Curated cybersecurity insights, opinions, emerging technologies, AI security topics, and notable industry discussions.
1296 articles
The article explains CIS Control 14’s security awareness requirements, including skills-gap analysis, regular and updated training, secure authentication, social engineering, sensitive data handling, and incident reporting.
A macOS security discussion recap explains how to inspect Background Task Management persistence items, monitor changes with Endpoint Security, and understand key macOS security features and malware trends.
A webinar recounts how an adult approached a 12-year-old on Instagram and tried to arrange a meeting. Speakers discuss alleged dark-web and social-media risks and urge family conversations, awareness, monitoring and reporting concerns to authorities.
The article explains how Biden’s 2023 AI executive order could affect security teams, emphasizing anticipated AI safety testing, privacy protections, fairness concerns, and ongoing training, collaboration, and red-teaming.
The article outlines eight factors that make vulnerabilities difficult to remediate, from severity and prevalence to assessment, exploitability, patching risks, long-term fix quality, and cost. It also suggests ways vendors can help security teams.
Talos explains scams targeting Roblox players, including phishing, malicious JavaScript, API-form manipulation, HAR-file theft and malware, and recommends ways to protect accounts and avoid losing Robux or items.
Wiz announced a cloud security CTF with five scenarios on common Amazon EKS security issues, letting participants explore misconfigurations and exploits in a controlled environment.
Wiz describes its agentless cloud scanner, emphasizing least-privilege access, regional scanning, redacted results, and SaaS or customer-hosted deployment options.
A practical guide explains how Linux kernel-module rootkits hide activity, the permissions and kernel hooks they rely on, examples seen in the wild, and ways to detect and prevent them.
Semgrep security researcher Clint Gibler discusses AI applications in cybersecurity, from phishing and web security to malicious-package analysis, threat modeling, cloud security, and fuzzing, while stressing that AI is an imperfect tool.
The article explains five phishing scenarios—including fake financial alerts, callback scams, QR-code lures, and a stock-option simulation—and offers tips for recognizing suspicious emails.
DarkOwl analysts explain how lookalike domains using characters from different scripts can impersonate legitimate sites to steal credentials or financial information, with examples and advice for spotting and avoiding them.
A Huntress author explains how antivirus differs from EDR and argues Mac users should block known threats. He says XProtect may suffice for personal use but may not be robust enough at scale.
John Althouse discusses JA4+, a suite of network fingerprinting techniques designed to help identify threats across multiple protocols, and explains how fingerprinting supports threat hunting and detection.
An explainer introduces eBPF as a sandboxed alternative to kernel modules and demonstrates a basic tracer, highlighting its potential for low-overhead security and system observability.
Bulletproof hosting providers tolerate illicit activity and may evade takedowns through lenient jurisdictions, shell companies, and infrastructure moves. The article explains their role in cybercrime and cites Cloudzy and DarkOwl observations as examples.
An introductory guide to malware reverse engineering covers setting up an isolated analysis environment, using common analysis tools, and handling malware techniques designed to frustrate investigation.
A recap of an ANZ-focused fireside chat highlights separating cybersecurity from other managed services, educating clients about risks, and clearly defining what security offerings include and exclude.
DarkOwl analysts describe how they investigate darknet and adjacent sources, track threats such as ransomware and phishing, assess organizational exposure, and advise aspiring analysts. The interview also promotes the company’s darknet services.
Huntress describes replacing scheduled Elasticsearch detections with a custom streaming engine and hosted OpenSearch, aiming to reduce detection delays, remove a 100-result limit, and lower infrastructure costs.
Two DarkOwl employees discuss their paths into cybersecurity, advice for newcomers, workplace challenges for women, and why the field needs diverse skills and perspectives.
A DEF CON 31 recap highlights a PyRDP honeypot used to study RDP attackers, risks involving NFC payments and tags, and discussions of internet censorship and social-engineering trends.
A Huntress security expert debunks myths about macOS immunity, explaining that Macs face malware and targeted attacks and that Apple’s built-in protections may benefit from additional security tools.
The article explains how signature-based antivirus can miss changing malware and describes how EDR adds behavioral monitoring, endpoint telemetry, threat hunting and analyst-led investigation and response. It also promotes Huntress’s managed services.
