dr.chaos

~/blog

Articles

Every transmission from the lab — adversarial AI research, offensive security tutorials, threat analysis, and the legacy Dr. Chaos archive.

231 articles

Classic TV Review: Mr. Robot

Being stuck at home and not going out as much as we are in the middle of a new COVID variant and resulting new wave, I got to rewatch one of my favorite shows: Mr. Robot!There are some things that bother me about our society… primary disappointment regarding my expectations pertaining to how we shou

Aamir Lakhani5 min read

Travel Like a Boss - Road Warrior Tips

How to travel thousands of miles on planes, trains, and automobiles making life comfortable, having a blast, and surviving. These are the best travel hacks and best road warrior travel products.

Aamir Lakhani9 min read

Podcast: Child of the Internet

Two UK teenagers were charged with hacking and being members of Lapsus$ the Dr. Chaos podcast discusses motivations around why teenagers and young adults may be motivated by cybercrime and how they might have gotten involved. Listen on SoundCloud by clicking here Also available on your favorite podc

Aamir Lakhani1 min read

Podcast: A Closer Look at the LAPSUS$ Data Extortion Group

A Closer Look at the LAPSUS$ Data Extortion Group. In the latest edition, we talk about their latest attacks, some of the techniques being used, and how they are getting caught. Listen on SoundCloud: https://soundcloud.com/drchaos-podcast/a-closer-look-at-the-lapsus-data-extortion-group Or use our e

Aamir Lakhani1 min read

U.S. Government Issues an Executive Order for Zero-Trust Architecture

The modern world and its digital infrastructure remain at high risk of cyberthreats. The U.S. Department of Homeland Security has identified several areas of particular importance when it comes to hardening national infrastructure against bad actors. These include transportation, election security,

Shannon Flynn3 min read

Podcast: Conti Leaks

Russian threat actor Conti has their data leaked. In this podcast, we will take a look at the leaked data and see what we can learn about one of the largest threat actors operating.Listen on SoundCloud by clicking on the linkhttps://soundcloud.com/drchaos-podcast/conti-leaks?utm_source=clipboard&utm

Aamir Lakhani1 min read

Is Your Printer Spying On You?

Did you know your printer could be spying on you? This isn’t a crazy conspiracy theory or some unsubstantiated insider leak from within a printer company. The threat is real according to the Electronic Frontier Foundation (EFF). We have also heard some occasional rumblings around this issue, so let’

Aamir Lakhani4 min read

What is the MITRE ATT&CK Framework?

Preventing cyberattacks is a top priority for everyone today, which is why the MITRE ATT&CK framework was created. The MITRE ATT&CK framework is an accessible platform that offers resources about cyberattacks. By taking advantage of this wealth of information, you can get new ideas for your security

Shannon Flynn3 min read

Rombertik: Old Dog

I recently came across a classic malware which I thought was long gone and forgotten. However, in these times of sourced code leaks and reuse, attackers are recycling and updating old code into something new. Rombertik is a self-destructing malware that has been making a lot of news. It is typicall

Aamir Lakhani2 min read

How Unsecured Wi-Fi Networks Lead to Vulnerability

Nowadays, there are so many devices that it can be challenging to remain secure while browsing the internet, shopping online, or communicating with co-workers. Businesses need to implement strong security strategies to protect themselves from malicious actors.Hackers are finding innovative ways to g

Shannon Flynn3 min read

How to Identify the Most Common Phishing Attacks

As technology advances, the risk of facing cyberattacks increases. Hackers have become more sophisticated in their attack methods, and organizations have had to take extra steps to mitigate the risk of experiencing a cyber incident. One of the most common types of cyberattacks is phishing. It's a so

Shannon Flynn4 min read

PIPL: How Does It Affect Your Data?

On August 20, 2021, China’s National People’s Congress enacted a new law titled the Personal Information Protection Law (PIPL) and it will go into effect on November 1, 2021. The new law is one of many data protection laws countries are creating and enforcing in a world where digital technology rule

Shannon Flynn3 min read