Microsoft warns that Chinese threat actors steal credentials in password-spray attacks by using the Quad7 (7777) botnet, which is made up of hijacked SOHO routers. Quad7 is a botnet that
An ongoing spear-phishing campaign is affecting a variety of companies, including governmental agencies. According to Microsoft, the Russian APT group Midnight Blizzard (also known as APT29, UNC2452, and Cozy Bear)
This is a good point: Part of the problem is that we are constantly handed lists…list of required controls…list of things we are being asked to fix or improve…lists of
Tracking World Leaders Using Strava Way back in 2018, people noticed that you could find secret military bases using data published by the Strava fitness app. Soldiers and other military
In Florida, a state known for its dynamic business landscape as much as its unpredictable weather, selecting from the top Managed Service Providers (MSPs) is essential for companies looking to
Simson Garfinkel on Spooky Cryptographic Action at a Distance Excellent read. One example: Consider the case of basic public key cryptography, in which a person’s public and private key are
Hackers exploited an RCE flaw to target over 22,000 CyberPanel servers with PSAUX ransomware. Nearly all CyberPanel instances went offline as a result. Researchers said that in fact there are
The Sarbanes-Oxley Act (SOX) is a United States federal law that aims to enhance corporate transparency and accountability. Signed into law on July 30th, 2002, the Act came in response
Law Enforcement Deanonymizes Tor Users The German police have successfully deanonymized at least four Tor users. It appears they watch known Tor relays and known suspects, and use timing analysis
In recent years, the security of the United States’ critical infrastructure has become a pressing concern, particularly in the oil and gas sector, due to its pivotal role in the
