~/blog
Every transmission from the lab — adversarial AI research, offensive security tutorials, threat analysis, and the legacy Packet.Zip archive.
228 articles
Distributing malware inside Adobe PDF documents is a popular method for attackers to compromise systems. Within the latest versions of Reader, Adobe has added multiple updates to address vulnerabilities. Additionally, Adobe has added a robust software sandbox capability to Reader, which activates if
Whenever there is a technological development, a cyber-security threat usually isn’t far behind. So, considering the current state of the tech landscape, you may be wondering what the biggest security risks are this year and in the coming year.Unfortunately, there are a number of threats you need t
I was recently in a very high-cost (around $6K), one-week security course in San Francisco. You can infer the institution. The instructor was dynamic, and the topic was focused on technical hacking. A how-to for breaking into computers, detecting the break-in, etc. At the end of the week there was a
Cyber Fraud Affects 5 Percent of the Planet’s GDP The Association of Certified Fraud Examiners (ACFE) estimates typical organizations loses 5 percent of their revenues to fraud each year (ACFE Report). When fraud occurs, the integrity of the data is impacted; intellectual property is lost, stolen, o
Information Security professionals are akin to our policemen. They are equipped with advanced firewalls and porn filters, secure email and web traffic gateways, encryption keys, IPS signatures, security policies, and intrusion detection systems. The best of them are adept at using advanced threat pr
In light of all the cyberattacks that have been well publicized as of late, we see the increasing need for skilled IT security resources to both protect against and respond to rapidly evolving cyber-threats. IT professionals tasked with protecting their companies’ cyber assets are facing growing cha
FISMA is the Federal Information Security Management Act of 2002. The goal of FISMA is to encourage and to hold government agencies in securing their data and information. Additionally, it encourages organizations that do business with the government to secure their information as well. According to
Most people incorporate commonly used words as their passwords. Studies show when people select random passwords, there is very little randomization to the words. Furthermore, as more large sites have their user’s passwords leaked, attackers are figuring out common password obfuscation techniques pe
Kali Linux does not come with SSH enabled. SSH is the preferred method of remote management for most Linux based systems. Secure Shell (SSH) is a cryptographic network protocol for secure data communication, remote command-line login, remote command execution, and other secure network services betwe
Lately there has been some articles and conversations around the security profession, particularly the ‘how to get started’ aspect. My good friend, Aamir Lakhani wrote a great article on getting started in cyber security (https://www.doctorchaos.com/getting-started-with-a-career-in-cyber-security-an
The Information Security Profession – Where do I Start? I am often asked by individuals to provide advice or guidance on how to get started in the field of information security. Many college students tell me they want to be a hacker, an IT systems penetration tester, or other type of cyber security
Hydra is a very fast and effective network login cracker. It will help you perform brute force attacks against SSH servers, VNC, and other services. When you launch Hydra it will launch the GUI in Kali, however in this tutorial we will use xHydra, which is the command line version of the tool. The c