That App on Your Phone Might Be Your Organization's Biggest Vulnerability And Why No BYOD Policy Is the Riskiest Policy of All

Late last year I read about the Pixnapping vulnerability that exists on Android devices that can steal 2FA codes pixel by pixel without requiring screenshot permissions. It's an example of how an attack exploits GPU timing patterns that most security tools cannot detect.

The MOVEit Vulnerability, And Why Automating Server Deployment Makes Sense

In 2023 there was a major cybersecurity breach that affected a popular software by Progress, it was their Managed File Transfer Software software called MOVEit. Thousands of users were affected

AI's Bobby Tables Moment, Why Bad AI Implementations Cause Disasters

Disasters in the implementation of new technologies sometimes come from rushing the implementation of technology and not from the technology itself.

An Email From My Bank Triggered an Alert, Am I Being Trained to Ignore Phishing Emails?

I received an email from my bank that triggered an alert in my email client. The alert read: "⚠️ Sender could not be verified". If I was not expecting the email I would have instinctively delete the email or I may have missed it because it would have been in my spam folder.

From Compromise to Containment, A Forensic Lesson

What I discovered in the logs, hidden text files with emails that were being spammed, and why prevention is always better than cure.

How I Found a Major Performance Bottleneck in 10,000+ Redirects

Sometimes the biggest performance wins come from doing less, not more. I learned this the hard way while working on a WordPress site that was crawling. Pages that should’ve loaded in under a second were loading between 8 and 11 seconds

The Day I Learned Cybersecurity Existed Before “Cybersecurity”

A department’s IT personnel quit the job, changed the administrator password and disabled all the user accounts on a Windows NT server, so no one in that department could login to do their work.

Where Satya Nadella’s Sees the Use of AI Agents Going and What It Means for Security and Privacy

Microsoft CEO Satya Nadella shares his vision for AI agents, highlighting their potential to streamline tasks and the importance of strong privacy and security measures to mitigate risks.

Glossary

A growing glossary of technical, cybersecurity, and computer terms explained in plain language. Click on hyperlinked terms in articles to access definitions and return seamlessly to your reading.

Social Engineering: Cybercriminals In Your Socials

Social engineering is a cybercriminal's toolkit to manipulate trust and exploit human vulnerabilities. Learn how to identify and protect yourself from phishing, malware, and other social engineering threats.

Like A Fishing Net, Email Phishing Catches Our Emails

Phishing emails mimic trusted senders to steal sensitive information. Understand the risks of phishing scams like identity theft and malware, and learn how to stay protected.

Locked Out: Lessons from Ransomware Attacks on Small Businesses and Schools

Ransomware disrupts operations and exposes sensitive data. Learn from recent attacks on small businesses and schools and discover strategies to prevent and recover.