~/blog
Every transmission from the lab — adversarial AI research, offensive security tutorials, threat analysis, and the legacy Dr. Chaos archive.
238 articles
Russian threat actor Conti has their data leaked. In this podcast, we will take a look at the leaked data and see what we can learn about one of the largest threat actors operating.Listen on SoundCloud by clicking on the linkhttps://soundcloud.com/drchaos-podcast/conti-leaks?utm_source=clipboard&utm
Did you know your printer could be spying on you? This isn’t a crazy conspiracy theory or some unsubstantiated insider leak from within a printer company. The threat is real according to the Electronic Frontier Foundation (EFF). We have also heard some occasional rumblings around this issue, so let’
Preventing cyberattacks is a top priority for everyone today, which is why the MITRE ATT&CK framework was created. The MITRE ATT&CK framework is an accessible platform that offers resources about cyberattacks. By taking advantage of this wealth of information, you can get new ideas for your security
I recently came across a classic malware which I thought was long gone and forgotten. However, in these times of sourced code leaks and reuse, attackers are recycling and updating old code into something new. Rombertik is a self-destructing malware that has been making a lot of news. It is typicall
Nowadays, there are so many devices that it can be challenging to remain secure while browsing the internet, shopping online, or communicating with co-workers. Businesses need to implement strong security strategies to protect themselves from malicious actors.Hackers are finding innovative ways to g
As technology advances, the risk of facing cyberattacks increases. Hackers have become more sophisticated in their attack methods, and organizations have had to take extra steps to mitigate the risk of experiencing a cyber incident. One of the most common types of cyberattacks is phishing. It's a so
On August 20, 2021, China’s National People’s Congress enacted a new law titled the Personal Information Protection Law (PIPL) and it will go into effect on November 1, 2021. The new law is one of many data protection laws countries are creating and enforcing in a world where digital technology rule
Most cybersecurity professionals have Kali Linux tucked away in their pocket, which is a Linux cybersecurity-focused distribution. For most of us in this profession, it is the go-to version for cybersecurity testing. I won’t get into the distribution discussion of choices, and I understand that ther
Ransomware — a kind of malware attack that encrypts a computer’s files, leaving PC owners scrambling to pay the ransom to gain the decryption key — has been hitting the news more often in the past few years. Everyone, from the UK’s National Health Service (NHS) to the Colonial Pipeline, has found th
The Information Technology (IT) industry is growing, and the technologies that are made available tend to grow in number and complexity as well. With more and more people working from home or any remote location, it’s no surprise that cybersecurity threats are becoming more prevalent. Fending off wo
Click here to listen to the podcastRansom payments are tax-deductible, and no one cares. Should we?https://www.foxbusiness.com/lifestyle/ransomware-attack-payment-tax-deductibleNorth Korea exploits VPN vulnerabilities. Possibly gains nuclear research. Think about this; North Korea may achieve nuclea
Click Here to listen to the podcast on SoundCloud We are honored to have Dr. Alex Tarter, CTO of Thales UK and co-founder of TurgenSec, and Breaches.UK on our podcast.Alex is a bit of a legend in the CISO space. He discusses the concepts of attack surface management capabilities that the team at Tur