North Korean APT Spreading Malware Through Spear Phishing Attacks
The "Lazarous Group", a North Korean APT conducted a spear phishing attack, weaponized with malicious documents
Dimitris Gkoutzamanis
Published items (289)
Tenable: Over 40 Billion Records Exposed in 2021
Over 40 billion records were exposed in cyber incidents during 2021, up nearly 78% from 2020
The New Norm: Parents Digitally Monitoring Their Children
The majority of parents participated in an online survey responded that they are digitally monitoring their children.
Hackers Demand Ransom for Hijacked Instagram Accounts
Hackers then demand ransom to be paid for the hijacked Instagram accounts.
13 Known Exploited Vulnerabilities Added to CISA Catalog
CISA has added 13 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities.
53% of Connected Medical Devices Have Serious Vulnerabilities
Critical device risks in hospital environments leave hospitals and patients vulnerable to cyber attacks and data security issues.
Hackers Using Azure and AWS to Spread RATs
Researchers from Cisco Talos Intelligence found that hackers are using public cloud providers like Azure and AWS to spread RATs.
Suspected Hacker Attack on Greek Parliament
A temporary shutdown of the legislature's web mail followed the hack of 60 Greek Parliament emails on Friday.
Huge Increase of WordPress Vulnerabilities in 2021
A huge increase of 142% of WordPress vulnerabilities in 2021 compare to 2020. Most of them exploitable.
Easy Way to Steal WiFi Passwords
Why waste time and resources capturing traffic and brute forcing WiFi passwords if there is an easy way to steal them?
Automated OSINT for Security Assessments
If you are a red teamer or a penetration tester you got to love automated OSINT tools which will help your security assessments. Here is one of the best ones.
NIST Publications on Penetration Testing
Penetration Testing is being mentioned in several NIST publications. See which those publications are and get more info on their recommendations.
Data Breach Statistics for 2021
The top five countries with the largest number of data breaches account for more than half of all breaches of 2021.
Information Security Best Practices for IoT
IoT devices are at risk of attack by a variety of malicious actors which can take advantage of poor information security design of an IoT solution.
35 Ways to Protect Yourself Online
The internet is a jungle of a million threats. Take action to protect yourself with the following 35 ways to protect yourself online.
4 Free Online Tools to Check if a Website is Dangerous
A common method for malicious actors is to direct you to a phishing site in order to harvest your username and passwords and also to make you download malicious software (malware). Always safely check if a website is dangerous before you click.
Penetration Testing: Create a DNS Zone Transfer Lab
DNS zone transfers use the AXFR protocol to replicate DNS records across DNS servers. If you do not protect your name servers, attackers can get information about all your hosts with AXFR.
Vulnerability vs Exploit, Do You Know The Difference?
Many news and articles keep on referring to words like vulnerability and exploits. But do you really know the difference?