY disclosed a data breach

2504 - Search - A novel PayPal phishing campaign hijacks accounts

2505 - Search - Banshee macOS stealer supports new evasion mechanisms

2506 - Search - Researchers disclosed details of a now-patched Samsung zero-click flaw

2507 - Search - Phishers abuse CrowdStrike brand targeting job seekers with cryptominer