Attackers are adept at using new technologies to enhance their attacks. Earlier this afternoon, for example, I got call from “American Express” suggesting that I needed to “verify a transaction.” The caller used a robotic voice similar to the one used by American Express’ automated systems, and only obvious signals that it was a scamContinue reading “Attack Technique: AI Clones”
Tag Archives: security
Attack Techniques: Fake Captive Portals
When a device first joins a network, the upstream network hardware has full control over its traffic and can allow/block any packets sent from the device from reaching the Internet. Many public networks (typically Wi-Fi, but sometimes wired), located in hotels, coffee shops, mass transit, schools, etc. require that the user accept Terms of UseContinue reading “Attack Techniques: Fake Captive Portals”
Offboarding from Microsoft Defender for Endpoint
Microsoft Defender for Endpoint is a paid security product that extends Microsoft Defender Antivirus (included for free in Windows) with enterprise capabilities, including a full EDR product that reports security telemetry into a security operations center (SOC). Some recently-retired Microsoft employees have been surprised to discover that their personal PCs that had previously been usedContinue reading “Offboarding from Microsoft Defender for Endpoint”
Guidelines for URL Storage and Comparison
This document contains some thoughts about the storage and comparison of URLs, common operations crucial to the correct function of security software like Microsoft SmartScreen. Importantly, URLs are also displayed on security surfaces to enable the user to make a decision based on their contents. Eight years ago, I wrote the Guidelines for URL Display.Continue reading “Guidelines for URL Storage and Comparison”
Participatory Extensible Security
In the past, I’ve explained how security products combine sensors and throttles with threat intelligence to protect users and devices from attack. I’ve also outlined how the evolution of software, including increased complexity and a focus on privacy, have made it harder than ever for sensors and throttles to function effectively, leading to security andContinue reading “Participatory Extensible Security”