Cybersecurity
-
Claude Code Proxy Detection: Separating Facts from Speculation
Claude Code versions 2.1.193 through 2.1.196 used Unicode steganography to encode China proxy detection signals…
-
How Ransomware Encrypts Your Files: A Technical Deep Dive
Ransomware uses a hybrid AES-256 + RSA-4096 encryption scheme that’s mathematically unbreakable without the attacker’s…
-
ClickFix on macOS: How Hackers Trick You Into Infecting Your Own Mac
ClickFix is the social engineering technique that bypasses Gatekeeper entirely by tricking macOS users into…
-
LOLBAS: How Hackers Use Windows’ Own Tools Against You
Attackers don’t always bring their own tools. certutil, mshta, regsvr32, wmic — Microsoft-signed binaries already…
-
Dissecting a Phishing Email: What the Headers Actually Tell You
The From field in a phishing email is trivially spoofed. The real story is in…
-
North Korea’s Secret Army: How DPRK IT Workers Infiltrated 300+ US Companies
North Korean government operatives are posing as remote IT workers inside Western companies, funnelling salaries…
-
Windows Event Log IDs Every Blue Teamer Should Know
There are hundreds of Windows Event IDs but you really only need about 30 of…
-
Google Dorks: How Hackers Use Search Engines to Find Vulnerable Websites
Before an attacker writes a single line of exploit code, they’ve already mapped your attack…
-
Unveiling the Snake Infostealer: How It Spreads Through Facebook Messenger
In early 2024, researchers at Cybereason uncovered a new threat targeting Facebook users — a…
-
Server Message Block (SMB) 101: The Protocol That Keeps Getting Abused
SMB — Server Message Block — is one of those protocols that most Windows users…
About Author
Subhash Thapa
Security Analyst (SOC, AI, MDR & IR) | CEH | CCSP | CCIO | CSFPC
Latest Posts
Weekly threat intel, straight to your inbox
Free. No noise. Unsubscribe anytime.