I hacked my friend’s website after a SIM swap attack

Here’s how easily your phone number could be stolen, why a successful SIM swap scam is only the beginning of your problems, and how you can avoid becoming a victim of the attack. Just how easy is it to conduct a SIM swap attack and what can the attacker do once they have taken control of your … More I hacked my friend’s website after a SIM swap attack

Know your enemy: MITRE Engenuity’s ATT&CK® Evaluations show the need for balanced approach to EDR use

In spite of MITRE Engenuity’s clear guidance regarding the ATT&CK® Evaluation methodology and interpretation of the results – specifically, the part that says the “evaluations are not a competitive analysis” and that “there are no scores or winners” – a handful of participating vendors have already released boastful marketing materials claiming that they beat their competition. While the motivations … More Know your enemy: MITRE Engenuity’s ATT&CK® Evaluations show the need for balanced approach to EDR use

Colonial Pipeline attack: Hacking the physical world

The attack is a reminder of growing cyberthreats to critical infrastructure while also showing why providers of essential services are ripe targets for cybercriminals. While detractors have argued that threats against physical infrastructure are overstated and largely theoretical, the growing list of organizations that have been successfully attacked suggests otherwise. And now the media is full of … More Colonial Pipeline attack: Hacking the physical world

European police bust major online investment fraud ring

The operation was carried out against an organized group that used online trading platforms to swindle victims out of US$36 million. Europol and several national law enforcement agencies have teamed up to take down an investment fraud and money laundering ring that caused losses of approximately €30 million (US$36 million) to hundreds of victims, according … More European police bust major online investment fraud ring

1 million risky apps rejected or removed from Apple’s App Store in 2020

Apple also claims to have foiled US$1.5 billion worth of potentially fraudulent transactions. Apple says that it thwarted more than US$1.5 billion in potentially fraudulent transactions and prevented almost a million vulnerable and otherwise risky apps from making their way into the App Store in 2020, according to a new report highlighting the company’s efforts to protect … More 1 million risky apps rejected or removed from Apple’s App Store in 2020