Curated cybersecurity insights, opinions, emerging technologies, AI security topics, and notable industry discussions.
1296 articles
QR-code scams can use stickers in public places or codes sent by email and SMS to direct people to fraudulent sites, steal personal information, or install malware. The article recommends checking URLs and scanning codes only from trusted sources.
DarkOwl’s snapshot of Ares Market describes listings for drugs, payment-card and bank-account fraud, and counterfeit goods, and demonstrates setting up alerts to monitor a vendor in DarkOwl Vision.
The article explains how cloud detection and response builds on NDR principles while adding cloud-specific context, including visibility into identities, resources, locations, configurations, and dynamic changes.
Wiz summarizes Gartner guidance on CNAPP adoption and evaluation, including integrated services, cross-team requirements, risk visibility, and piloting a platform with real developers and applications.
The article warns that malicious links in YouTube descriptions or comments can expose children and families to malware or phishing, potentially putting connected home and workplace networks at risk. It recommends safe browsing habits and supervision.
DarkOwl profiles ShinyHunters’ reported data-theft methods, victim claims and role in BreachForums, including the group’s reported retirement as forum administrators after the site’s 2024 seizure.
A DarkOwl webinar explains how darknet and related sources can inform OSINT investigations, with examples involving threat actors, cryptocurrency, and hacktivist activity. The presenter cautions that findings require validation.
Open-source research describes stolen gaming accounts, game and company data leaks, and extremist groups exploiting gaming platforms to harass, recruit and groom users. It highlights risks to young gamers and organizations.
DarkOwl used ChatGPT to analyze StarFraud Chat messages from August 2022 to February 2024, describing fraud-related discussions and user activity while noting limits in the analysis. Researchers have attributed the group to Scattered Spider.
DarkOwl examines Doxbin’s history, the personal data shared on the site, and risks including swatting, identity theft and harassment. Claims that an operator was kidnapped remain unverified; the site is operating again.
Huntress explains that Macs can face malware and targeted threats, but macOS threats differ from Windows and ransomware attempts have generally been unsuccessful. It recommends updates, endpoint security, and caution with suspicious links.
An overview of how APIs connect applications, how attackers may abuse them to disrupt services or access data, and basic safeguards including encryption, role-based access, API gateways, zero trust, and monitoring.
An overview of security risks when organizations entrust data to third parties, with breach examples and advice on assessing vendor security, access controls, encryption, and cloud visibility.
A DarkOwl explainer outlines common information-stealer modules for command-and-control, data collection, encryption, exfiltration, and evasion, and describes how they can support credential and financial-data theft.
Healthcare organizations face phishing, business email compromise and vishing that can expose patient data or disrupt care. The article discusses FBI and HHS warnings and recommends layered defenses including MFA, security awareness training and monitoring.
DarkOwl explains how Tor’s WebTunnel bridge wraps Tor connections in websocket-like HTTPS traffic to make them harder to detect and block, and notes that it may let users bypass corporate network controls.
The article explains how CVE identifiers catalog publicly disclosed vulnerabilities and describes their use in tracking and research, with examples involving MOVEit, Confluence and FortiOS vulnerabilities.
The article describes ransomware’s risks to healthcare, including disrupted care and stolen patient data, and promotes layered defenses and managed EDR. A Huntress SOC isolated a client server before ransomware spread; a late response at another practice followed data.
A DarkOwl analyst discusses dark web research, OSINT skills, and operational security, and says AI is helping actors produce cleaner phishing templates and target more organizations.
DarkOwl describes CAPTCHA designs on darknet markets and forums, including language, image, logic, and timed challenges used to impede bots and make sites harder for researchers and law enforcement to access or crawl.
Huntress explains how vulnerable connected medical devices could threaten patient safety and uses a hypothetical nurse-call-system breach to illustrate layered security, including managed EDR monitoring, isolation, and remediation.
Wiz recommends KubeCon Europe 2024 talks covering Kubernetes threat intelligence, cluster policy enforcement, container image security, eBPF, privilege escalation, initial access, and attacks on managed clusters.
A Huntress analyst traced a malicious Advanced IP Scanner download served through a lookalike site, retrieved the executable from an exposed directory, decoded its Base64 contents, and matched its SHA-256 hash to the alert.
A DarkOwl webinar discusses the cyber operations, motivations, attribution challenges and evolving capabilities associated with Iran, China, North Korea and Russia, with examples and general defensive takeaways.
