~/blog
Every transmission from the lab — adversarial AI research, offensive security tutorials, threat analysis, and the legacy Dr. Chaos archive.
231 articles
While 2020 has come and gone, many of last year’s cyber fraud problems will continue into at least mid-2021. Cybercriminals will focus on maximizing their profits, using a traditional cost-benefit analysis to decide on the best attack vector. Pandemic-related emotions will run high, and remote workf
Think you know what being a CISSP is all about? Not all CISSP's are equal, some are more equal than others!
Thanks to COVID-19 and the need to social-distance from one another, many companies shifted rapidly to remote operations. Teams that used to work side by side had to move to a home office or remote location. It also meant that all of their equipment, the systems they required access to, and related
The world is much smaller than it was thirteen years ago. In 2007 Steve Jobs announced the Apple iPhone. It was an innovative product because it brought mobile Internet into the pockets of millions of people. Smartphones were in existence before the iPhone. Blackberry devices were standard issued de
Tony G and Dr. Chaos return to discuss what is XDR. Is it hype? Is it more than repackaged tools? Let's break down the new industry buzzword.Click here to listen directly on SoundCloud
The Clark-Wilson security model is based on preserving information integrity against the malicious attempt of tampering with data. The security model maintains that only authorized users should make and be allowed to change the data, unauthorized users should not make any changes, and the system sho
Everybody in the USA that used the mail-in or dropbox voting option, be on alert that there are criminals lurking about with the goal of abusing the confusion going on with the US election the next few days. If anybody calls you and asks you to verify anything about you as a means to “validate y
In a previous lesson, I pointed out that there are three essential ways security tools detect threats. Those methods are signature-based, behavior, and anomaly detection. Most security tools use a combination of one or more of these capabilities to detect threats. The following figure represents
Over the last few days, many of us in the USA have experienced network outages. I’m not sure about you, but I have become the default “IT Support Guy” at my house meaning when the network goes down, my family starts throwing tomatoes at me while they blame me for the outage. As the IT Support Gu
Don't Panic!You will inevitably be affected by a Distributed Denial of Service (DDoS) attack at some point. A DDoS attack is a shock to the system and how you react is everything. When it happens, stay calm and accept it. Someone comfortable at making the right decisions needs to take control of the
As the world increasingly relies on technology, the energy sector’s role becomes more critical. A disruption in the power grid that delivers electricity to businesses and homes could be devastating for any infrastructure and services in an area. Given this severity, cyberattacks on the energy indust
One common question I’ve received is what open source tools are available that I can download now. The answer to this question is simple: LOTS! I will point out however, there are reasons why organizations don’t just run only open-source products within their security operation center. There are