Latest Security News
-
Applying Security by Design and Cyber Immunity principles to protect AI
systems | Kaspersky official blog
-
How organizations can use the basic principles of secure system design to
reduce the risks of deploying AI agents: a guide for AI system architects
and sec...
2 hours ago
-
kitsune
-
[image: kitsune image]
๐ฆ nine-tailed pentest framework — nmap + msf + aircrack + sqlmap ะฒ ะพะดะฝะพะผ
CLI · 25 ะผะพะดัะปะตะน · SQLite-ัะตััะธั · TUI · REST API · pipx i...
4 hours ago
-
Volt Typhoon Used Silent Train to Hide Zero-Day Attacks
-
Volt Typhoon used disposable relay chains to hide zero-day attacks on
critical systems. Lumen linked Silent Train to at least four zero-days.
Lumen’s Black...
4 hours ago
-
Session security, token protection, continuous access evaluation, and
measuring what users ACTUALLY sign in with
-
*MFA to Passkeys in Microsoft Entra ID series · Part 5 of 7*
A passkey proves who the user is at the moment of sign-in. Then Entra ID
hands out tokens so...
5 hours ago
-
Police seize Virtualine bulletproof service tied to ransowmare, cybercrime
-
U.S. law enforcement has seized the primary domain of Virtualine, a
bulletproof hosting service advertised on cybercrime forums for
facilitating illegal ac...
18 hours ago
-
Quickpost: Uranium Glass
-
I got the opportunity to measure the radiation emitted by uranium glass.
Uranium glass is glass with uranium added to the glass mix for coloration.
My Bose...
22 hours ago
-
Studying Fraudulent North Korean IT Workers
-
Researchers set up a fake start-up company to study fraudulent North Korean
IT workers.
1 day ago
-
NODE2Shell The CVE!!
-
// cve-2026-111497 // node.js // brotli // pre-auth rce
*TL;DR* Node.js bundles Google's Brotli decoder. On the 22.x, 24.x and 26.x
lines that decoder ke...
6 days ago
-
Widespread PHP Flaw May Cause Many Site Outages Today
-
Expect to see quite a few websites serving "404" or "Page Not Found" errors
today: Nearly 70 percent of websites need to update their core software to
fix ...
1 week ago
-
A Domains Portfolio Managed and Operated by Exploit.in Cybercrime-Friendly
Forum Community - An Analysis
-
Dear blog readers,
The following is a domain portfolio managed and operated by members of the
Exploit.in cybercrime-friendly forum community.
1633131@mai...
1 week ago
-
Rethinking Vulnerability Management: “If It’s Not in the Scanner, It Didn’t
Happen” Needs to Go
-
Recently, somebody from a fairly mature security team told me something I
did not want to hear: if software vendors run “Mythos-class” models on
their ow...
3 weeks ago
-
ืืืืืื ืืืื ืืชืฉืขืื ืฉื DigitalWhisper ืฉืืืจืจ!
-
ืืืืืื ืืืื ืืชืฉืขืื ืฉื DigitalWhisper ืฉืืืจืจ!ืคืืจืกื ื- September 30, 2026
05:07:46, ืขื ืืื- cp77fk4r
ืืจืืืื ืืืืื ืืืืจื ืืคืชืืื ืฉื ืืืืืื ื-190 ืฉื DigitalWhi...
4 weeks ago
-
AI-Assisted Malware Analysis Tips
-
An AI agent can amplify a malware analyst's skills, but the analyst must
direct it and verify its findings. These tips cover how to split the work,
set up ...
5 weeks ago
-
FreeBSD Released the Most Security Advisories in Project History in June
2026
-
On average, the FreeBSD security team releases about 2 security advisories
per month. AI has changed this.
In April, the project released 8 advisories, w...
3 months ago
-
BestAV (Fake Antispyware affiliate) exposed
-
Hello everyone, it's been a while.
One of the first affiliate systems I ever infiltrated was BestAV, back in
2011, the same year I started XyliBox.
Over...
1 year ago
-
ืจืขืืื ืืฉืืคืืจ ืืืืืช SSL VPN – ืฆืืฆืื ืืฉืื ืืชืงืืคื ืฉื ื-Gateway ืขื ืืื ืืชื ืืืฉื
ืจืง ืืืงืืืืช DDNS ืฉืืืฉืจื ืืจืืฉ
-
(ืฉืืื ืจื ืงืืจืืื ืืงืจืื – ืื ืืชื ืืืืจืื ืืืฉืื ืฉืขืืื ืขืืืจ ืืฆืจื ืืช ืฉื SSL VPN –
ืืคืืชืื ืชืืื ื, ื ืืืื ืืืฆืจ ืืืืืื, ืื ื ืฉืืื ืื ืื ืื ืงืืฉืืจ ืืคืืกื ืืื, ืืชืงืืื
ืฉืืจ...
1 year ago
-
Readying hospital defenses for the AI-powered phishing surge
-
Artificial Intelligence
Privacy & Security
Workforce
As phishing tactics evolve, healthcare organizations need to act quickly to
shore up defenses and close...
1 year ago
-
Andrew Hay’s 2025 Cybersecurity Predictions
-
As we approach 2025, the ever-evolving landscape of cybersecurity continues
to challenge professionals and organizations alike. Based on observed
trends an...
1 year ago
-
North Korean hackers posing as IT workers steal over $1B in cyberattack
-
North Korean hackers posing as IT workers steal over $1B in cyberattack
l33tdawg Fri, 11/29/2024 - 10:31
1 year ago
-
Eye care company suffers 377K-record data breach
-
Panorama Eyecare, a Fort… read more
2 years ago
-
-
What a lovely sunset
-
Oh, hi. Long time no blog, eh?
Well, it is time to sunset this blog, I will be deleting it in the next few
weeks.
So long, and thanks for all the fis...
3 years ago
-
Simple PHP webshell with php filter chains
-
Recently found an LFI in a PHP application and one of the cool things I
learned about recently was PHP filter chains. More info here:
https://www.synacktiv...
3 years ago
-
A Scam in the Family—How a Close Relative Lost $100,000 to an Elder Scam
-
Written by James Schmidt Editor’s Note: We often speak of online scams in
our blogs, ones that cost victims hundreds...
The post A Scam in the Family—Ho...
3 years ago
-
Symantec Identity: Stepping Up to Meet the COVID-19 Crisis
-
COVID-19 confronted healthcare providers and governments with unprecedented
requests for access, aid, and assistance. Here’s how one team at Symantec
is ri...
6 years ago
-
How Reverse Engineering (and Cyber-Criminals’ Mistakes) Can Help You When
You’ve Been a Ransomware Victim
-
Ransomware is a type of malware that threatens to publish the victim’s data
or perpetually block access to it unless a ransom is paid. In the last two
year...
7 years ago
-
-
Random CSO Musing
-
One of the biggest challenges of running a security organization is
balancing the ongoing efforts, with strategic directions, all while keeping
the “pressu...
7 years ago
-
Lucky Break
-
One of the things I do from time to time is throw out an open ended
question on Twitter. Sometimes I’m making a point, sometimes I just want
to amuse myse...
8 years ago
-
Indonesian Spam Communities
-
In our last post we tried to shed some light at what seemed to appear as a
very common PayPal phishing email at first glance, but evidently turned out
to b...
8 years ago
-
TekThing 161 – Bitcoin Sucks For Gaming PCs!!! Our Video Gear, Fingbox Home
Network Security
-
—— Thank You Patrons! Without your support via patreon.com/tekthing, we
wouldn’t be able to make the show for you every week!
https://www.patreon.com/tekth...
8 years ago
-
Romania is vice-champion at the European Cyber Security
-
CERT-RO The National Response Center for Cyber Security Incidents affirmed
on Friday that Romania, for the second consecutive year, has become the
European...
8 years ago
-
CoalaBot : http Ddos Bot
-
CoalaBot appears to be build on August Stealer code (Panel and Traffic are
really alike)
I found it spread as a tasks in a Betabot and in an Andromeda sp...
9 years ago
-
Social-Engineer Toolkit (SET) v7.7 “Blackout” Released
-
TrustedSec is proud to announce a major release of the Social-Engineer
Toolkit (SET) v7.7. This version incorporates support for hostnames in the
HTA att...
9 years ago
-
Big Changes Around the Corner for the IoT
-
The IoT is transforming before our eyes due to increasing regulations,
growing demand for security standards and advancements in the telecom
industry.
T...
9 years ago
-
ClearEnergy ransomware can destroy process automation logics in critical
infrastructure, SCADA and industrial control systems.
-
Schneider Electric, Allen-Bradley, General Electric (GE) and more vendors
are vulnerable to ClearEnergy ransomware. Researchers at CRITIFENCE®
Critical I...
9 years ago
-
ROOTCON 10 Capture The Flag Statistics
-
During ROOTCON 10, we introduced a new dedicated track for our Capture The
Flag, with the comfortable CTF tables and chairs the game was well
participated ...
10 years ago
-
ืงืืจ ืืืืฉื: ืืืฆืืช ืจืืฉืื ื ืฉื ืฉื ืช 2016 - ืืืืืช ืืคืืืขื ืืืืืข ืจืคืืื ืืืจื"ื
-
ืชืจืืื ืืืืจ :
http://www.healthcareinfosecurity.com/wall-shame-mid-year-2016-breach-trends-a-9245
ืฉื ื ืืืจืื ืฉืื ื, ืืืืจ, ืืืงื ืืืืืืจ ืืื ืืืงืืื ื ืืื ืืืืื:1....
10 years ago
-
The ‘Compliance Only / CISSP / Minimum Viable Product / HR firewall’
infosec trapezoid of fuck
-
Yesterday (thurs, 3/24/16) I went on a tirade on twitter, regarding an
experience I had in San Francisco during RSA week, while at a vendor party.
I’ll let...
10 years ago
-
Dridex Down Under
-
Raytheon | Websense® Security Labs™ has been tracking malicious email
campaigns associated with the Dridex banking Trojan since 2014. An
interesting deve...
10 years ago
-
[Updated] Nurturing JavaScript Obfuscation and Fast Flux DNS - "Whats App
Voicemail Spamming" for Russian Online Pharmacies!
-
Recently, we analyzed that spammers are doing "Whats App Fake Voicemail"
spamming to trick end-users to visit online pharmacies' websites. There are
high...
11 years ago
-
What Verizon Missed in the Latest Threat Reports
-
* By: Zuk Avraham, Joshua Drake, Yaniv Karta, Jimmy Sha *
* Read the full report - here Recently, Veriz...
11 years ago
-
Forensic
-
ืืืช ืืืืขืืืช ืืขืืงืจืืืช ืืืืฆืืข ืชืืืื FORENSIC ืืื ืืืืจ ืืืฆืืข ืชืืืื ืฉืืืคืื ื -
Harddisk (ืขื ืคื ืื ืืชืงื ืื ืฉื ืฉืืืคืื ืืื ืืืจื ืืื), ืืื ืืืฆืข ืืืงืจ ืขื *ืืืฉื
ืื...
11 years ago
-
Blog Moved
-
Please see the Trustwave SpiderLabs Blog.
11 years ago
-
TrustKeeper Scan Engine Update – February 4, 2015
-
The latest update to the TrustKeeper scan engine that powers our Trustwave
Vulnerability Management product (including both internal and external
vulnerabi...
11 years ago
-
RSA Announces End of RSA Security Conference
-
Aims to bring clarity to cloudy marketing messages through exhibit hall
chotskies Bedford, MA., – April 1, 2014 – RSA, the security division of
EMC, today ...
12 years ago
-
botCloud – an emerging platform for cyber-attacks
-
Hosting network services on Cloud platforms is getting more and more
popular. It is not in the scope of this article to elaborate the advantage
of using Cl...
14 years ago
-
mimikatz: Tool To Recover Cleartext Passwords From Lsass
-
I meant to blog about this a while ago, but never got round to it. Here’s a
brief post about very cool feature of a tool called mimikatz. I’m very
grateful...
14 years ago
-
Pentestify.
-
i’m over here now.
15 years ago
-
-
-
-
-
-
-
-
-
Hacking Illustrated videos from the "irongeek"
www.irongeek.com is one of the best site for watching "how to" hacking video's
here are some of the video topics:
Intro to the AirPcap USB adapter, Wireshark, and using Cain to crack WEP
UPnP Port Forwarding and Security
Remote Access And Configuration: Setting Up SSH and VNC On Ubuntu Linux
WEP Cracking with VMplayer, BackTrack, Aircrack and the DLink DWL-G122 USB Adapter
An Introduction to Tor var
Cracking Windows Vista Passwords With Ophcrack And Cain
Installing Updates And New Software In Ubuntu Linux Installing Ubuntu Linux
Using SysInternals’ Process Monitor to Analyze Apps and Malware
Dual Booting BackTack Linux And BartPE From A Thumbdrive
Creating a Windows Live CD for System Recovery and Pen-Testing with Bart's PE Builder
Making Windows Trojans with EXE Binders (AKA:Joiners), Splice and IExpress A
Hosts File and Ad Blocking
Passive OS Fingerprinting With P0f And Ettercap
Cracking MD5 Password Hashes
Setting Firefox's User Agent To Googlebot
Using TrueCrypt With NTFS Alternate Data Streams
Intro To TrueCrypt
Intro To DD and Autopsy By Williamc and Twinvega
Intro To Bluesnarfing By Williamc and Twinvega
Network Printer Hacking: Irongeek's Presentation at Notacon
Irongeek's Guide to Buying a Used Laptop
Cracking Windows Passwords with BackTrack and the Online Rainbow Tables at Plain-Text.info
Adding Modules to a Slax or Backtrack Live CD from Windows
Anonym.OS: LiveCD with build in Tor Onion routing and Privoxy
Make your own VMs with hard drive for free: VMware Player + VMX Builder Using VMware Player to run Live CDs (Bootable ISOs)
SSH Dynamic Port Forwarding