AI Voice Scam
May 1 2024Scammers tricked a company into believing they were dealing with a BBC presenter. They faked her voice, and accepted money intended for her.
Read moreUsing Legitimate GitHub URLs for Malware
April 22 2024Interesting social-engineering attack vector:
McAfee released a report on a new LUA malware loader distributed through what appeared to be a legitimate Microsoft GitHub repository for the “C++...
Read more
Other Attempts to Take Over Open Source Projects
April 18 2024After the XZ Utils discovery, people have been examining other open-source projects. Surprising no one, the incident is not unique:
The OpenJS Foundation Cross Project Council received a suspicious...
Read more
Backdoor in XZ Utils That Almost Happened
April 11 2024Last week, the Internet dodged a major nation-state attack that would have had catastrophic cybersecurity repercussions worldwide. It’s a catastrophe that didn’t happen, so it won’t get much attention—but...
Read moreXZ Utils Backdoor
April 3 2024The cybersecurity world got really lucky last week. An intentionally placed backdoor in XZ Utils, an open-source compression utility, was pretty much accidentally discovered by a Microsoft engineer—weeks...
Read moreDetails of a Phone Scam
February 21 2024First-person account of someone who fell for a scam, that started as a fake Amazon service rep and ended with a fake CIA agent, and lost $50,000 cash. And...
Read moreFooling an AI Article Writer
July 27 2023World of Warcraft players wrote about a fictional game element, “Glorbo,” on a subreddit for the game, trying to entice an AI bot to write an article about it....
Read moreCoinbase breached by social engineers, employee data stolen
February 22 2023Another day, another "sophisticated" attack. This time, the company has handily included some useful advice along with its mea culpa...
Read moreMassive Data Breach at Uber
September 16 2022It’s big:
The breach appeared to have compromised many of Uber’s internal systems, and a person claiming responsibility for the hack sent images of email, cloud storage and code...
Read more
Friends don't let friends get scammed. Not everyone knows how typical scams unfold, so here are some real-world examples...
Read more
Recent Comments