seeCurrent
I have been seeing ads on social media platforms that promise passive income just by running an application on your phone or device and “sharing unused bandwidth”. A little extra $5 to $50 a month for doing nothing would never hurt right?
toKnow
Late last year I read about the Pixnapping vulnerability that exists on Android devices that can steal 2FA codes pixel by pixel without requiring screenshot permissions. It's an example of how an attack exploits GPU timing patterns that most security tools cannot detect.
Habits
In 2023 there was a major cybersecurity breach that affected a popular software by Progress, it was their Managed File Transfer Software software called MOVEit. Thousands of users were affected
CVE-2026-24061 is a wake-up call for anyone still running telnet. One command bypasses authentication completely. Almost 800,000 servers exposed globally. Exploitation started within 24 hours. If you have legacy systems that require telnet, here's how to keep access without the risk...
I have been seeing ads on social media platforms that promise passive income just by running an application on your phone or device and “sharing unused bandwidth”. A little extra $5 to $50 a month for doing nothing would never hurt right?
Late last year I read about the Pixnapping vulnerability that exists on Android devices that can steal 2FA codes pixel by pixel without requiring screenshot permissions. It's an example of how an attack exploits GPU timing patterns that most security tools cannot detect.
Social engineering is a cybercriminal's toolkit to manipulate trust and exploit human vulnerabilities. Learn how to identify and protect yourself from phishing, malware, and other social engineering threats.
Learn how to deploy DMARC on a $0 budget to enhance email security and deliverability. Follow this step-by-step guide to prevent domain spoofing and improve your email practices.
CSPM tools help businesses identify cloud misconfigurations, ensure compliance, and mitigate risks. Learn how to adopt CSPM for robust cloud security.
Join my free subscription today!
Disasters in the implementation of new technologies sometimes come from rushing the implementation of technology and not from the technology itself.
I received an email from my bank that triggered an alert in my email client. The alert read: "⚠️ Sender could not be verified". If I was not expecting the email I would have instinctively delete the email or I may have missed it because it would have been in my spam folder.
What I discovered in the logs, hidden text files with emails that were being spammed, and why prevention is always better than cure.
Sometimes the biggest performance wins come from doing less, not more. I learned this the hard way while working on a WordPress site that was crawling. Pages that should’ve loaded in under a second were loading between 8 and 11 seconds
A department’s IT personnel quit the job, changed the administrator password and disabled all the user accounts on a Windows NT server, so no one in that department could login to do their work.
Microsoft CEO Satya Nadella shares his vision for AI agents, highlighting their potential to streamline tasks and the importance of strong privacy and security measures to mitigate risks.
A growing glossary of technical, cybersecurity, and computer terms explained in plain language. Click on hyperlinked terms in articles to access definitions and return seamlessly to your reading.
Social engineering is a cybercriminal's toolkit to manipulate trust and exploit human vulnerabilities. Learn how to identify and protect yourself from phishing, malware, and other social engineering threats.
Phishing emails mimic trusted senders to steal sensitive information. Understand the risks of phishing scams like identity theft and malware, and learn how to stay protected.
Ransomware disrupts operations and exposes sensitive data. Learn from recent attacks on small businesses and schools and discover strategies to prevent and recover.
eSIMs bring convenience, but are vulnerable to SIM-swapping attacks. Learn how to secure your eSIM and protect against cyber threats like SMS-based 2FA vulnerabilities.
Learn how to deploy DMARC on a $0 budget to enhance email security and deliverability. Follow this step-by-step guide to prevent domain spoofing and improve your email practices.