~/blog
Every transmission from the lab — adversarial AI research, offensive security tutorials, threat analysis, and the legacy Packet.Zip archive.
228 articles from the new era
A Closer Look at the LAPSUS$ Data Extortion Group. In the latest edition, we talk about their latest attacks, some of the techniques being used, and how they are getting caught. Listen on SoundCloud: https://soundcloud.com/drchaos-podcast/a-closer-look-at-the-lapsus-data-extortion-group Or use our e
The modern world and its digital infrastructure remain at high risk of cyberthreats. The U.S. Department of Homeland Security has identified several areas of particular importance when it comes to hardening national infrastructure against bad actors. These include transportation, election security,
Russian threat actor Conti has their data leaked. In this podcast, we will take a look at the leaked data and see what we can learn about one of the largest threat actors operating.Listen on SoundCloud by clicking on the linkhttps://soundcloud.com/drchaos-podcast/conti-leaks?utm_source=clipboard&utm
Did you know your printer could be spying on you? This isn’t a crazy conspiracy theory or some unsubstantiated insider leak from within a printer company. The threat is real according to the Electronic Frontier Foundation (EFF). We have also heard some occasional rumblings around this issue, so let’
Preventing cyberattacks is a top priority for everyone today, which is why the MITRE ATT&CK framework was created. The MITRE ATT&CK framework is an accessible platform that offers resources about cyberattacks. By taking advantage of this wealth of information, you can get new ideas for your security
I recently came across a classic malware which I thought was long gone and forgotten. However, in these times of sourced code leaks and reuse, attackers are recycling and updating old code into something new. Rombertik is a self-destructing malware that has been making a lot of news. It is typicall
Nowadays, there are so many devices that it can be challenging to remain secure while browsing the internet, shopping online, or communicating with co-workers. Businesses need to implement strong security strategies to protect themselves from malicious actors.Hackers are finding innovative ways to g
As technology advances, the risk of facing cyberattacks increases. Hackers have become more sophisticated in their attack methods, and organizations have had to take extra steps to mitigate the risk of experiencing a cyber incident. One of the most common types of cyberattacks is phishing. It's a so
On August 20, 2021, China’s National People’s Congress enacted a new law titled the Personal Information Protection Law (PIPL) and it will go into effect on November 1, 2021. The new law is one of many data protection laws countries are creating and enforcing in a world where digital technology rule
Most cybersecurity professionals have Kali Linux tucked away in their pocket, which is a Linux cybersecurity-focused distribution. For most of us in this profession, it is the go-to version for cybersecurity testing. I won’t get into the distribution discussion of choices, and I understand that ther
Ransomware — a kind of malware attack that encrypts a computer’s files, leaving PC owners scrambling to pay the ransom to gain the decryption key — has been hitting the news more often in the past few years. Everyone, from the UK’s National Health Service (NHS) to the Colonial Pipeline, has found th
The Information Technology (IT) industry is growing, and the technologies that are made available tend to grow in number and complexity as well. With more and more people working from home or any remote location, it’s no surprise that cybersecurity threats are becoming more prevalent. Fending off wo