Category: EN

Not All MFA Is Equal: Lessons From MFA Bypass Attacks

One-time passwords are one of the most relied-on forms of multi-factor authentication (MFA). They’re also failing miserably at keeping simple attacks at bay. Any shared secret a user can unknowingly hand over is a target for cybercriminals, even short-lived TOTPs.…

On the Cyber Safety Review Board

When an airplane crashes, impartial investigatory bodies leap into action, empowered by law to unearth what happened and why. But there is no such empowered and impartial body to investigate CrowdStrike’s faulty update that recently unfolded, ensnarling banks, airlines, and…

Congratulations to the MSRC 2024 Most Valuable Security Researchers!

The Microsoft Researcher Recognition Program offers public thanks and recognition to security researchers who help protect our customers through discovering and sharing security vulnerabilities under Coordinated Vulnerability Disclosure. Today, we are excited to recognize this year’s 100 Most Valuable Researchers…

Top Technology Sector Breaches and Threats

Discover the top 5 cyber threats targeting tech companies, learn from major data breaches, and explore how OffSec’s cybersecurity training can equip you to defend against evolving attacks. Safeguard your organization’s future. The post Top Technology Sector Breaches and Threats…

Stop Using AI for Medical Diagnosis: Experts

AI (artificial intelligence) has become an important tool in many spheres of life such as education, jobs, and the field of medical research as well. However, there have been concerns about AI providing medical advice to individual queries of patients…

Sitting Ducks DNS Attack Hijack 35,000 Domains

  Cybersecurity researchers have uncovered a significant threat affecting the internet’s Domain Name System (DNS) infrastructure, known as the “Sitting Ducks” attack. This sophisticated method allows cybercriminals to hijack domains without needing access to the owner’s account at the DNS…

What if a cyber attack takes place on a human body

In recent times, we’ve witnessed cyberattacks targeting government agencies, corporate networks, mobile systems, and software supply chains. However, the conversation on tech platforms like Reddit is now shifting from material concerns to the human body itself. Some cybersecurity experts are…

The Prevalence of DarkComet in Dynamic DNS

Threat Intelligence Report Date: August 6, 2024 Prepared by: David Brunsdon, Threat Intelligence – Security Engineer, HYAS Dynamic DNS (DDNS) is a service that automatically updates the Domain Name System (DNS) in real-time to reflect changes in the IP addresses…

Indonesia Bans Search Engine DuckDuckGo

  Bad news for anyone concerned about their privacy who lives in or plans to visit Indonesia in the near future. As authorities ramp up their efforts to combat illegal online gambling and pornography, online privacy suffers as a result.…