Curated cybersecurity insights, opinions, emerging technologies, AI security topics, and notable industry discussions.
1296 articles
The article advises SMBs to adopt scalable cybersecurity practices and consider fractional CISOs or vetted vendors to establish fundamental controls, manage costs and risks, and improve resilience.
The article explains NVIDIA’s five-stage AI Kill Chain and MITRE ATLAS’s technique catalog, showing how they help teams describe AI attacks and highlighting detection gaps when agents chain legitimate actions.
The article describes a claimed attack chain using hallucinated package names, hardcoded credentials, and unprotected admin routes. It recommends dependency verification, secret scanning, and enforced authentication, and cites a study and a Tenzai assessment.
An explainer on how RaaS developers and affiliates share tools and ransom profits, examples of major operations, and basic steps organizations can take to reduce ransomware risk.
A hands-on NetExec tutorial demonstrates remote command execution over SMB, WinRM, WMI, MSSQL, RDP and SSH, including password, hash, Kerberos-ticket and certificate authentication; it notes MSSQL xp_cmdshell can run commands as the SQL Server service account.
A practical cybersecurity interview guide links networking fundamentals—including TCP/UDP, DNS, subnetting, network devices, firewalls and IDS/IPS—to attacks, segmentation and security-control limitations.
Andrew MacPherson’s LABScon 2025 talk surveys crypto theft, including the claimed $1.5 billion Bybit heist, developer and supply-chain compromises, and laundering through cross-chain swaps, mixers, and non-KYC platforms.
Gary Warner discusses how Chinese-speaking criminal networks combine smishing, targeted fraud, scam operations and global money laundering, and how enforcement, telco collaboration and student investigators can help disrupt them.
The article explains how monitoring internal traffic can help grid operators detect lateral movement across IT and OT networks, and discusses NERC CIP-015 expectations and Trend Micro’s visibility and detection capabilities.
CIS’s Tony Sager previews RSAC 2026 sessions he plans to attend, spanning AI and cloud security, measuring progress against threat actors, defender strategies, human factors, and lessons from the Enigma machine for OT security.
An introductory guide distinguishes viruses, worms, trojans, ransomware, rootkits and fileless malware, explains how they spread or hide, and notes how misidentifying a worm can misdirect incident response. It also recommends backups, updates and disabling macros.
An overview of major dark web marketplace takedowns and the investigative methods behind them, including undercover operations, cryptocurrency tracing, and Network Investigative Techniques.
A PostgreSQL penetration-testing tutorial covers reconnaissance, credential attacks, file access, command execution and reverse shells, then recommends access controls, least privilege, monitoring and patching.
Lisa Fitzgerald of Norton Rose Fulbright says public AI use can expose sensitive data and create legal risks. She recommends staff training, Use Case Assessments and privilege-aware handling of cyber incident investigations.
A tutorial explains how digital signatures use hashing and public-key cryptography to support integrity and authenticity, then demonstrates key generation, signing, verification, and tampering detection in a Docker lab with OpenSSL.
A beginner’s guide to HTTP, TCP, UDP, SMTP and FTP explains how they work and why they matter for security, including TLS protection, email safeguards, DDoS amplification and the risks of unencrypted FTP.
An explainer on public and private IP addresses and how NAT lets devices share a public address. It connects public-IP exposure and routine scanning to cybersecurity, while noting that private addresses were created to address IPv4 shortages, not as a security measure.
Lumen describes how Black Lotus Labs combines network visibility, third-party intelligence, analytics and researcher validation to contextualize threats and help security teams investigate and respond.
A threat-intelligence investigator explains how parallel physical and digital checks can expose hiring fraud, describing a client case involving suspected DPRK remote-worker activity, a fake ID and a laptop returned by someone other than the hired worker.
The guide explains the 3-2-1 backup rule and its 3-2-1-1-0 extension, recommending an immutable copy, regular restore testing, and security controls to help protect recovery options from ransomware and other disruptions.
A practical guide to 3-2-1-1-0 backups recommends an immutable copy, regular restore testing, encryption, separate credentials, MFA, and monitoring to improve recovery from ransomware and other disruptions.
Huntress describes five phishing tactics—voicemail lures, callback scams, brand impersonation, fake shipping alerts, and trusted-site redirects—and recommends checking services directly, using MFA, filtering email, and reporting suspicious messages.
A retrospective traces cloud security from early AWS foundations through the CSPM and CNAPP eras, then examines how AI is accelerating both vulnerability exploitation and defensive work.
Elastic’s Terraform provider adds resources for managing detection rules and exception lists as code. The article demonstrates an ES|QL service-account logon rule and compares Terraform’s deployment workflow with the detection-rules repository.
