Latest Security News
-
7,500+ Magento sites defaced in global hacking campaign
-
Hackers defaced 7,500 Magento sites since Feb 27, uploading files across
15,000 hostnames, mostly opportunistic attacks. Since February 27, a
large-scale c...
5 hours ago
-
Friday Squid Blogging: Jumbo Flying Squid in the South Pacific
-
The population needs better conservation.
As usual, you can also use this squid post to talk about the security
stories in the news that I haven’t covere...
6 hours ago
-
FBI links Signal phishing attacks to Russian intelligence services
-
The FBI has issued a public service announcement warning that Russian
intelligence-linked threat actors are actively targeting users of encrypted
messaging...
7 hours ago
-
Predator spyware disables iOS camera and microphone indicators | Kaspersky
official blog
-
A deep dive into how Intellexa’s Predator spyware interferes with iOS
mechanisms to hide camera and microphone activity.
16 hours ago
-
Feds Disrupt IoT Botnets Behind Huge DDoS Attacks
-
The U.S. Justice Department joined authorities in Canada and Germany in
dismantling the online infrastructure behind four highly disruptive botnets
that co...
1 day ago
-
Update: oledump.py Version 0.0.85
-
Fixing newlines in some plugins. oledump_V0_0_85.zip (http)MD5:
D972CE411B395EF77DBCE9A63059E8C1SHA256:
721C095F3126745A42720316A0B3AC1BCCB9DCDBBA9FF59F5FE...
4 days ago
-
-
🔗 Connecting Claude AI with Kali Linux & Burp Suite via MCP
The Practical Guide to AI-Augmented Penetration Testing in 2026
📅 March 2026 ✍️ altcoinwonder...
5 days ago
-
IoCs (Indicators of Compromise) for the Coruna iOS iPhone Web Malware
Client Side Exploits Serving Web Malware Exploitation Kit
-
Dear blog readers,
I recently took the time and effort and do some research on the recently
made public Coruna iOS iPhone client-side exploits serving we...
1 week ago
-
הגליון המאה שמונים ושלושה של DigitalWhisper שוחרר!
-
הגליון המאה שמונים ושלושה של DigitalWhisper שוחרר!פורסם ב- March 1, 2026
16:56:42, על ידי- sapirxfed
ברוכים הבאים לדברי הפתיחה של הגליון ה-183 של Digital...
2 weeks ago
-
Happy 23rd Birthday TaoSecurity Blog
-
Happy birthday TaoSecurity Blog, born on this day in 2003!
The best way to digest the key lessons from this site is to browse my four
volume Best of Ta...
2 months ago
-
Recommended: MCP Is Broken and Anthropic Just Admitted It
-
I recommended MCP Is Broken and Anthropic Just Admitted It on TysonRhame.
About me: http://www.chuvakin.org
3 months ago
-
BestAV (Fake Antispyware affiliate) exposed
-
Hello everyone, it's been a while.
One of the first affiliate systems I ever infiltrated was BestAV, back in
2011, the same year I started XyliBox.
Over...
6 months ago
-
רעיון לשיפור אבטחת SSL VPN – צמצום משטח התקיפה של ה-Gateway על ידי מתן גישה
רק ללקוחות DDNS שאושרו מראש
-
(שלום רב קוראים יקרים – אם אתם מכירים מישהו שעובד עבור יצרנית של SSL VPN –
בפיתוח תוכנה, ניהול מוצר וכדומה, אנא שלחו לו או לה קישור לפוסט הזה, בתקווה
שהר...
7 months ago
-
Readying hospital defenses for the AI-powered phishing surge
-
Artificial Intelligence
Privacy & Security
Workforce
As phishing tactics evolve, healthcare organizations need to act quickly to
shore up defenses and close...
8 months ago
-
How Security and Privacy Teams Break Barriers Together
-
While cybersecurity and data privacy leaders have distinct expertise, our
fundamental goals are aligned. By understanding each other’s perspectives
and pri...
8 months ago
-
Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for
Internet-connected devices
-
This GitHub repository provides a range of search queries, known as
"dorks," for Shodan, a powerful tool used to search for Internet-connected
devices. T...
10 months ago
-
Andrew Hay’s 2025 Cybersecurity Predictions
-
As we approach 2025, the ever-evolving landscape of cybersecurity continues
to challenge professionals and organizations alike. Based on observed
trends an...
1 year ago
-
North Korean hackers posing as IT workers steal over $1B in cyberattack
-
North Korean hackers posing as IT workers steal over $1B in cyberattack
l33tdawg Fri, 11/29/2024 - 10:31
1 year ago
-
Eye care company suffers 377K-record data breach
-
Panorama Eyecare, a Fort… read more
1 year ago
-
-
What a lovely sunset
-
Oh, hi. Long time no blog, eh?
Well, it is time to sunset this blog, I will be deleting it in the next few
weeks.
So long, and thanks for all the fis...
2 years ago
-
Simple PHP webshell with php filter chains
-
Recently found an LFI in a PHP application and one of the cool things I
learned about recently was PHP filter chains. More info here:
https://www.synacktiv...
2 years ago
-
A Scam in the Family—How a Close Relative Lost $100,000 to an Elder Scam
-
Written by James Schmidt Editor’s Note: We often speak of online scams in
our blogs, ones that cost victims hundreds...
The post A Scam in the Family—Ho...
3 years ago
-
Symantec Identity: Stepping Up to Meet the COVID-19 Crisis
-
COVID-19 confronted healthcare providers and governments with unprecedented
requests for access, aid, and assistance. Here’s how one team at Symantec
is ri...
5 years ago
-
Getting DNS Client Cached Entries with CIM/WMI
-
What is DNS Cache The DNS cache maintains a database of recent DNS
resolution in memory. This allows for faster resolution of hosts that have
been queried ...
6 years ago
-
How Reverse Engineering (and Cyber-Criminals’ Mistakes) Can Help You When
You’ve Been a Ransomware Victim
-
Ransomware is a type of malware that threatens to publish the victim’s data
or perpetually block access to it unless a ransom is paid. In the last two
year...
6 years ago
-
-
Random CSO Musing
-
One of the biggest challenges of running a security organization is
balancing the ongoing efforts, with strategic directions, all while keeping
the “pressu...
7 years ago
-
Lucky Break
-
One of the things I do from time to time is throw out an open ended
question on Twitter. Sometimes I’m making a point, sometimes I just want
to amuse myse...
7 years ago
-
Indonesian Spam Communities
-
In our last post we tried to shed some light at what seemed to appear as a
very common PayPal phishing email at first glance, but evidently turned out
to b...
7 years ago
-
TekThing 161 – Bitcoin Sucks For Gaming PCs!!! Our Video Gear, Fingbox Home
Network Security
-
—— Thank You Patrons! Without your support via patreon.com/tekthing, we
wouldn’t be able to make the show for you every week!
https://www.patreon.com/tekth...
8 years ago
-
Romania is vice-champion at the European Cyber Security
-
CERT-RO The National Response Center for Cyber Security Incidents affirmed
on Friday that Romania, for the second consecutive year, has become the
European...
8 years ago
-
CoalaBot : http Ddos Bot
-
CoalaBot appears to be build on August Stealer code (Panel and Traffic are
really alike)
I found it spread as a tasks in a Betabot and in an Andromeda sp...
8 years ago
-
Social-Engineer Toolkit (SET) v7.7 “Blackout” Released
-
TrustedSec is proud to announce a major release of the Social-Engineer
Toolkit (SET) v7.7. This version incorporates support for hostnames in the
HTA att...
8 years ago
-
Big Changes Around the Corner for the IoT
-
The IoT is transforming before our eyes due to increasing regulations,
growing demand for security standards and advancements in the telecom
industry.
T...
8 years ago
-
ClearEnergy ransomware can destroy process automation logics in critical
infrastructure, SCADA and industrial control systems.
-
Schneider Electric, Allen-Bradley, General Electric (GE) and more vendors
are vulnerable to ClearEnergy ransomware. Researchers at CRITIFENCE®
Critical I...
8 years ago
-
ROOTCON 10 Capture The Flag Statistics
-
During ROOTCON 10, we introduced a new dedicated track for our Capture The
Flag, with the comfortable CTF tables and chairs the game was well
participated ...
9 years ago
-
קיר הבושה: מחצית ראשונה של שנת 2016 - מגמות בפגיעה במידע רפואי בארה"ב
-
תרגום מאמר :
http://www.healthcareinfosecurity.com/wall-shame-mid-year-2016-breach-trends-a-9245
שני דברים שאני, יאיר, לוקח מהמאמר הזה כלקחים נכון להיום:1....
9 years ago
-
The ‘Compliance Only / CISSP / Minimum Viable Product / HR firewall’
infosec trapezoid of fuck
-
Yesterday (thurs, 3/24/16) I went on a tirade on twitter, regarding an
experience I had in San Francisco during RSA week, while at a vendor party.
I’ll let...
9 years ago
-
Dridex Down Under
-
Raytheon | Websense® Security Labs™ has been tracking malicious email
campaigns associated with the Dridex banking Trojan since 2014. An
interesting deve...
10 years ago
-
[Updated] Nurturing JavaScript Obfuscation and Fast Flux DNS - "Whats App
Voicemail Spamming" for Russian Online Pharmacies!
-
Recently, we analyzed that spammers are doing "Whats App Fake Voicemail"
spamming to trick end-users to visit online pharmacies' websites. There are
high...
10 years ago
-
What Verizon Missed in the Latest Threat Reports
-
* By: Zuk Avraham, Joshua Drake, Yaniv Karta, Jimmy Sha *
* Read the full report - here Recently, Veriz...
10 years ago
-
Forensic
-
אחת מהבעיות העיקריות בביצוע תהליך FORENSIC הוא לאחר ביצוע תהליך שיכפול ה -
Harddisk (על פי כל התקנים של שיכפול ביט אחרי ביט), היא לבצע מחקר על *מחשב
חי...
10 years ago
-
Blog Moved
-
Please see the Trustwave SpiderLabs Blog.
10 years ago
-
TrustKeeper Scan Engine Update – February 4, 2015
-
The latest update to the TrustKeeper scan engine that powers our Trustwave
Vulnerability Management product (including both internal and external
vulnerabi...
11 years ago
-
RSA Announces End of RSA Security Conference
-
Aims to bring clarity to cloudy marketing messages through exhibit hall
chotskies Bedford, MA., – April 1, 2014 – RSA, the security division of
EMC, today ...
11 years ago
-
botCloud – an emerging platform for cyber-attacks
-
Hosting network services on Cloud platforms is getting more and more
popular. It is not in the scope of this article to elaborate the advantage
of using Cl...
13 years ago
-
mimikatz: Tool To Recover Cleartext Passwords From Lsass
-
I meant to blog about this a while ago, but never got round to it. Here’s a
brief post about very cool feature of a tool called mimikatz. I’m very
grateful...
14 years ago
-
Pentestify.
-
i’m over here now.
14 years ago
-
-
-
-
-
-
-
-
-
השוואת מוצרי AV ע"י הארגון הבלתי תלוי av-comparatives.org
עתיקה בערך כמו ה talk back : " רק לינוקס" בהשוואה חלונות ,היא השאלה איזה AV עדיף לשים בבית , בחברה ,בענן וכו..
כנראה שהצורך לענות על שאלה זו הצדיק יצירת גורם בילתי תלוי המבצע בדיקות סדורות ומדרג את הפירמות בקטגוריות השונות.
תתפלאו , אבל הנתונים די מפתיעים!
המידע נגיש לכולם ( ניתן להוריד דוחות) .
לעיונכם
בחרתי להציג תוצאות מיבחן "עולם אמיתי" שנערך לאחרונה. התוצאות מיוחסות לחדשים אוגוסט - נובמבר 2012
לדעתי מדובר בגרסאות ביתיות אך יש גם דוחות לcorp's
FYI
סקירת מוצרי AV לMOBILE: