Hackers can breach networks using data on resold corporate routers
Enterprise-level network equipment on the secondary market hide sensitive data that hackers could use to breach corporate environments or to obtain customer information. Looking at…
Month: April 2023
Severe Confluence Vulnerability is an Active Threat (CVE-2022-26134)
Background The vulnerability allows unauthenticated remote code execution (RCE). Exploitation occurs by sending an HTTP request with an attack payload to a vulnerable instance of…
Leading SaaS innovation with collaboration and security transparency
Detectify security experts are speaking with security managers and operational defenders daily. There’s a clear division on how a modern and mature organization will approach…
AI Art Just Opened The Threat to Human Work We Were Expecting from AGI
Let me start with the punchline: Something like 80% of most “knowledge work” is about to get replaced by artificial intelligence. I’m not professionally educated…
Iteration in Python: for, list, and map
The basics of writing iterations in Python using for loops, list comprehensions, and map. 2017-01-18 21:58:28 +0700 +0700 January 18, 2017 Updated: Nov 22, 2020…
Five Best Practices In 2023 For Threats
Everything in your house being connected to the internet – your coffee machine, thermostat, fridge, car, even your toothbrush – is no longer the stuff…
How to Catch Injection Security Vulnerabilities in Code Review
Understanding Injection Vulnerabilities Injection vulnerabilities exist when information provided by users of the application is not properly validated or sanitized before it is used. In…
Hacker Group Names Are Now Absurdly Out of Control
What if a hacker group thought to be part of a nation’s intelligence agency turns out to be a hacker-for-hire contractor? Or cybercriminals temporarily conscripted…
News, Analysis, and Discovery | NO. 356
Exploring the intersection of security, technology, and society—and what might be coming next… Standard Web Edition | Ep. 356 | November 7, 2022 SECURITY NEWS…
The Intrusion Detection And Prevention Systems In 2023
Increasing threats and cyberattacks have increased the demand for higher spending on cybersecurity infrastructure. Detecting incoming malicious activity requires tools that work on multi-level platforms…
How I ditched WordPress and set up my custom domain HTTPS site for (almost) free | victoria.dev
A guide (for the minimally tech-savvy) to setting up a website with HTTPS using Hugo, Cloudflare and GitHub Pages. I got annoyed with WordPress.com. While…
Hackers Using Mimikatz Hacking Tool to Deploy Trigona Ransomware
The Unit42 research team at Palo Alto Networks has recently discovered Trigona ransomware that attacks Windows with uncommon techniques and uses the Mimikatz exploitation tool…