Fraudsters pose as financial institutions in stimulus check phishing campaign
Platform considered safe has been under attack from Chinese APT groups for ten years
At Trail of Bits, we’ve all been working remotely due to COVID-19. But the next Empire Hacking event will go on, via video conference! When: April 14th @ 6PM How: RSVP via this Google Form or on Meetup. We’ll email you an invitation early next week. Come talk shop with us! Every two months, Empire [...
32 Filipinos charged with spreading fake news about the #COVID19 outbreak
Over the last four weeks, global traffic has grown by 30%
Conceptual Attack Graphs One question that I have gotten a few times about “Cybersecurity Attacks - Red Team Strategies” is around the conceptual attack graphs in “Chapter 3, Measuring an Offensive Security Program”. Specifically, how I create them.
In this post I will briefly go over some of the re...
Businesses could make huge savings by purchasing cybersecurity services from smaller companies
Survey reveals that companies prioritize attack detection and containment over prevention
Announcement After countless evenings and weekends in coffee shops, and multiple vacations with the laptop, I’m excited to announce that my first book has been published. It took 18 months from writing the first words (at Victrola Coffee Roasters on Capitol Hill by the way) to finishing this project...
Nearly half of security pros see it as a challenge, says Check Point
Global police alerted as cyber-criminals target healthcare organizations
TL;DR: We have improved Echidna with tons of new features and enhancements since it was released—and there’s more to come. Two years ago, we open-sourced Echidna, our property-based smart contract fuzzer. Echidna is one of the tools we use most in smart contract assessments. According to our records...
#COVID19 means regulator may reconsider size of penalties
Colombian government endorsed COVID-19 app containing vulnerabilities
(This posting is cross-posted between the Zeek blog and the Trail of Bits blog). The Zeek Network Security Monitor provides a powerful open-source platform for network traffic analysis. However, from its network vantage point, Zeek lacks access to host-level semantics, such as the process and user a...
San Diego data thieves target property management company Wolfe & Associates
Australians charged with altering invoices to steal millions in a BEC scam
Brute forcing accounts and exploitation using EternalBlue remain prevalent forms of attack
As #COVID19 drives meetings online, authorities warn disruptive users
Password-free installations allow hackers to profit