Colonial Pipeline 2021: the password that shut off America's fuel
In 2021, the DarkSide group breached Colonial Pipeline through a VPN password with no MFA and cut off 45% of the US East …
TECHNOLOGY
Technology 174 posts
News, tutorials and takes on the tech world — with a heavy focus on information security.
Slopsquatting: the scam built on packages AI invents
Coding assistants suggest npm and pip packages that don't exist — and criminals register those names with malware …
AI scams: the 6 most common ones and how to protect yourself
Cloned voices, deepfakes, flawless phishing: the fastest-growing AI scams, how each one works, and the defenses that …
AI in the SOC: how machine learning spots threats before the attack
Generative AI isn't only the attacker's weapon: it's also central to modern SOCs. How machine learning detects anomalies …
LLMNR Poisoning: How Windows Hands Out Password Hashes on the Network
Windows broadcasts names on the network when DNS fails. The attacker replies, captures the NTLMv2 hash, and cracks it …
AI polymorphic malware: how BlackMamba fools antivirus
BlackMamba is a proof of concept that uses AI to rewrite its own code on every run and walk straight past EDR solutions. …
Get-Service in PowerShell: Auditing Windows Services
Learn to use Get-Service in PowerShell to list, filter and detect stopped automatic services on Windows. A practical …
How to Check if a File Has a Virus Before You Open It
Learn to use VirusTotal and SHA256 hashing in PowerShell to find out whether a file is malware before you run it — a …
How to use ChatGPT at work without leaking company data: 7 precautions
Samsung banned ChatGPT after employees pasted source code into it. Here are 7 practical precautions for using AI at work …
Data poisoning: what it is and how attackers poison AI models
Data poisoning corrupts AI models by injecting malicious data into training. How the attack works and why it stays …