Cybersecurity

xorsearch.py: Python Functions – SANS Internet Storm Center

A couple years ago I published tool xorsearch.py for this diary entry: "Small Challenge: A Simple Word Maldoc - Part 4". It could be used...

Breachforums Boss to Pay $700k in Healthcare Breach – Krebs on Security

In what experts are calling a novel legal outcome, the 22-year-old former administrator of the cybercrime community Breachforums will forfeit nearly $700,000 to settle...

Smashing Security podcast #417: Hello, Pervert!

Don’t get duped, doxxed, or drained! In this episode of “Smashing Security” we dive into the...

MalwareTech – Darknet Diaries

Full Transcript MalwareTech was an anonymous security researcher, until he accidentally stopped WannaCry, one of the largest ransomware attacks in history....

Catching a phish with many faces

Here’s a brief dive into the murky waters of shape-shifting attacks that...

Weekly Update 451

The Have I Been Pwned Alpine Grand Tour is upon us! I've often joked that work is always either sitting at my desk at...

NICKEL TAPESTRY expands fraudulent worker operations – Sophos News

With this post, the X-Ops blog is thrilled to present research from our Sophos siblings newly joining us from Secureworks, of which CTU (the...

Google Pays $1.375 Billion to Texas Over Unauthorized Tracking and Biometric Data Collection

May 10, 2025Ravie LakshmananBiometric Data / Privacy Google has agreed to pay the U.S. state of Texas nearly $1.4 billion to settle two lawsuits that...

Lumma Stealer, coming and going – Sophos News

In September 2024, a threat hunt across Sophos Managed Detection and Response’s telemetry uncovered a Lumma Stealer campaign using fake CAPTCHA sites that instructed...

Kaspersky ransomware report for 2024

Global ransomware trends and numbers With the International Anti-Ransomware Day just around the corner on May 12, Kaspersky explores the ever-changing ransomware threat landscape and...

Example of “Modular” Malware – SANS Internet Storm Center

Developers (of malware as well as goodware) don't have to reinvent the wheel all the time. Why rewrite a piece of code that was...

xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs – Krebs on Security

An employee at Elon Musk’s artificial intelligence company xAI leaked a private key on GitHub that for the past two months could have allowed anyone...

Recent articles