A Global Perspective of the SideWinder APT
AT&T Alien Labs has conducted an investigation on the adversary group publicly known as SideWinder in order to historically document…
2021. Initializing… OK.
In recent years I’ve been too caught up with the idea that everything I do here needs to be interesting…
Malware using new Ezuri memory loader
This blog was written by Ofer Caspi and Fernando Martinez of AT&T Alien Labs Multiple threat actors have recently started…
How I found an open SSH access on an Israeli government’s gov.il DNS server
I have much criticism about the Israeli government information security status and activity. Lots of PR and marketing for being…
New page added – Findings and honors
I have added a new page to the site, called “Findings and honors“.This page list all the Information Security vulnerabilities…
Security Analysis of SMS as a Second Factor of Authentication
Despite their popularity and ease of use, SMS-based authentication tokens are arguably one of the least secure forms of two-factor…
Go Static or Go Home: In the end, dynamic systems are simply less secure.
Most current and historic problems in computer and network security boil down to a single observation: letting other people control…
Certificate Transparency: Public, verifiable, append-only logs
On August 28, 2011, a mis-issued wildcard HTTPS certificate for google.com was used to conduct a man-in-the-middle attack against multiple…
Why Is It Taking So Long to Secure Internet Routing?: Routing security incidents can still slip past deployed security defenses.
BGP (Border Gateway Protocol) is the glue that sticks the Internet together, enabling data communications between large networks operated by…