162 casos · pág. 7/9
SentinelOne argues that "EDR killer" covers four different techniques, and a single driver-load rule leaves blind spots. The four are bring-your-own-vulnerable-driver (BYOVD), bring-your-own-installer, admin-to-kernel, and driverless suspension. The article gives hunt logic for each and recommends rolling them out in order of signal quali…
Unit 42 (Palo Alto Networks) describes how adversaries move beyond the initial foothold and pivot across the enterprise, exploiting the visibility gaps left by disconnected security tools. The 2026 Unit 42 Global Incident Response Report found that 43% of attacks involved activity across four or more attack surfaces, and some cases spanne…
CRPx0 is a cybercrime operation that began as a scam and then pivoted into a full ransomware and cryptocurrency business. The source is a short Fortra blog teaser by Graham Cluley that points to a fuller article. The teaser gives no victim names, sectors, technical details, IOCs, CVEs, TTPs or attribution beyond the operation's name. Defe…
Episode 485 of the Smashing Security podcast, hosted by Graham Cluley with guest Lianne Potter, covers several security stories. Researchers who wanted to test LG smart TVs for security risks got around the terms and conditions by setting up the TV while drunk, on the reasoning that they could not be bound by a contract agreed to while in…
Episode 486 of the Smashing Security podcast (host Graham Cluley, guest Dave Bittner) covers two main stories. An Auckland store's vibe-coded website reportedly let the public edit its inventory, and bogus listings appeared within hours, including socks, an $850 banana and New Zealand's national parks. A hacker collective also physically …
N0n is a newly emerged cyber extortion group first spotted in mid-September 2026. Within days it had published details of what it claimed were around a dozen victims on its dark web leak site, and the tally has continued to grow. The source is a short Fortra blog teaser by Graham Cluley that points to a fuller article. The teaser gives no…
Episode 488 of the Smashing Security podcast, hosted by Graham Cluley with guest Paul Ducklin, covers several recent security stories. The lead item is the arrest by the FBI of an executive at a ransomware negotiation firm, reportedly at a cybersecurity conference, in connection with the investigation into the ShinyHunters gang. The hosts…
Krybit is described as a fast-growing ransomware group that was reportedly hacked by a rival gang, retaliated, and is still extorting victims. The source is a short Fortra blog teaser by Graham Cluley, which points to a fuller article covering how the group operates, who it has targeted and how organisations can protect themselves. The te…
In Weekly Update 516, Troy Hunt comments on the Brinks Home incident, in which the company is the target of criminal extortion. He criticizes the company's FAQ as so heavily lawyered that it fails to answer basic incident response questions. Hunt describes a common breach pattern: attackers obtain data by vishing a target and abusing OAut…
Troy Hunt's Weekly Update 515, titled "Seeking Caffeine Utopia", is a personal post about Australian coffee culture and his purchase of a new espresso machine. The excerpt contains no reporting on breaches, vulnerabilities, threat actors, malware or other security incidents. It has no operational relevance for defenders and carries no ind…
Have I Been Pwned (HIBP) has onboarded Nepal as the 47th government to use its free government monitoring service. Nepal's National Cyber Security Centre (NCSC) can now monitor Nepalese government domains against the breach data held in HIBP. This lets the NCSC identify exposed government email addresses and respond quickly when those acc…
Troy Hunt's Weekly Update 518 covers his home door lock design built on Ubiquiti UniFi hardware. The design rests on four principles: mains power with no reliance on batteries, fail-secure behaviour so doors stay locked in a power outage, local control with no cloud latency, and a manual override for emergencies such as a fire. He plans t…
Troy Hunt announced that Sri Lanka is the 48th government onboarded to the free government service of Have I Been Pwned (HIBP). Sri Lanka CERT can now monitor Sri Lankan government domains against data held in HIBP. This helps identify exposed government accounts and respond when they appear in new data breaches. The announcement is about…
In his Weekly Update 517, Troy Hunt offers commentary on the current ransomware situation. He argues that much of what is called ransomware often involves no malware at all and is simply extortion, frequently carried out by young offenders. These actors earn large sums but struggle to spend them without being caught. He adds that breached…
This Troy Hunt weekly update is a personal, non-security post. He describes using YouTube's automatic thumbnail generator and installing his first full Ubiquiti Access door lock with a Lockwood ES2100 electric strike. He notes the built-in door position sensor simplifies the setup and hopes Ubiquiti will add hub support for latch position…
In Weekly Update 519, Troy Hunt describes a busy week of conference talks in Oslo and Copenhagen, including a 3D printing talk, an NDC infosec talk and a talk on cyber-related topics. He also notes that "ratbag hackers" keep dumping more data, but the excerpt names no victims, threat actors, datasets or dates. The rest covers his IoT door…
Troy Hunt's Weekly Update 522, recorded live in Oslo with Scott Helme, discusses how Report URI uses Content Security Policy (CSP) reporting to identify malware-infected machines within organizations. Helme also describes a high rate of malicious browser extensions being detected with help from "Rory", his local OpenClaw instance. The art…
In his weekly update, Troy Hunt notes that the ShinyHunters group appears to be on an escalating trajectory, reportedly targeting both the Cl0p ransomware group and the FBI. Hunt describes this as feeling like a crescendo in the group's activities and says that provoking US federal law enforcement is unlikely to help the group's longevity…
Troy Hunt's Weekly Update 521 argues that media narratives about AI as a powerful hacking tool diverge from the facts. He cites a statistic that AI has had effectively 0% impact on insurance payouts, and a Dutch individual who is reportedly being tracked down from his voice. He also points to Scott's teardown of the MAG breach, which ulti…
This Foreign Affairs essay, co-written by Bruce Schneier and Seva Gunitsky, argues that AI offers autocrats two things: real-time monitoring of subordinates and replacement of human intermediaries. Examples include RT's AI-generated anchors, China's Zero Trust AI system and smart city oversight, Russia's Oculus censorship system and Melio…
