An estimated 18,000 victims were scammed
Number of government, education and healthcare incidents remains steady
OSCP Reborn - 2023 Exam Preparation Guide Prologue Many of you are likely aware that the Offensive Security Certified Professional Exam was revised, with the changes officially published on January 11, 2022. The old version of the exam required the student to perform a buffer overflow attack (it sti...
2023 will see continued geopolitical tensions, stronger regulation and an AI-shaped revolution, predicts Infosecurity Europe’s security community
The global political landscape will continue to have an impact on cybersecurity as nation-state backed cyber-attacks continue
Le Conseil œcuménique des Églises (WCC) a été victime d'une cyberattaque par ransomware le 26 décembre, entraînant la mise hors service de tous ses systèmes. Le secrétaire général du WCC, le Rév. Prof. Dr Jerry Pillay, a fermement condamné l'attaque et a affirmé que l'organisation ne céderait pas au...
In a series of emails seen by several media, ByteDance admitted that some of its former employees used TikTok’s data to track two journalists
The law sets out requirements for federal agencies to migrate to quantum-secure cryptography
Après une cyberattaque, Schäfer Shop a réussi à restaurer ses systèmes critiques en dix jours, permettant de reprendre ses activités le 2 janvier avec des restrictions. Pour cela, elle a mis en place une zone rouge isolée, une zone bleue pour les interactions avec l'extérieur et une zone verte pour...
UK's privacy regulator says new rules for hacks still being worked out
Most data was encrypted in cloud storage
Trail of Bits recently completed a security review of cURL, which is an amazing and ubiquitous tool for transferring data. We were really thrilled to see cURL founder and lead developer Daniel Stenberg write a blog post about the engagement and the report, and wanted to highlight some important thin...
Latest iteration exploits Apache vulnerabilities
The FBI warns that cyber-criminals are impersonating brands through purchasing ad services in order to lure users to malicious websites
The naive approach to searching for patterns in source code is to use regular expressions; a better way is to parse the code with a custom parser, but both of these approaches have limitations. During my internship, I prototyped an internal tool called Syntex that does searching on Clang ASTs to avo...
In its largest fine of 2022, France’s privacy watchdog has fined US tech giant €60m for foisting advertising cookies on users
Auto-warranty campaign made billions of calls
A Primer on Process Reparenting in Windows. Process reparenting is a technique used in Microsoft Windows to create a child process under a different parent process than the one making the call to CreateProcess. Malicious actors can use this technique to evade security products or break process ances...
Intellectual Property Office says it breaks copyright law
Staff told to work from home after compromise