DigiNotar: The Certificate Authority Hacked and Bankrupt in 2011
In 2011, attackers issued 531 rogue DigiNotar certificates, including one for Google. How a CA works, what went wrong …
Incident Response 43 posts
Information security in plain English: scams, hardening and privacy — plus retrogaming, games and geek culture.
How to Find a Suspicious Process on Windows with Get-Process
Find a suspicious process on Windows with Get-Process: executable path, digital signature, parent process and network …
Hacked Google account: what to do in the first hour
Google account or Gmail hacked? Learn the signs, how to regain access, what to check (forwarding, apps) and how to lock …
SQL Slammer: The 376-Byte Worm That Slowed the Internet in 2003
On Jan 25, 2003, a 376-byte worm infected 75,000 SQL Server hosts in 10 minutes. Here's how Slammer worked and what it …
Stolen phone: what to do in the first hour (SIM, Pix, accounts)
Phone stolen? First-hour checklist: Brazil's Celular Seguro, SIM and IMEI blocking, banks, Google/Apple accounts, and …
Bad Rabbit: the fake Flash ransomware that hit Kyiv in 2017
On Oct 24, 2017, Bad Rabbit used a fake Flash installer to hit a metro, an airport and media in Ukraine and Russia. How …
Password Spraying: What It Is and How to Detect the Attack
Password spraying tries a few common passwords against thousands of accounts and slips past lockouts. How it works, how …
Infostealer: what it is and how to tell if you're infected
An infostealer steals saved passwords, session cookies and crypto wallets from your browser. See how it spreads, the …
What Is SQL Injection? How It Works and How to Prevent It
SQL injection still takes down whole companies. See how the attack works with a simple example, real cases like …
Hacked Instagram account: what to do in the first 30 minutes
Instagram hacked? Learn the warning signs, what to do in the first 30 minutes, how to recover the account and lock it …