Episode 39: Credential Hygiene

In 2020, our research report on account takeover (ATO) highlighted the risk of using credentials in an unsafe manner, which ...

You’d have to have been living under a rock to have avoided the excitement surrounding Non-Fungible-Tokens (NFTs) in the last ...

Here, we review account takeover from the perspective of the cybercriminal: why and how do cybercriminals perform ATO?

In May 2017, an amalgamation of over 1 billion credentials was uploaded to the Have I Been Pwned database. One ...

Adam Cook, Philip Doherty, and Viktoria Austin host this week’s ShadowTalk update around an unsecured Elasticsearch database exposing account information of aboutt 7.5 million Adobe Creative Cloud...

Honeypots can be useful tools for gathering information on current attack techniques. Conversely, they can be an overwhelming source of ...

we detected over 550 typosquats for the 34 candidate- and election-related domains we gathered from open-source research. Not every single one was something interesting; most of the time the typosquat

On Russian- and English-language cybercriminal forums on the clear and dark web, vendors are increasingly asking interested buyers to place money in a forum escrow service before they will provide fur

We’re back in London this week! Viktoria chats with Adam Cook, Philip Doherty, and Josh Poole on this week’s top stories. - APT35 Targets Email of US political figures & prominent Iranians -...

Last week, I wrote about how cybercriminals are looking to trade corporate emails in their pursuit of conducting Business Email ...