Cybersecurity

Designing the first logo for Have I Been Pwned was easy: I took a SQL injection pattern, wrote "have i been pwned?" after it...
Microsoft on Tuesday released 57 patches affecting 10 product families. Six of the addressed issues are considered by Microsoft to be of Critical severity, and nine have a CVSS base score of 8.0 or higher. Six,...

Blind Eagle Hacks Colombian Institutions Using NTLM Flaw, RATs and GitHub-Based Attacks

The threat actor known as Blind Eagle has been linked to a series of ongoing campaigns targeting Colombian institutions and government entities since November...

SideWinder APT attacks in H2 2024

Last year, we published an article about SideWinder, a highly prolific APT group whose primary targets have been military and government entities in Pakistan,...

Commonly Probed Webshell URLs – SANS Internet Storm Center

Looking over some weblogs on my way back from class in Baltimore, I feel a reminder is appropriate that (a) weblogs are still a...

Feds Link $150M Cyberheist to 2022 LastPass Hacks – Krebs on Security

In September 2023, KrebsOnSecurity published findings from security researchers who concluded that a series of six-figure cyberheists across dozens of victims resulted from thieves...

HP’s hold music, and human trafficking • Graham Cluley

Journey with us to Myanmar’s shadowy scam factories, where trafficked workers are forced to run romance-baiting...

Kingpin – Darknet Diaries

Full Transcript In this episode, we delve into the multifaceted career of Joe Grand, also known as “Kingpin.” A renowned hardware...

DeceptiveDevelopment targets freelance developers

Cybercriminals have been known to approach their targets under the guise of company recruiters, enticing them with fake employment offers....

We’re Backfilling and Cleaning Stealer Logs in Have I Been Pwned

I think I've finally caught my breath after dealing with those 23...

Gootloader inside out – Sophos News

... That hidden element had links (selected with green) and the matching targeted search terms (selected with brown): This hidden element will not be visible to...

Mozilla Updates Firefox Terms Again After Backlash Over Broad Data License Language

Mar 01, 2025Ravie LakshmananPrivacy / Data Protection Firefox browser maker Mozilla on Friday updated its Terms of Use a second time within a week following...

Our CISO’s view of Pacific Rim – Sophos News

Sophos is not the first cybersecurity vendor to find its perimeter products the target of sustained nation-state attack. If anything is special about the...

Kaspersky SOC analyzes an incident involving a web shell used as a backdoor

Web shells have evolved far beyond their original purpose of basic remote command execution, and many now function more like lightweight exploitation frameworks. These...

Recent articles