Security

CREST interviewed David Cannings (Director, PwC UK) about what he finds most interesting about working in incident response, the main …

Today I released a new tool named rtfsig. rtfsig is a simple Python utility that helps create signatures for malicious RTF documents. The tool automatically generates YARA rules and makes suggestions for VirusTotal’s vtgrep based off potentially distinctive parts of RTF documents.

This presentation was given at 44CON 2014. It provides an introduction to automated extraction of useful indicators of compromise …

This whitepaper looks at ransomware and the impact, evolution and defensive strategies that can be employed by organisations.

While the …

Ticketweb (a UK arm of Ticketmaster) have confirmed that someone was able to send emails to subscribers fraudulently. Their initial response was covered on the Naked Security blog. A second email was sent out this evening:

This afternoon I received an email with the spammy subject Action Required : Update Your PDF Application. I almost ignored it until I noticed that the link inside pointed to a domain owned by Ticketmaster.

Today I forgot the password for a site I use only occasionally. This is rare, as I have a number of password schemes that I use to create a password unique to each site.

So I thought I was being a good internet citizen when I received the following email a week ago: Dear User; Please update to our new server click here to begin