What Is Kerberoasting? The Attack That Exploits Active Directory Service Accounts
Kerberoasting lets any domain user extract service account hashes from Windows and crack them offline — no admin rights …
Information Security 144 posts
Information security in plain English: scams, hardening and privacy — plus retrogaming, games and geek culture.
Get-FileHash in PowerShell: verify a file's SHA256 hash
Learn to use Get-FileHash in PowerShell to calculate and compare SHA256 hashes — confirm a downloaded file is legitimate …
fail2ban: how to block brute force attacks on Linux step by step
Install and configure fail2ban on Ubuntu/Debian to automatically ban IPs that brute-force SSH, with ready-to-use …
How to know if your phone has spyware: 7 signs and what to do
Battery draining fast, camera turning on by itself — these can be signs of spyware. See 7 warning signs and how to check …
Target 2013: the theft of 40 million cards via an HVAC vendor
In 2013, attackers breached Target through an HVAC contractor and stole 40 million cards — the attack that redefined …
Pass-the-Hash: how the NTLM attack works without the password
Pass-the-Hash uses a stolen NTLM hash to authenticate on the network without needing the real password. Learn the …
How to disable Office macros and close this classic attack vector
VBA macros were the primary vector for Emotet, Qakbot and Dridex. Learn how the attack works and how to block macros in …
Fake support: when AI hands you the scammer's phone number
Googling a company's helpline — or asking an AI for it — can put you straight through to a scammer. Here's how the fake …
Windows ME: 26 years of the OS Microsoft wanted to forget
On 14 September 2000 Microsoft shipped Windows ME. Fourteen months later it was scrap. The story of the most hated OS — …
Can a deepfake beat facial biometrics? How liveness detection works
Your face is now a password for your bank, your government ID and instant payments. Here's how liveness detection …