Data Safety and Information Security

It’s not a “do not track” request, it’s a set of terms you demand from sites.

Trojan npm package downloaded 73 times modifies 'ethers' locally, enabling persistent reverse shell access

Stay cyber safe out there!

You’re not ready for these attacks—what you do now.

A discussion on operational security and privacy in modern life.

Some of our devices look like they’re straight out of hacker movies. For instance, how about a small board you plant behind an RFID reader, collecting access card data and then replaying it w…

The Tick is the next evolution in covert access control system implants for simulating adversary-in-the-middle attacks. - jkramarz/TheTick

Summary: Microsoft 365 requires connectivity to the Internet. The endpoints in this article should be reachable for customers using Microsoft 365 plans, including Government Community Cloud (GCC).

The world’s most widely used web app scanner. Free and open source. ZAP is a community project actively maintained by a dedicated international team, and a GitHub Top 1000 project.

If you use Multi-Factor Authentication, you'll be well used to scanning in QR codes which allow you to share a secret code with a website. These are known as Time-based One Time Passwords (TOTP). As I've moaned about before, TOTP has never been properly standardised. It's a mish-mash of half-finished proposals with no active development, no test suite, and no-one looking after it. Which is exactly what you want from a security specification, right?! So let's try to find some edge-cases and…

Some 320 billion spam emails are sent every day, and 94% of malware is delivered via this medium. What if I were to tell you a surprisingly simple one-click email trick could stop them?

Law enforcement recently took out a bot network capable of sending 1.5 billion spam emails a day. So what are the economic incentives—and costs—of spam?

New Year, New Digital You! New Years are an opportunity for committing to resolutions, starting new habits, discarding what no…

Something that you generally don’t expect as a North-America-based enthusiast, is to listen in on Russian military communications during their war in Ukraine via WebSDR, or that these communi…

Everyone's security plans and situations will always be different, which is why we often say that security and privacy are a state of mind, not a purchase. But the first step is always taking a look

There are a few vehicles on the road that are targeted often by car thieves, whether that’s because they have valuable parts, the OEM security is easily bypassed, or even because it’s a…

Is that good?

Nonprofit trust and safety support for volunteer social web content moderators

Denylist of bad bits

Barrion automates vulnerability detection, helping tech teams secure web apps with comprehensive security scans, real-time alerts, and actionable insights.

It's a dangerous world, learn to protect and educate yourself.

The smart home zombies are coming.

Eighty percent of breaches stem from broken identity security systems. Learn how frameworks like IPSIE can help fix this.