Session cookie theft: the attack that walks around your 2FA
Infostealers steal browser session cookies and access accounts with no password and no 2FA. How session hijacking works …
TECHNOLOGY
Technology 174 posts
News, tutorials and takes on the tech world — with a heavy focus on information security.
Deepfake CEO fraud: the video call scam that stole US$25 million
An employee wired US$25 million after a video call with deepfakes of the company's entire finance team. Inside the Arup …
Red telephone: 63 years of the hotline that was never a phone
On 08/30/1963, the Moscow-Washington hotline went live. The first message was a test pangram. And there never was a red …
How Equifax ignored one patch and exposed 147 million people
In 2017, hackers spent 76 days inside Equifax's network undetected. The cause: a critical Apache Struts patch ignored …
How generative AI changed phishing: perfect emails, zero mistakes
AI-generated phishing emails already hit an 81% click rate. How ChatGPT and similar tools raised the quality of the scam …
Prompt injection: what it is and why it's the biggest threat to AI chatbots
Prompt injection tops the OWASP ranking of LLM risks for the second year running. Learn how the attack works and why …
Watering hole attack: when legitimate sites become a trap
A watering hole attack compromises legitimate sites to infect specific groups of victims. How it works, real cases and …
Fileless malware: what it is and how it fools your antivirus
Fileless malware writes nothing to disk: it lives in RAM and uses Windows' own tools to attack. Understand what it is …
The fake-relative scam with an AI-cloned voice: how it works and how to protect yourself
Criminals use AI to clone the voices of children and grandchildren and demand an urgent transfer by phone. How the scam …
WormGPT and FraudGPT: how the malicious AI sold on the dark web works
WormGPT and FraudGPT are chatbots with no safety filters, sold for up to US$1,700 a year on the dark web. How they work …