SEARCH
All Articles
Project Zero: ‘It Will Take All of Us to End The Era of Zero Days’
At Black Hat USA, Google Project Zero highlighted how far we’ve come in understanding zero days.
Software Has Eaten the World But There’s Still Hope
As software systems have become ever more complex, the opportunity for security researchers to show their value has grown, as well.
Black Hat Podcast: Josh Harguess and Chris Ward
Josh Harguess and Chris Ward, with Cranium AI, talk about the backstory of how MITRE Labs’ AI Red Team came to be.
Researchers Detail ‘Bucket Monopoly’ AWS Flaws
At Black Hat USA this week, researchers detailed now-fixed vulnerabilities across six AWS services.
The Growing Threat of Data Feudalism in AI Models
AI and machine learning security expert Gary McGraw joins Dennis Fisher to discuss the concept of data feudalism in LLM foundation models, what the security implications of it are, and whether narrowly focused models may help address these issues.
Chinese Threat Group Compromised ISP to Deliver Malware
Threat actors compromised an unnamed internet service provider in order to poison DNS responses and target macOS and Windows systems with malware.
Attackers Abuse Cloudflare Tunnels to Deliver Xworm Malware
The attack’s abuse of Cloudflare Tunnels is part of an overall increase in malware delivery via this vector, said researchers.
Black Hat USA 2024 Preview: AI, AI, and More AI
Decipher editors Dennis Fisher and Lindsey O'Donnell-Welch are joined by Brian Donohue to dissect the Black Hat talks they're looking forward to.
Taiwanese Research Center Targeted by APT41
The threat group likely used tools like Cobalt Strike as well as ShadowPad, a modular RAT that is a successor to the PlugX malware, in its attack.
Microsoft Azure Outage Stemmed From DDoS Defense Error
Microsoft said that a global outage of its Azure service on Tuesday was exacerbated by “an error” in its response to a distributed denial-of-service (DDoS) attack.
Google Enables App-Bound Encryption in Chrome
In Chrome 127, Google has enabled a feature called app-bound encryption to protect cookies from malware.
The Fallout From the CrowdStrike Outage
Huntress security researchers John Hammond joins Dennis Fisher to discuss the continued fallout from the CrowdStrike outage on cybersecurity teams.
Basta Ransomware Operator Tactics Undergo ‘Notable Shift’
UNC4393, a top Basta ransomware operator, has switched its initial access vector, showing the ongoing influences in the threat landscape a year after the Qakbot malware takedown.
Ransomware Groups Exploit VMware ESXi Flaw
The VMware ESXi flaw gives threat actors full administrative permissions on domain-joined hypervisors.
U.S. Indicts Alleged Member of APT45 for Maui Ransomware Attacks
The Department of Justice has indicted Rim Jong Hyok for allegedly conducting Maui ransomware attacks as part of the APT45 group.