New Windows Malware Locks Computer in Kiosk Mode
September 25 2024A malware campaign uses the unusual method of locking users in their browser’s kiosk mode to annoy them into entering their Google credentials, which are then stolen by...
Read more
Israel’s Pager Attacks and Supply Chain Vulnerabilities
September 24 2024Israel’s brazen attacks on Hezbollah last week, in which hundreds of pagers and two-way radios exploded and killed at least 37 people, graphically illustrated a threat that cybersecurity experts...
Read moreHacking the “Bike Angels” System for Moving Bikeshares
September 23 2024I always like a good hack. And this story delivers. Basically, the New York City bikeshare program has a system to reward people who move bicycles from full...
Read moreFriday Squid Blogging: Squid Game Season Two Teaser
September 21 2024The teaser for Squid Game Season Two dropped. Blog moderation policy.
Read moreClever Social Engineering Attack Using Captchas
September 20 2024This is really interesting. It’s a phishing attack targeting GitHub users, tricking them to solve a fake Captcha that actually runs a script that is copied to the command line. Clever.
Read moreFBI Shuts Down Chinese Botnet
September 19 2024The FBI has shut down a botnet run by Chinese hackers:
The botnet malware infected a number of different types of internet-connected devices around the world, including home routers,...
Read more
Remotely Exploding Pagers
September 17 2024Wow.
It seems they all exploded simultaneously, which means they were triggered.
Were they each tampered with physically, or did someone figure out how to trigger a thermal runaway remotely?...
Read morePython Developers Targeted with Malware During Fake Job Interviews
September 17 2024Interesting social engineering attack: luring potential job applicants with fake recruiting pitches, trying to convince them to download malware. From a news article
These particular attacks from North...
Read more
Legacy Ivanti Cloud Service Appliance Being Exploited
September 16 2024CISA wants everyone—and government agencies in particular—to remove or upgrade an Ivanti Cloud Service Appliance (CSA) that is no longer being supported. Welcome to the security nightmare that is the...
Read moreUpcoming Speaking Engagements
September 15 2024This is a current list of where and when I am scheduled to speak: I’m speaking at eCrime 2024 in Boston, Massachusetts, USA. The event runs from September 24 through...
Read more
Recent Comments