New York man sent aviation trade secrets to China
Developer warns of another open source supply chain attack
OSCP Reborn - 2023 Exam Preparation Guide Prologue Many of you are likely aware that the Offensive Security Certified Professional Exam was revised, with the changes officially published on January 11, 2022. The old version of the exam required the student to perform a buffer overflow attack (it sti...
Millions of suspicious emails were reported in 2022
The Trojan exploits known vulnerabilities in outdated WordPress plugins and themes
Le Conseil œcuménique des Églises (WCC) a été victime d'une cyberattaque par ransomware le 26 décembre, entraînant la mise hors service de tous ses systèmes. Le secrétaire général du WCC, le Rév. Prof. Dr Jerry Pillay, a fermement condamné l'attaque et a affirmé que l'organisation ne céderait pas au...
Group apologizes to Toronto-based SickKids
An estimated 18,000 victims were scammed
Après une cyberattaque, Schäfer Shop a réussi à restaurer ses systèmes critiques en dix jours, permettant de reprendre ses activités le 2 janvier avec des restrictions. Pour cela, elle a mis en place une zone rouge isolée, une zone bleue pour les interactions avec l'extérieur et une zone verte pour...
Number of government, education and healthcare incidents remains steady
2023 will see continued geopolitical tensions, stronger regulation and an AI-shaped revolution, predicts Infosecurity Europe’s security community
Trail of Bits recently completed a security review of cURL, which is an amazing and ubiquitous tool for transferring data. We were really thrilled to see cURL founder and lead developer Daniel Stenberg write a blog post about the engagement and the report, and wanted to highlight some important thin...
The global political landscape will continue to have an impact on cybersecurity as nation-state backed cyber-attacks continue
In a series of emails seen by several media, ByteDance admitted that some of its former employees used TikTok’s data to track two journalists
The naive approach to searching for patterns in source code is to use regular expressions; a better way is to parse the code with a custom parser, but both of these approaches have limitations. During my internship, I prototyped an internal tool called Syntex that does searching on Clang ASTs to avo...
The law sets out requirements for federal agencies to migrate to quantum-secure cryptography
UK's privacy regulator says new rules for hacks still being worked out
A Primer on Process Reparenting in Windows. Process reparenting is a technique used in Microsoft Windows to create a child process under a different parent process than the one making the call to CreateProcess. Malicious actors can use this technique to evade security products or break process ances...
Most data was encrypted in cloud storage
Latest iteration exploits Apache vulnerabilities