Ivanti announces acquisition of MobileIron and Pulse Secure
Forcepoint warns of growing insider risk
Techniques to enumerate the account ID associated with an AWS access key.
Center will have at least 150 specialist personnel
Another misconfigured Elasticsearch database is to blame
P1: Critical - Discovering and Foiling a Threat Actor Disclaimers, Credits: Thank you to everyone who helped validate any part of the project. It took a lot of work to figure out the extent of who was/is affected. I appreciate all of the help that we have received, with a special thank you to those...
Another blow for the government
Texas provider of software services to American schools reports cyber-attack
This was also presented at BSides Singapore 2020. The slides are here and YouTube link is here.
The origins of the Shadowbunny A few years ago, around 2016, I went on a relaxing two weeklong vacation. It was great to disconnect from work. I traveled to Austria, enjoying hiking in the mountains, and...
Criminals gain access to unnamed federal agency using Microsoft Office 365 log-in
13-year-old student arrested for allegedly hacking into Indiana school system
This year one of my goals was to learn about machine learning and artificial intelligence.
I wrote about my journey before - including what classes I took and books I read, the models and systems I built and operationalized, threat modeling it to learn about practical attacks and defenses. My goal i...
Elderly people have also lost £2.4m in COVID-related fraud recently
Social network spots another attempt at influencing opinion online
This post is part of a series about machine learning and artificial intelligence. Click on the blog tag “huskyai” to see related posts.
Overview: How Husky AI was built, threat modeled and operationalized Attacks: The attacks I want to investigate, learn about, and try out Mitigations: Ways to preve...
UK banks say social engineering is on the rise
Admins urged to patch immediately to prevent system takeover
This post is part of a series about machine learning and artificial intelligence. Click on the blog tag “huskyai” to see related posts.
Overview: How Husky AI was built, threat modeled and operationalized Attacks: The attacks I want to investigate, learn about, and try out The previous post covered...
Interesting training far more likely to change how employees think about security
Cyber-criminals are increasingly targeting industrial control systems in the oil and gas industry