Latest Posts
- Regarding the Kaseya Attack, Some AnswersAnother spectacular raid by Russian ransom where gangs prompted a series of interesting questions by Catalin. I thought it would be worthwhile to address them. Here is the thread with the questions. I have inlined them below with my responses. Some questions in regards to the Kaseya incident: -How did REvil learn of the VSA […]
- Not all exploits are “grey in the dark”Capabilities are not interchangeable, nor are they all equal. This seems obvious, and yet not everyone agrees (apparently). In this article about the six 0day exploits patched on June 7 2021, we have the following line: Kevin Breen, director of cyber threat research at Immersive Labs, said elevation of privilege flaws are just as valuable […]
- ransomware, real resolutionsSome quick thoughts on ransomware as a tractable problem. Create a superfund to hire ransomware developers and support staff. Pay them to do something productive, or at least non criminal. The only people with power over ransomware gangs are the protectors providing the safe havens they reside in. If you cannot make North Korea, China, […]