Who Makes the Best Web Security Testers?
There’s been some debate in my circles recently on the topic of what type of person and background makes the best web security tester. The…
Month: April 2025
Plane Crashes and Child Molestation
In one of Malcolm Gladwell’s books he talked about how respect for authority has caused a massive number of plane crashes over time. Basically, the…
New SheByte PaaS Offering $199 Subscription for Cyber Criminals
In the wake of LabHost’s shutdown in April 2024, a new player has emerged in the Phishing-as-a-Service (PhaaS) landscape, positioning itself as the heir apparent…
Cozy Bear’s Wine Lure Drops WineLoader Malware on EU Diplomats
Midnight Blizzard (APT29/Cozy Bear) targets European embassies and Ministries of Foreign Affairs with sophisticated phishing emails disguised as wine tasting invitations. Learn about the new…
A Civilization Manifesto
This will be rough. I’ve always been attracted to the idea of identifying unifying characteristics of desired society, and defining those ideals as sacred to…
Visualizing Interesting Log Events Using Splunk’s Google Maps Application
I never stop being fascinated by the fact that web admins have boxes online that anyone in the world can reach out and touch. Visualizing…
Microsoft Warns of Ransomware Gangs Exploit Cloud Environments with New Techniques
In a comprehensive analysis of the ransomware landscape in the first quarter of 2025, Microsoft Threat Intelligence has highlighted significant shifts in tactics by threat…
A Depressing Truth About Friendship in Adulthood
One of the most depressing things in life is not being able have all your friends from various phases of your life meet and spend…
Gorilla Android Malware Intercepts SMS to Steal One-Time Passwords
In a concerning development within the Android ecosystem, a new malware variant known as “Gorilla” has been identified, primarily targeting financial and personal information through…
Rogue npm Packages Mimic Telegram Bot API to Plant SSH Backdoors on Linux Systems
Apr 19, 2025Ravie LakshmananLinux / Malware Cybersecurity researchers have uncovered three malicious packages in the npm registry that masquerade as a popular Telegram bot library…
Handling Redirects with Varnish and Nginx
[ NOTE: I am now using Nginx for everything, i.e. not using Varnish anymore, and getting the same or better results. ] I run Varnish…
Recording and Replaying Experiences | Daniel Miessler
One of the things I worry about most is not being able to recall the great experiences that have happened to me over time. It’s…