How We Added WebAuthn to a Browser-Based RDP Client
The Pitch TL;DR: We built the first RDP client outside of Windows to support WebAuthn redirection, beating Microsoft’s own macOS, […]
Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer
A previously undocumented threat actor known as Armored Likho has been attributed to cyber attacks targeting government agencies and the
What would be your worst nightmare for Windows? Leaked Microsoft video from 2024 shows what many would regard with pure horror: a Copilot OS
It seems that Microsoft explored the idea of building Windows fully around AI in the past, based on a leaked
Inside an EvilTokens affiliate panel targeting Microsoft 365
Cisco Talos identified a fully-featured phishing-as-a-service (PhaaS) operator panel, branded “ARToken,” that shares infrastructure, API contracts, and operational patterns with
Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks – Krebs on Security
Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructure used by
Trunk Tools' stack cut document review from 60 days to 10 by ditching general-purpose models
Most verticals aren’t clean, well-oiled SaaS databases; the reality is ugly documents, proprietary schemas, implicit workflows, and long‑running tasks that
Adding some Automation to the favicon.ico method of Host Recon
I’m in the throes of target host recon for another pentest, and thought I’d share some workflow / automation stuff.
Intezer helps SOC teams automate custom security tasks
Intezer has announced Custom Agents, a new capability that lets security teams build their own AI agents directly inside the
Sony Already Invested $34 Million To Repurpose Its EU PlayStation Disc Factory
The Austrian facility will be used to make optical microlenses. VGV MEDIA/Shutterstock Sony has been preparing for the
Security
Armored Likho’s new weapon: BusySnake Stealer
Introduction During our routine threat monitoring, we uncovered a new phishing campaign tied to a previously unknown APT group that