~/blog
Every transmission from the lab — adversarial AI research, offensive security tutorials, threat analysis, and the legacy Packet.Zip archive.
228 articles from the new era
Coworking spaces offer remote workers a comfortable and productive atmosphere, but they may be unsafe. A recent survey from Clutch showed that 23% of coworking employees said they face safety and security issues in their workspace.A coworking space is an area where employees from various companies c
Being a CISO - The Right PlaceWritten by Keith RayleLinkedIn: https://www.linkedin.com/in/keith-rayle-1aa8241/I was recently brought on board to lead the security effort for a company, and the choice was not easy from a personal perspective. I would have to leave warm, sunny Florida for Illinois, an
The RSA USA Conference was one of the first cybersecurity conferences I ever attended years ago. I still feel nostalgic walking through the innovation sandbox, attending keynotes delivered from the top thinkers in the industry, and listening to sessions covering every major topic.Star Trek’s very ow
Pegasus (also known as Trident) is a red team tool (software package) that some people have classified as malware and/or spyware. Basically it empowers the offense security team with very strong capabilities and was created by the Israeli cyber-security firm NSO Group.The software primary targets Ap
Closing out 2019, one of the worst years so far for data breaches which saw nearly 8 billion records exposed. Going into 2020, cybersecurity workers are dealing with more threats than ever and often handling greater quantities of cloud-stored data, all while strained by a growing skills gap that s
Wyze, a brand best known for their budget security cameras, announced in a post on the brand’s forums that it had suffered what is likely to be the last major data breach of the 2010s. According to the company, more than 2.4 million records were exposed after a database containing user information w
It's a nightmare scenario, one that's more and more common every year as data becomes more valuable — despite your best defenses, some of the confidential data your company holds on to was accessed by hackers or cyber criminals. While the breach is in the past, there's a lot your company can still
As I continue my OSCP journey I have popped a few more boxes since my last blog. It’s been about a month or two so I figure I would write another one describing how I went from initially exploiting a directory traversal vulnerability to eventually getting shell access as system on a Windows box ru
Silent Trinity is a command and control tool dedicated to hacking into Microsoft Windows systems. The primary function is to remotely control Windows in order to simulate attack scenarios. Silent Trinity can be used for penetration testing, network connection, and vulnerability testing, and would
I had almost forgotten about the Google Stadia system I ordered on June 11th until I saw a charge on my credit card go thru on Nov 16th. I received the invite code for Stadia on Nov 18th, and the shipment from Google arrived on Nov 19th (at least that is when I checked the packages that were sitt
As data becomes more and more valuable, hackers are devoting more energy to companies that hold on to valuable personal data — like social security numbers, bank details, and names and addresses.The past few years have seen big increases in both the frequency and cost of data breaches. Since 2016,
The internet has made business so much easier, especially for smaller establishments who would not have even had the chance to exist if it had not been for the rapid development of eCommerce.Unfortunately, as is true in every other situation that involves money and success, there is a dark side that