Your Keyboard Is Leaking Into Your Video Calls
Two studies recover what you type from Zoom, Teams and Meet audio with over 90 percent accuracy. Who can listen, what leaks, and what to change today.
Threat Intelligence
Threat Intelligence
Threat Intelligence
Stolen GitHub Tokens: The Workflow That Prints Your Secrets
Gheist and GhostAction push a workflow with stolen GitHub tokens and walk out with your Actions secrets. How it works, how to hunt it, and what to rotate.
Threat Intelligence
PHP2Shell: You Patched PHP. Can You Prove It?
PHP2Shell was exploited before the patch shipped. Why managed cloud hides your real PHP patch level, how to check it, and which secrets to rotate after.
Threat Intelligence
Storm-3168: Hijacked Service Principals Hit Azure Storage
Storm-3168 (JADEPUFFER) used two Azure service principals to target 100+ storage accounts in about 18 hours. What happened, what held, and a checklist.
Threat Intelligence
EvilTokens: AI Device Code Phishing That Bypassed MFA
EvilTokens, an AI-assisted device code phishing service, hit 12,000+ Microsoft 365 inboxes. How it bypassed MFA and the Conditional Access policy that stops it.
Threat Intelligence
Why Ransomware Waits for Friday Night
In 88% of ransomware cases encryption ran outside business hours. Attackers beat your rota, not your tooling. Five controls that hold while nobody is watching.
Threat Intelligence
Malicious Inbox Rules: 6 Signs of a Compromised Mailbox
Malicious inbox rules are how attackers hide after MFA is bypassed. Here are the 6 auto-forwarding patterns that signal a compromised Microsoft 365 mailbox.
Threat Intelligence
Token Theft: Why MFA Isn't Stopping the Modern Attacker
Attackers are bypassing MFA by stealing session cookies instead of passwords. Here's how AiTM phishing works and what actually stops it.
Threat Intelligence
Living Off the Land (LOLBins): When Attackers Use Your Tools
LOLBins let attackers use legitimate system tools for malicious purposes. Learn what they are, how they work, and how to detect them.
Threat Intelligence
Supply Chain Attacks: When Trusted Software Betrays You
Supply chain attacks exploit the software you already trust. Learn how SolarWinds, Log4j, and others happened, and how to defend against them.
Threat Intelligence
Lateral Movement: How Attackers Navigate Your Network
After the initial breach, lateral movement is how attackers reach your crown jewels. Learn the techniques they use and how to stop them.
Threat Intelligence
AI in Cybersecurity: Defender, Weapon, or Both?
AI is reshaping cybersecurity from both sides. Here's how attackers are using it against you and how defenders are fighting back.
Page 1 of 2