Block Bits Fund investors allegedly conned out of $960K by defendants’ tech misrepresentations
Geopolitical uncertainty adds to CISOs' headaches
FIN7 est un groupe cybercriminel russophone initialement spécialisé dans les attaques à visée lucrative à l’encontre de systèmes d’information bancaires. Il a ciblé des secteurs variés aux États-Unis, au Royaume-Uni, en Australie et en France. À partir de 2020, le groupe fait évoluer son activité...
Pre-positioning began as far back as March 2021
Public-facing assets are a prime target for attack
During my winternship, I used the findings from recent Go audits to make several improvements to go-fuzz, a coverage-based fuzzer for projects written in Go. I focused on three enhancements to improve the effectiveness of Go fuzzing campaigns and provide a better experience for users. I contributed...
Impact of skills gap in cybersecurity industry goes beyond talent shortage
Data breach, first reported as impacting 1200 individuals, affected 2,592,494
A technical analysis of a new variant of the SparrowDoor malware.
Private investigator pleads guilty to involvement in global fraud and hacking conspiracy
Around two-thirds (66%) of organizations were hit by a ransomware attack in 2021, surging from 37% in 2020
We are open-sourcing Amarna, our new static analyzer and linter for the Cairo programming language. Cairo is a programming language powering several trading exchanges with millions of dollars in assets (such as dYdX, driven by StarkWare) and is the programming language for StarkNet contracts. But, n...
Ransomware group Stormous claims it has stolen 161GB of data from the soft drinks giant
Web and email security services are provided by GCHQ
The Ultimate CRTO Preparation Guide Understanding this Guide The CRTO (Certified Red Team Operator) course is offered through Zero Point Security. Originally, I had purchased the course when the exam was on version 1, and the entire course was organized in a different way. I stopped working on the c...
Microsoft-discovered vulnerabilities have now been resolved
Military officers were indicted for the campaign in 2020
In part 1 of this blog post, we disclosed critical vulnerabilities that break the soundness of multiple implementations of zero-knowledge proof systems. This class of vulnerability, which we dubbed Frozen Heart, is caused by insecure implementations of the Fiat-Shamir transformation that allow malic...
British Army online recruitment system down since March following data breach
Botnet’s operators spotted spring cleaning its delivery tactics, techniques and procedures