DecryptedTech Feed (3877)
Monday, 04 March 2024 16:17
Social Manipulation as a Service – When the Bots on Twitter get their Check marks
Written by Sean Kalinich
When I started DecryptedTech it was to counter all the crap marketing I saw from component makers. I wanted to prove people with a clean and simple way of understanding what a product could and could not do. I also…
Read 1177 times
Published in
Editorials
Monday, 26 February 2024 13:05
To Release or not to Release a PoC or OST That is the Question
Written by Sean Kalinich
There is (and always has been) a debate about the ethics and impact of the release of Proof-of-Concept Exploit for an identified vulnerability and Open-Source Tools related to red-teaming. The debate, well really it has devolved into an argument, is…
Read 641 times
Published in
Security Talk
Thursday, 22 February 2024 12:20
There was an Important Lesson Learned in the LockBit Takedown and it was Not About Threat Groups
Written by Sean Kalinich
In what could be called a fantastic move, global law enforcement agencies attacked and took down LockBit’s infrastructure. The day of the event was filled with much celebration on X (Twitter) LinkedIn, Facebook and elsewhere. The memes flowed freely and…
Read 581 times
Published in
Security Talk
Tuesday, 12 September 2023 17:05
NetSPI’s Offensive Security Offering Leverages Subject Matter Experts to Enhance Pen Testing
Written by Sean Kalinich
Black Hat 2023 Las Vegas. The term offensive security has always been an interesting one for me. On the surface is brings to mind reaching out and touching the bad guys. However, due to many laws that is not really…
Read 1837 times
Published in
Security Talk
Tuesday, 12 September 2023 14:56
Black Kite Looks to Offer a Better View of Risk in a Rapidly Changing Threat Landscape
Written by Sean Kalinich
Black Hat 2023 – Las Vegas. Risk is an interesting subject and has many different meanings to many different people. For the most part Risk breaks down into a few categories, depending on who you are talking to cyber risk,…
Read 1328 times
Published in
Security Talk
Thursday, 07 September 2023 14:40
Microsoft Finally Reveals how they Believe a Consumer Signing Key was Stollen
Written by Sean Kalinich
In May of 2023 a few sensitive accounts reported to Microsoft that their environments appeared to be compromised. Due to the nature of these accounts, Microsoft dove in and discovered that an expired Consumer Microsoft Account Singing Key had been…
Read 1769 times
Published in
Security Talk
Wednesday, 30 August 2023 16:09
Mandiant Releases a Detailed Look at the Campaign Targeting Barracuda Email Security Gateways, I Take a Look at What this all Might Mean
Written by Sean Kalinich
The recent attack that leveraged a 0-Day vulnerability to compromise a number of Barracuda Email Security Gateway appliances (physical and virtual, but not cloud) was a very sophisticated one. Even in the beginning when news of this first broke it…
Read 1536 times
Published in
Security Talk
Wednesday, 30 August 2023 13:29
Threat Groups Return to Targeting Developers in Recent Software Supply Chain Attacks
Written by Sean Kalinich
There is a topic of conversation that really needs to be talked about in the open. It is the danger of developer systems (personal and company owned) being targets of threat groups. It is a fact; it is not going…
Read 1545 times
Published in
Security Talk
Tuesday, 29 August 2023 19:12
Leaked Data from Duolingo incident Shows US is most Impacted
Written by Sean Kalinich
Duolingo, is a language learning site (not to be confused with an LLM) and has a very large base of users. The site is a good target for attackers that might want to take advantage of that user base. This…
Read 1991 times
Published in
Security Talk
Tuesday, 29 August 2023 18:26
We talk about the Ransomware Threat Landscape with SecureWorks at Black Hat 2023
Written by Sean Kalinich
Black Hat 2023 – Las Vegas, NV – One of my personal focuses is understanding the “Why” behind changes in the threat landscape. In simple terms understanding the Why of something gives you a good understanding of potential pivots and…
Read 1555 times
Published in
Security Talk
Monday, 28 August 2023 15:39
Now Patched Flaw Leverages Abandoned Reply URL found in Entra ID allows for Privilege Escalation
Written by Sean Kalinich
Microsoft has not been having the greatest of months. First it was identified that a stollen MSA signing key was used by a Nation State to access personal and low-side US government tenants (Low-Side it the unclassified side of Government…
Read 2168 times
Published in
Security Talk
Monday, 28 August 2023 12:53
Qrypt Looking to Attack the Inefficiencies in Quantum Encryption to make Quantum Secure Communication a Reality Today
Written by Sean Kalinich
Black Hat 2023, Las Vegas – At Black Hat one of my favorite things to do is see what the latest buzzword(s)/phrases are. One of my favorites from this year was “code to cloud” while others focused on the big…
Read 1537 times
Published in
Security Talk
Wednesday, 23 August 2023 16:10
ZeroFox Talks about the Value of Proper Attack Surface Management in Security
Written by Sean Kalinich
Black Hat 2023 Las Vegas – One of the areas I wanted to focus on this year while at both Black Hat and Def Con was to get an understanding of the threat landscape from both an industry and attacker…
Read 1268 times
Published in
Security Talk
Monday, 21 August 2023 14:02
Another Day Another Active Exploit in a Enterprise Tool as Ivanti warns of Exploited MobileIron 0-Day
Written by Sean Kalinich
It used to be a common phrase that the only certain things are Death and Taxes. These days it seems the list has been extended to Death, Taxes, and 0-days in enterprise tools sets. We have seen a number of…
Read 2414 times
Published in
Security Talk
Friday, 18 August 2023 17:36
Qwiet AI Looks to Bring a Smooth and Clean Sound to Development Security
Written by Sean Kalinich
Black Hat 2023 – Las Vegas. Sitting in one of my favorite bars in the Mandalay Bay Shoppes, 1923 Prohibition Bar, I had an opportunity to sit down and talk with Stuart McClure. For those that do not know, I…
Read 1032 times
Published in
Security Talk
Wednesday, 16 August 2023 14:38
Hacker Summer Camp 2023 Recap and My Thoughts
Written by Sean Kalinich
Las Vegas – So Black Hat 2023 and Def Con 31 have come and gone, and while the exhaustion that comes from this epic combined event might not be completely gone, I am ready to give my thoughts on the…
Read 1306 times
Published in
Security Talk