From The Blog
-
NetSPI’s Offensive Security Offering Leverages Subject Matter Experts to Enhance Pen Testing
Written by Sean KalinichBlack Hat 2023 Las Vegas. The term offensive security has always been an interesting one for me. On the surface is brings to mind reaching…Written on Tuesday, 12 September 2023 17:05 in Security Talk Read 683 times Read more...
-
Black Kite Looks to Offer a Better View of Risk in a Rapidly Changing Threat Landscape
Written by Sean KalinichBlack Hat 2023 – Las Vegas. Risk is an interesting subject and has many different meanings to many different people. For the most part Risk…Written on Tuesday, 12 September 2023 14:56 in Security Talk Read 319 times Read more...
-
Microsoft Finally Reveals how they Believe a Consumer Signing Key was Stollen
Written by Sean KalinichIn May of 2023 a few sensitive accounts reported to Microsoft that their environments appeared to be compromised. Due to the nature of these accounts,…Written on Thursday, 07 September 2023 14:40 in Security Talk Read 659 times Read more...
-
Mandiant Releases a Detailed Look at the Campaign Targeting Barracuda Email Security Gateways, I Take a Look at What this all Might Mean
Written by Sean KalinichThe recent attack that leveraged a 0-Day vulnerability to compromise a number of Barracuda Email Security Gateway appliances (physical and virtual, but not cloud) was…Written on Wednesday, 30 August 2023 16:09 in Security Talk Read 486 times Read more...
-
Threat Groups Return to Targeting Developers in Recent Software Supply Chain Attacks
Written by Sean KalinichThere is a topic of conversation that really needs to be talked about in the open. It is the danger of developer systems (personal and…Written on Wednesday, 30 August 2023 13:29 in Security Talk Read 620 times Read more...
-
Leaked Data from Duolingo incident Shows US is most Impacted
Written by Sean KalinichDuolingo, is a language learning site (not to be confused with an LLM) and has a very large base of users. The site is a…Written on Tuesday, 29 August 2023 19:12 in Security Talk Read 1035 times Read more...
-
We talk about the Ransomware Threat Landscape with SecureWorks at Black Hat 2023
Written by Sean KalinichBlack Hat 2023 – Las Vegas, NV – One of my personal focuses is understanding the “Why” behind changes in the threat landscape. In simple…Written on Tuesday, 29 August 2023 18:26 in Security Talk Read 543 times Read more...
-
Now Patched Flaw Leverages Abandoned Reply URL found in Entra ID allows for Privilege Escalation
Written by Sean KalinichMicrosoft has not been having the greatest of months. First it was identified that a stollen MSA signing key was used by a Nation State…Written on Monday, 28 August 2023 15:39 in Security Talk Read 1266 times Read more...
-
Qrypt Looking to Attack the Inefficiencies in Quantum Encryption to make Quantum Secure Communication a Reality Today
Written by Sean KalinichBlack Hat 2023, Las Vegas – At Black Hat one of my favorite things to do is see what the latest buzzword(s)/phrases are. One of…Written on Monday, 28 August 2023 12:53 in Security Talk Read 768 times Read more...
Recent Comments
- Sean, this is a fantastic review of a beautiful game. I do agree with you… Written by Jacob 2023-05-19 14:17:50 Jedi Survivor – The Quick, Dirty, and Limited Spoilers Review
- Great post. Very interesting read but is the reality we are currently facing. Written by JP 2023-05-03 02:33:53 The Dangers of AI; I Think I Have Seen this Movie Before
- I was wondering if you have tested the microphone audio frequency for the Asus HS-1000W? Written by Maciej 2020-12-18 14:09:33 Asus HS-1000W wireless headset impresses us in the lab
- Thanks for review. I appreciate hearing from a real pro as opposed to the blogger… Written by Keith 2019-06-18 04:22:36 The Red Hydrogen One, Possibly One of the Most “misunderstood” Phones Out
- Have yet to see the real impact but in the consumer segment, ryzen series are… Written by sushant 2018-12-23 10:12:12 AMD’s 11-year journey to relevance gets an epic finish.
Most Read
- Microsoft Fail - Start Button Back in Windows 8.1 But No Start Menu Written on Thursday, 30 May 2013 15:33 in News Be the first to comment! Read 115413 times Read more...
- We take a look at the NETGEAR ProSafe WNDAP360 Dual-Band Wireless Access Point Written on Saturday, 07 April 2012 00:17 in Pro Storage and Networking Be the first to comment! Read 85149 times Read more...
- Synology DS1512+ Five-Bay NAS Performance Review Written on Tuesday, 12 June 2012 20:31 in Pro Storage and Networking Be the first to comment! Read 79471 times Read more...
- Gigabyte G1.Sniper M3 Design And Feature Review Written on Sunday, 19 August 2012 22:35 in Enthusiast Motherboards Be the first to comment! Read 78445 times Read more...
- The Asus P8Z77-M Pro Brings Exceptional Performance and Value to the Lab Written on Monday, 23 April 2012 13:02 in Consumer Motherboards Be the first to comment! Read 68295 times Read more...
Displaying items by tag: Fraud
Discord Discloses Breach from 3rd Party Support Account
The popular socialization platform, Discord, is alerting users to a data breach that occurred due to the compromise of a support agent account. The breach appears to be limited in scope to the ticket queue that the third-party agent was responsible for. The ticket queue contained email addresses, attachments and all messages that might have been exchanged during ticket resolution with this agent.
High Fraudulent Transaction Rates Combined with Volatility Led to Steam Dropping Crypto as a Payment Form in 2017
As the Steam Deck is starting to get to people that have ordered them questions about Steam’s place in Web3 and recent moves around NFTs come up in conversation. Steam, Valve’s distribution arm has been seen as a one of the more cutting-edge services, with founder Gabe Newell once having a following like Elon Musk (at least in the gaming world). However, despite this perception they have never really been completely onboard with Crypto and the trappings of Web3.
Possible Breach At Hilton Highlights PoS Risk
Just when you thought it was safe to use your credit card we are hearing rumblings of a breach at Hilton. According to Brian Kerbs and some of our own sources a payment card breach has taken place and the only unique feature about this was that all of the affected cards were used at a Hilton Property. This is not just the regular Hilton Logo properties, but also includes Embassy Suites, Doubletree, Hampton Inn and Suites, Waldorf Astoria Hates and Resorts, and potentially others. The exact timing of the breach is unclear at the moment, but could go as far back as November 2014.
Mt. Gox collapses under investigation in Japan
Taro Aso, the Japanese finance minister, said that the local government is still investigating the case of Mt.Gox collapse, the best known Bitcoin exchange office, which was located in Tokyo. As word of possible criminal activity behind this case, it is possible to be a responsible and serious legal consequences.
Bitcoin used for money laundering of more than 1 billion dollars
Charlie Shrem, vice president of Bitcoin Foundation, which is among other things responsible for lobbying in favor of digital currencies, was arrested earlier this week in New York. With him was arrested Robert Faiella, a senior official of the same organization.
76 million fake accounts on Facebook, or are there?
![]() |
Although many would say there are far more fake accounts, Facebook has admitted that in the past year about 76 million "fake" profiles have been opened on their service that has just over a billion users. These fall under the double accounts, wrongly classified and unwanted accounts and those where users deliberately identify themselves with a false name. In total, therefore, according to Facebook the fake accounts amount to 7% of the total number of users.
HP counts losses because of Autonomy
![]() |
Hewlett Packard in its fiscal fourth quarter financial report included the costs in the amount of 8.8 billion dollars due to serious accounting irregularities in its subsidiary Autonomy. With this HP admitted that they bought Autonomy based on dodgy data and false accounting reports in which the data was hidden. Overall, HP in its fourth quarter had a loss of 6.9 billion dollars, while revenues were $30 billion, which is 7% lower than a year before. Throughout fiscal 2012 HP has reported a loss of $12.7 billion on revenue of $ 120.4 billion.
The Entertainment and Software Industry Opens A New Campaign Against File and Link Sharing
![]() |
Although we have covered many aspects of the ridiculous charges and case against Megaupload and its founder we have only talked about how it could happen in minor detail. However, bolstered on the back of the success at using these tactics the entertainment industry has shifted its focus and is pushing these out across the globe to bring down as many sites as they can. It does not appear to matter if the sites in question are actually guilty of copyright infringement or even if they host any content. All that matters is that they want to prove conspiracy and when possible fraud and/or money laundering.
Proview Files a Strategic Lawsuit Against Apple in California
Someone over at Proview in China has been doing some thinking and is now fighting Apple in a very interesting manner. Unless you have been living under a rock you are probably aware that Pro View and Apple are in a trademark battle over the iPad name in China. The back story is a little long, but if you are interested in the whole thing you can read it here, here, and here. For the rest of you it is important to know that Apple used a special group to hide their identity from Proview during the negotiations for the iPad trademark. The company’s name was IP Application Development Limited.
Anonymous Analytics Prepares to Fight Fraud and Corruption
When you think about social activist groups you often think of Green Peace, or maybe the Suzan Colman foundation, perhaps your mind may hit on groups like the Shriners. I do doubt that you think of Anonymous. When Anonymous comes to mind many people (too many perhaps) think “Hacker!” and all that this negative title has to offer. Anonymous does have only themselves to blame on this one though as through the years many of their members have perpetrated some very unsavory acts. The one that really comes to my mind was the releasing of personal information (including home addresses) of police officers. This act (which was, from what I hear, very unpopular even inside Anonymous) put many innocent people in danger; spouses and children to be exact.
So we are sure that the question that must be mulling around in the heads of some of the more clear thinking members of the ever changing group is; “How to change the way Anonymous is viewed by the world?” They can no longer just hack companies and gain the same level of response they once did. Defacing a web site is becoming as common and mundane as graffiti painted on the wall of an abandoned building. Sure people look at it, read about it, and then file the incident away in the “just another hacker” section of their minds. Anonymous needs something to work with that still has mystique but also hits these companies where it counts.
To accomplish this Anonymous has started their own analysis group. This group is reportedly staffed by Anonymous members whose regular jobs are in the Legal, Financial and Analytical world already. Together this new offshoot will use cough “unconventional” methods to identify and expose fraudulent activity and (as they put it) bad corporate stewardship. This type of “attack” is something that the rest of the world can understand (if not get behind). After all, while the methods differ drastically then results are identical to what the judicial branches of our respective governments claim they are working towards.
Still it is very hard to get a good feel for the motives and psychology of a collective like Anonymous. Usually to find this you look at the movies and ideology of the leader(s). With Anonymous there is no stated leader and there is no group in control. It truly is a collective. Anyone can make a suggestion and those that agree jump in. This is Anonymous’ strength and weakness. As we have seen the smaller splinter groups that have cohesion are quickly infiltrated and run to ground by law enforcement. So while not having a leader helps prevent this, it also makes keeping focus nearly impossible. This is what is responsible for the many projects that have simply died out, or never even started on the date in question. This makes me wonder how long the analytics group will stay focused and if this effort will be enough to maintain momentum, which as we have said is one of the downsides to being a true collective.
Personally, I really hope that this project can meet their stated ends and uncover some of the corruption and fraud that does exist out there. I hope that it is successful enough that some of the more subversive plans and elements will turn their efforts to this instead of releasing information that has the potential to harm innocent people; something that Anonymous claims to be very much against.
Discuss this in our Forum