Deepfake candidate: the fake employee scam on video
A deepfake in a job interview has already fooled a security company. How the fake employee scam works and the red flags …
Information Security 144 posts
Information security in plain English: scams, hardening and privacy — plus retrogaming, games and geek culture.
Colonial Pipeline 2021: the password that shut off America's fuel
In 2021, the DarkSide group breached Colonial Pipeline through a VPN password with no MFA and cut off 45% of the US East …
Slopsquatting: the scam built on packages AI invents
Coding assistants suggest npm and pip packages that don't exist — and criminals register those names with malware …
AI scams: the 6 most common ones and how to protect yourself
Cloned voices, deepfakes, flawless phishing: the fastest-growing AI scams, how each one works, and the defenses that …
AI in the SOC: how machine learning spots threats before the attack
Generative AI isn't only the attacker's weapon: it's also central to modern SOCs. How machine learning detects anomalies …
LLMNR Poisoning: How Windows Hands Out Password Hashes on the Network
Windows broadcasts names on the network when DNS fails. The attacker replies, captures the NTLMv2 hash, and cracks it …
AI polymorphic malware: how BlackMamba fools antivirus
BlackMamba is a proof of concept that uses AI to rewrite its own code on every run and walk straight past EDR solutions. …
Get-Service in PowerShell: Auditing Windows Services
Learn to use Get-Service in PowerShell to list, filter and detect stopped automatic services on Windows. A practical …
How to Tell if a File Has a Virus: 3 Free Methods
Check a file for malware before opening it with VirusTotal or a SHA-256 hash in Windows. Follow the steps and learn what …
How to use ChatGPT at work without leaking company data: 7 precautions
Samsung banned ChatGPT after employees pasted source code into it. Here are 7 practical precautions for using AI at work …