dr.chaos

~/blog

Articles

Every transmission from the lab — adversarial AI research, offensive security tutorials, threat analysis, and the legacy Dr. Chaos archive.

231 articles

Podcast: Every conversation is a negotiation

Tony G and Jonas Walker provide an inside look at how ransomware negations occur between a victim and an attacker. Learn how a travel management company negotiated a $10 million ransom to a $4.5 million payout and got tips from the attackers to help them understand how they were attacked. References

Aamir Lakhani1 min read

Podcast: Passion For All Things Security

Chris Louie (https://www.linkedin.com/in/chlouie/) blogger and security professional from zScaler speaks to us on today's podcast about all things security. Join Tony G and Dr. Chaos on our latest episode as we discuss ransomware, the US Presidential Elections, and all things security. Listen on you

Aamir Lakhani1 min read

Reassessing Security Vulnerabilities and Gaps After COVID

Written by: Kayla Matthews journalist & writer kaylaematthews@gmail.comhttps://productivitybytes.comThe ongoing COVID-19 pandemic has highlighted a few areas of improvement in the business world. As the world's systems try to adapt to changing needs, their shortcomings become increasingly evident.

Aamir Lakhani3 min read

Swans Reflecting Elephants

Original article appears at https://www.fortinet.com/blog/threat-research/how-threat-researchers-leverage-darknet-to-stay-ahead-of-cyber-threatsThe famous painting “Swans Reflecting Elephants” creates a double image and is an ideal metaphor of what we know about the Internet and the hidden layer ben

Aamir Lakhani10 min read

Into the Rabbit Hole – Offensive DNS Tunneling Rootkits

originally posted at https://www.fortinet.com/blog/threat-research/into-the-rabbit-hole-offensive-dns-tunneling-rootkits We see numerous evasion techniques that attackers use to bypass egress filtering solutions and establish command and control (C&C) within organizations. These targeted organizati

Aamir Lakhani7 min read

Podcast: It's All About the Benjamins

The financial sector takes cybersecurity seriously, and almost no one takes it more seriously than Chris Konrad, World Wide Technology Director of Global Financial Security.Join us as he discusses what makes the financial sector different, what products they are using to protect their environment, a

Aamir Lakhani1 min read

Podcast: 800-pound gorilla

Industrial cybersecurity specialist James Cabe from CyberX, discusses ICS attacks, OT vs IT, and working for a startup that just got acquired by Microsoft.From missile defense to IoT, we discuss how CyberX works on networks, modern ICS threats, and how ICS attacks are depicted in Hollywood movies. C

Aamir Lakhani1 min read

Podcast: EKANS, Green Eggs, and Ham

Researchers Aamir Lakhani and Anthony Giandomenico discuss the EKANS ransomware and why it was an effective and targetted attack.Listen on your favorite podcast app or on Soundcloud: https://soundcloud.com/drchaos-podcast/ekans-green-eggs-and-ham

Aamir Lakhani1 min read

Podcast: Verizon's 2020 DBIR

Aamir Lakhani and Tony G discuss the latest findings of the 2020 Verizon Data Breach report. From ransomware to passwords dumpers. What does it mean how you should shape your cybersecurity policy? Join us on the latest episode of Dr. Chaos Podcast to find out.Listen on SoundCloud by clicking on this

Aamir Lakhani1 min read

5 Best Cybersecurity Management Practices During a Crisis

No company wants to think about what it'll do in a crisis, but sometimes they're unavoidable. Whether it's an advanced cyberattack of a situation like COVID-19 that led to an unexpected rise in cybercrime, cybersecurity emergencies happen. If you do find yourself in such a crisis, how do you respond

Aamir Lakhani3 min read

Derek Manky and Aamir Lakhani Discuss OT Security

Dive into this conversation on OT security as Derek Manky and Aamir Lakhani discuss highlights from our recent FortiGuardLabs threat intelligence briefs and the origins of OT-targeted attacks, starting from the beginning with the Stuxnet virus.

Aamir Lakhani1 min read

Solutions for Cybersecurity Defense – What’s effective?

Written by Srikant (Sri) RamachandranIn the last article titled Who are you communicating with?, I talked about the importance of gaining visibility into traffic patterns across the enterprise to detect suspicious patterns. In this article, I present the argument for the vital importance of cybersec

Aamir Lakhani4 min read