The Detection Engineer's New Best Friend
Monday morning. Slack notification. "Critical CVE published. Exploit code public. Are we vulnerable?"
ITSEC Asia Research & Development
Editor in Chief
Check out the latest posts
I Started with 61.8%. I Ended Up at 1:3.
What survived when I designed a cybersecurity dashboard around the Golden Ratio and what didn’t.
Tackling XDR Alert Fatigue: How We Reframe The Problem to Navigate Thousands of Alerts per Day
Getting notifications is annoying, especially if it's not important and repeated over and over in a short period of time. Even we sometimes turn off our phone notifications because of that.
Fake AI Installer Campaign Delivering an In-Memory Stealer via the ClickFix Technique
The latest ClickFix campaign has evolved beyond fake CAPTCHA prompts, ClickFix is now disguised as installation instructions for coding assistant software.
Betting on Risk: An Analysis of Spyware Disguised as Online Gambling App
The rise of online gambling in Indonesia has created a loophole that is often exploited as a means of spreading spyware targeting mobile device users.
What I Learned From My First Brute-Force Attack Simulation
Ever wondered how hackers actually break into devices over public Wi-Fi? In this article, We walk through a real brute-force attack simulation, from scanning a network with Nmap to cracking login credentials using Hydra and SecLists.