Will Attackers Use AI to Attack Us?

Short answer to this question is Yes!  Bruce Schneier(a fellow at the Berkman center for Internet and Society at Harvard University) said this in his paper of April 2021: The Coming of AI Hackers “One, AI systems will be used to hack us. And two, AI systems will themselves become hackers: finding vulnerabilities in all … Read more

During War are we getting Attacked More?

I am talking about the Russian war against Ukraine which started on Feb 2022. Do you have 80 computes, more than a dozen? Then it should be obvious that they all need to be standardized and if standardized and wrong they will all get hacked. So paying attention to details in your environment pays dividends. … Read more

Calendar Invite Phish Attack Also

I bumped intothis site  (Dresec)   latest post is “Phishing with Google calendar”   His first sentence is a disclaimer as he does not want other people to use the information to send phishing calendar invites. To him (and me) it is only designed to be a test within our organizations. Here is the sample … Read more

Microsoft Vulnerabilities Cause Special Problems

Nothing to see here – in Microsoft Land – Portswigger has the story: Apparently there is a feature in Microsoft Office Online Server that causes a Remote Code Execution(RCE) vulnerability. After hackers use a SSRF (Server Side Request forgery) attack, they can attack the systems with RCE. When Microsoft was told about this vulnerability they … Read more