~/category/security
142 articles
This week's attacker playbook includes video cable data exfiltration, Blogspot-hosted fileless loaders, a new Iranian C2 framework, and ClickFix phishing that impersonates Google's own verification UI
This week's top five offensive security stories — DPRK supply chain ops, active ColdFusion exploitation, China-nexus RAT campaigns, VM escape vulnerabilities, and rapid-fire Gitea probing. Here's what
Federal prosecutors have indicted five members of the Scattered Spider hacking group for ransomware attacks that caused $200 million in damages at MGM Resorts and Caesars Entertainment.
Check out my latest podcast with the famous TonyG around RSA: https://www.packet.zip/post/podcast-rsa-2026-recapSan Francisco's Moscone Center hosted (by what I could find online) 43,500 cybersecurity professionals last week. The one message I kept on hearing....AI...Agentic....Something....The con
The conflict that erupted on February 28, 2026, with joint US-Israeli strikes on Iran—codenamed Operation Epic Fury by the US and Operation Roaring Lion by Israel—has rapidly evolved into a full-spectrum hybrid war. While missiles, drones, and airstrikes dominate headlines (including the reported ki
As the US-Israel-Iran war enters its critical phase on March 4, 2026, the cyber domain has emerged as a silent yet potent arena of conflict. With Operations Epic Fury and Roaring Lion unleashing airstrikes on Iranian targets, the digital front has seen a mix of disruptions, threats, and proxy activi
RSA Conference 2025 delivered a clear message: the next frontier in cyber defense—and offense—is Agentic AI.Okay what is Agentic AI because I feel like there was some quota that every vendor had to meet by mentioning Agentic AI. What is funny, almost evety vendor I spoke to had a bit of a different
Microsoft research posted a very interesting blog post on a current nation state threat being tagged as Midnight Blizzard. Who is this threat actor?Midnight Blizzard (also known as NOBELIUM) is a Russia-based threat actor attributed by the US and UK governments as the Foreign Intelligence Service of
The guy behind the BreachForums at 21 years old is serving a sentence from home (with a tracker around his leg). This is pretty interesting to see no jail time for this crime. See the full article HERE.
If you are concerned about somebody watching what you do while you use the Internet, here is yet another reason to validate your concerns. Not only is there the risk of threat actors and targeted advertising, but even the NSA is collecting data without warrants. They claim to have some rules regardi
In the ever-adaptable landscape of virtualization technology, we've witnessed the arrival of the antMan hypervisor. This nifty piece of software offers a novel take on managing and steering virtual environments. Let’s dig into the nitty-gritty of antMan, contrasting it with the heavyweight contender
At first, when I saw DEF CON was cancelled I thought it was the usual annual joke (outside of the year of Covid that it was actually really for real cancelled). The thing is, it was really cancelled this year but now its uncancelled (they have shirts stating this available).What happened? In short,