US Cyber Command and Microsoft Are Both Disrupting TrickBot

Earlier this month, we learned that someone is disrupting the TrickBot botnet network. Over the past 10 days, someone has been launching a series of coordinated attacks designed to disrupt Trickbot, an enormous collection of more than two million malware-infected Windows PCs that are constantly...

Metrics That Matter: Continuous Performance Optimization

To attract and retain customers, you must offer an exceptional digital experience. In an increasingly competitive business climate, organizations are fighting to maintain loyalty and keep users engaged online. The cost of switching is low, consumers are transient, and user expectations for how...

The Changing Face of Loyalty Programs Amid and Post-COVID-19

COVID-19 has undoubtedly prompted the Hospitality and Travel industry into a new era of customer loyalty. Currently, "shelter in place" or similar nonessential travel bans are instituted by many countries and companies across the world. Once travel restrictions are lifted, there will be a...

Addressing the Video Quality and Performance Measurement Gap with Quality of Performance (QoP) Metrics

Ubiquity of Digital Video Means Meeting Viewers' Quality Expectations Digital video viewership is on an aggressive growth course. Globally, consumers will spend 84 minutes a day watching online video in 2020, up 25% from 2018i, and digital video viewership will increase from 35% in 2019 to more...

DEF CON 28: ILS and TCAS Spoofing

This post is a companion to the DEF CON 28 video available here The purpose here is to give some practical demonstrations of two kinds of radio frequency spoofing attack against two different types of cockpit instruments that are found in virtually every single commercial aircraft flying today...

Adversarial use of current events as lures

By Nick Biasini. The goal of malicious activity is to compromise the system to install some unauthorized software. Increasingly that goal is tied to one thing: the user. Over the past several years, we as an industry improved exploit mitigation and the value of working exploits has increased...

Autoenum - Automatic Service Enumeration Script

Autoenum is a recon tool which performs automatic enumeration of services discovered. I built this to save some time during CTFs and pen testing environments i.e. HTB, VulnHub, OSCP and draws a bit from a number of existing tools including AutoRecon https://github.com/Tib3rius/AutoRecon, Auto-Rec...

Bridging the gaps between Red and Blue teaming

Red Team, Blue Team, Purple Team, Black Team… Rainbow team? What are all of these things and what do they all mean? Is this a new case of a new found buzzword bingo or do they have a place and a purpose? The coloured teams are something that is thrown around a lot and while some of them are bette...

Cynet Offers IR Specialists Grants up to $1500 for each IR Engagement

In the past, the autonomous breach protection company Cynet announced that it is making Cynet 360 threat detection and response platform available at no charge for IR incident response service providers and consultants. Today Cynet takes another step and announces a $500 grant for Incident...

Turning collaboration and customer engagement up with a strong identity approach

In these challenging times, it’s even more apparent that modern companies are managing a blended workforce that encompasses not only their full-time staff and customers but also their contractors, consultants, subsidiaries, suppliers, partners, and soon-to-be customers. Balancing friction-less...

March 2020 - Professional Services and the Media Industry

In today's ever-shifting market, we recognize that you need to be constantly adapting, and Akamai provides a way to enhance your customers' experiences through our unique expertise, helping you unlock the value of Akamai's products and services. Professional Services' primary mission is to drive...

Cybersecurity in the C-Suite & Boardroom

As the pace of digital transformation increases, an industry declaration has emerged, “Cybersecurity is a boardroom issue.” To create a culture of cybersecurity, executives need to be more engaged and present with their strategies...

CVE-2019-15126 aka Kr00k

An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors related to state transitions in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a...

Trolls-For-Hire Pave Way For Sophisticated Social Media Hacks

NEW ORLEANS – Researchers have observed the blossoming of a new type of social media nuisance they are calling Trolling-as-a-Service. They say these rabble-rousing efforts have emerged as a clever new way for hackers to launch coordinated and dangerous attacks via Facebook and Twitter. Speaking a...

Black Friday Stays Mobile

If you're anything like me, you have no interest in physically entering a store the day after Thanksgiving. I do, however, love to shop online in the comfort of my home. While many people start their holiday shopping on Black Friday, I go to my favorite online retailers a day or two early, add wh...

Lenovo Customer Engagement Service Elevation of Privilege Vulnerability

Lenovo Customer Engagement Service CCSDK is a suite of customer engagement service software from Lenovo, China. An elevation of privilege vulnerability exists in Lenovo Customer Engagement Service CCSDK. An attacker could exploit this vulnerability to elevate privileges...

CVE-2019-6184

A potential vulnerability in the discontinued Customer Engagement Service CCSDK software version 2.0.21.1 may allow local privilege escalation...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I'm speaking on "Securing a World of Physically Capable Computers" at the Indian Institute of Science in Bangalore, India on December 12, 2019. The list is maintained on this page...

Presentation Template: Build Your 2020 Security Plan

As the end of the year approaches, security decision makers are creating their 2020 plans and running them by management for approval. In most cases, this means requesting and making the case for the necessary resources that need to be allocated, while still providing value to the organization. T...

Quickly Extend Live Streams with VOD Clipping

Time is always of the essence to extend compelling video content such as sporting events and concerts and make the most of media rights windows. This is especially true for catch-up TV, highlight creation, time-shifting 24/7 simulcast streams, and social sharing. At Akamai, we are continually...