dr.chaos

~/blog

Articles

Every transmission from the lab — adversarial AI research, offensive security tutorials, threat analysis, and the legacy Dr. Chaos archive.

231 articles from the new era

Kali Linux 2021.3 - updates and new features

Most cybersecurity professionals have Kali Linux tucked away in their pocket, which is a Linux cybersecurity-focused distribution. For most of us in this profession, it is the go-to version for cybersecurity testing. I won’t get into the distribution discussion of choices, and I understand that ther

Aamir Lakhani3 min read

What Is Leakware?

Ransomware — a kind of malware attack that encrypts a computer’s files, leaving PC owners scrambling to pay the ransom to gain the decryption key — has been hitting the news more often in the past few years. Everyone, from the UK’s National Health Service (NHS) to the Colonial Pipeline, has found th

Shannon Flynn3 min read

What is Zero Trust Network Access (ZTNA)?

The Information Technology (IT) industry is growing, and the technologies that are made available tend to grow in number and complexity as well. With more and more people working from home or any remote location, it’s no surprise that cybersecurity threats are becoming more prevalent. Fending off wo

Shannon Flynn4 min read

Podcast: Eyes Wide Shut

Click here to listen to the podcastRansom payments are tax-deductible, and no one cares. Should we?https://www.foxbusiness.com/lifestyle/ransomware-attack-payment-tax-deductibleNorth Korea exploits VPN vulnerabilities. Possibly gains nuclear research. Think about this; North Korea may achieve nuclea

Aamir Lakhani1 min read

Podcast: Predator, Hunter, Prey

Click Here to listen to the podcast on SoundCloud We are honored to have Dr. Alex Tarter, CTO of Thales UK and co-founder of TurgenSec, and Breaches.UK on our podcast.Alex is a bit of a legend in the CISO space. He discusses the concepts of attack surface management capabilities that the team at Tur

Aamir Lakhani1 min read

The 5 Biggest Cybersecurity Threats of 5 Industries

Unaddressed cybersecurity threats can cause lost profits, regulatory fines and missed opportunities. Plus, as company leaders scramble to recover from attacks, making progress often takes weeks or months, severely disrupting business operations. If a cyberattack compromises customer data — as many d

Shannon Flynn7 min read

Podcast: A Long Week

Tony G and Aamir Lakhani discuss their long week of investigating remote work cyber attacks, the craziness of ransomware, the Colonial Pipeline attack, and a debate on Cobalt Strike being a tool made for attackers or being used by attackers. Our excitement leads to openly discussing the problems wit

Aamir Lakhani1 min read

5 Critical Regulations for Cyber Security Compliance

Cyber security compliance is more important than ever. With new technologies and digital connections happening every day, small and medium-sized businesses (SMBs) must properly comply with cyber security regulations across the board. Which ones, though, should you focus on the most?You’ll find that

Shannon Flynn3 min read

The Grey Brick That Changed the World: The Nintendo Game Boy

This week marked an important anniversary; Nintendo’s original Game Boy turned 31. The monochrome system, or more accurately a yellowish and 4 shades of grey system, may have been one of the most significant devices in the 20th century.The 8-bit system was released to the world on April 21st, 1989.I

Aamir Lakhani1 min read

No More LOLs

The Internet is fragile. We have seen governments trying to shut down the Internet as thousands rallied for democracy in the Middle East. We witnessed rioters use the Internet to coordinate attacks on the innocent. Denial of Service attacks has been used recently to shut down access to critical gove

Aamir Lakhani1 min read

Exchanging Web Shells

Tony G and Aamir Lakhani discuss the Microsoft Exchange Zero-Day vulnerabilities.Click here to listen to the podcast on Soundcloud or find us on your favorite podcast app.

Aamir Lakhani1 min read

What Is Digital Forensics in Cybersecurity and Why Is It Important?

Cybersecurity is a vast sector that incorporates several subfields. While protecting invaluable data and digital assets, it’s essential to have numerous professionals working on cybersecurity at all times. Digital forensics is the field where workers deal with what happens after any form of cybercri

Shannon Flynn3 min read