Security Tips

Net Sweep: Salt Typhoon Hits Congress, CISA Adds Critical HPE Vuln

The Cybersecurity Talent Shortage Is Bullshit

HN Vibe Check: "Who's Given Up on Getting Hired?"

RondoDox: Nine Months of React2Shell in the Wild

Salt Typhoon Goes to Washington

The Scattered Spider Trilogy: Win, Lose, and Give It Away

Larry Ellison's Two-Month Head Start (For the Attackers)

Scattered Spider Meets Honeypot: When the Hunters Become the Hunted

Scattered Spider Goes to Space: The OAuth Arc Continues

DPRK Tradecraft Evolution: From Email to QR Code to Blockchain

When Google's AI Writes Your Receipts

All Hat, No Cattle? A Decade of Receipts

His Name Is Anusfragger: We Wrote a Song About It Before Zscaler Named It

Zscaler's "NodeCordRAT Discovery": We Published This Pattern 6 Weeks Ago

The ASML "1011" Claim: Noise, Signal, and the Attack Vectors That Actually Matter

Your $200K Security Tool Has a STIX Import Button. Here's the Free Feed It's Been Waiting For.

Your $200K Security Tool Has a STIX Import Button. Here's the Free Feed It's Been Waiting For.

72 Days: A Transparency Report on CVE-2022-24999

72 Days: A Transparency Report on CVE-2022-24999

Article 77 and the 48-Hour Coincidence