~/authors/aamir-lakhani
Founder · Packet.Zip
Aamir Lakhani is a leading senior security strategist responsible for providing IT security solutions to major enterprises and government organizations. He creates technical security strategies and leads security implementation projects for Fortune 500 companies, and has designed offensive counter-defense measures for the Department of Defense and national intelligence agencies.
His areas of expertise include adversarial AI, cyber defense, mobile application threats, malware management, Advanced Persistent Threat (APT) research, and the dark web. He is the author or contributor of several books, and has appeared on FOX Business News, National Public Radio, and other media outlets as an expert on cybersecurity.
Writing under the pseudonym Packet.Zip, he operates this blog. In its list of 46 Federal Technology Experts to Follow on Twitter, Forbes described Aamir Lakhani as "a blogger, InfoSec specialist, super hero…and all around good guy."
~/articles
200 published articles
A Closer Look at the LAPSUS$ Data Extortion Group. In the latest edition, we talk about their latest attacks, some of the techniques being used, and how they are getting caught. Listen on SoundCloud: https://soundcloud.com/drchaos-podcast/a-closer-look-at-the-lapsus-data-extortion-group Or use our e
Russian threat actor Conti has their data leaked. In this podcast, we will take a look at the leaked data and see what we can learn about one of the largest threat actors operating.Listen on SoundCloud by clicking on the linkhttps://soundcloud.com/drchaos-podcast/conti-leaks?utm_source=clipboard&utm
Did you know your printer could be spying on you? This isn’t a crazy conspiracy theory or some unsubstantiated insider leak from within a printer company. The threat is real according to the Electronic Frontier Foundation (EFF). We have also heard some occasional rumblings around this issue, so let’
I recently came across a classic malware which I thought was long gone and forgotten. However, in these times of sourced code leaks and reuse, attackers are recycling and updating old code into something new. Rombertik is a self-destructing malware that has been making a lot of news. It is typicall
Most cybersecurity professionals have Kali Linux tucked away in their pocket, which is a Linux cybersecurity-focused distribution. For most of us in this profession, it is the go-to version for cybersecurity testing. I won’t get into the distribution discussion of choices, and I understand that ther
Click here to listen to the podcastRansom payments are tax-deductible, and no one cares. Should we?https://www.foxbusiness.com/lifestyle/ransomware-attack-payment-tax-deductibleNorth Korea exploits VPN vulnerabilities. Possibly gains nuclear research. Think about this; North Korea may achieve nuclea
Click Here to listen to the podcast on SoundCloud We are honored to have Dr. Alex Tarter, CTO of Thales UK and co-founder of TurgenSec, and Breaches.UK on our podcast.Alex is a bit of a legend in the CISO space. He discusses the concepts of attack surface management capabilities that the team at Tur
Tony G and Aamir Lakhani discuss their long week of investigating remote work cyber attacks, the craziness of ransomware, the Colonial Pipeline attack, and a debate on Cobalt Strike being a tool made for attackers or being used by attackers. Our excitement leads to openly discussing the problems wit
This week marked an important anniversary; Nintendo’s original Game Boy turned 31. The monochrome system, or more accurately a yellowish and 4 shades of grey system, may have been one of the most significant devices in the 20th century.The 8-bit system was released to the world on April 21st, 1989.I
The Internet is fragile. We have seen governments trying to shut down the Internet as thousands rallied for democracy in the Middle East. We witnessed rioters use the Internet to coordinate attacks on the innocent. Denial of Service attacks has been used recently to shut down access to critical gove
Tony G and Aamir Lakhani discuss the Microsoft Exchange Zero-Day vulnerabilities.Click here to listen to the podcast on Soundcloud or find us on your favorite podcast app.
While 2020 has come and gone, many of last year’s cyber fraud problems will continue into at least mid-2021. Cybercriminals will focus on maximizing their profits, using a traditional cost-benefit analysis to decide on the best attack vector. Pandemic-related emotions will run high, and remote workf