Conficker: The Worm That Exploited Windows Flaw MS08-067
On Oct 23, 2008 Microsoft shipped an out-of-band patch, MS08-067. Conficker used that flaw on millions of PCs. Here's …
Incident Response 43 posts
Information security in plain English: scams, hardening and privacy — plus retrogaming, games and geek culture.
WhatsApp cloned: 6 signs and what to do in the first minutes
Lost access or contacts getting Pix money requests? Learn 6 signs of a cloned WhatsApp, how to recover the account and …
Adobe Breach 2013: 153 Million Passwords and a Crypto Blunder
On Oct 3, 2013 Adobe admitted a breach. The dump held 153 million accounts with 3DES-ECB passwords and plaintext hints. …
Target 2013: the theft of 40 million cards via an HVAC vendor
In 2013, attackers breached Target through an HVAC contractor and stole 40 million cards — the attack that redefined …
Yahoo breach 2013: the biggest leak in history, explained
In 2013, hackers compromised all 3 billion Yahoo users. The company only found out years later. How the biggest breach …
Colonial Pipeline 2021: the password that shut off America's fuel
In 2021, the DarkSide group breached Colonial Pipeline through a VPN password with no MFA and cut off 45% of the US East …
AI in the SOC: how machine learning spots threats before the attack
Generative AI isn't only the attacker's weapon: it's also central to modern SOCs. How machine learning detects anomalies …
AI polymorphic malware: how BlackMamba fools antivirus
BlackMamba is a proof of concept that uses AI to rewrite its own code on every run and walk straight past EDR solutions. …
Deepfake CEO fraud: the video call scam that stole US$25 million
An employee wired US$25 million after a video call with deepfakes of the company's entire finance team. Inside the Arup …
How Equifax ignored one patch and exposed 147 million people
In 2017, hackers spent 76 days inside Equifax's network undetected. The cause: a critical Apache Struts patch ignored …