↓ Skip to main content

Byte

Short reads with a comment, plus a source or two for context.

May 2023

25

Python Software Foundation (PSF) subpoenaed for PyPI user data Byte

9

QR code fraud via fake parking tickets and a milk tea survey Byte

9

Building a Red Team Infrastructure in 2023 Byte

9

QakBot dominates the first edition of delivr.to's top 10 payloads Byte

9

Google opens a free deps.dev API for package metadata Byte

9

CMEPW/BypassAV, a mind map of AV and EDR evasion techniques Byte

February 2023

22

Building a spy Chrome extension under Manifest v3 Byte

22

Open Software Supply Chain Attack Reference (OSC&R) Byte

17

Dota 2 with V8 from 2018 Byte

17

How phishing adapted after Office blocked macros by default Byte

17

VSCode as C2 framework Byte

17

Cypher injection in Neo4j, from LOAD CSV to AWS credentials Byte

17

Insights into Phishing as a Service Byte

17

How ransomware encrypts files, per ATT&CK T1486 Byte

17

Trail of Bits audit of cURL finds two security bugs Byte

17

Stealthy C2 via Failed Request Event Buffering (FREB) Byte

17

A fake finger could make real footage look AI-generated Byte

January 2023

20

DensePose from WiFi estimates human poses without cameras Byte

20

Microsoft's VALL-E clones a voice from three seconds of audio Byte

20

Palant picks apart LastPass's breach statement and iteration counts Byte

20

The near crash of Air Transat flight 236 in 2001 Byte

20

CISA Updates Best Practices for MITRE ATT&CK Mapping Byte

December 2022

23

Comprehensive Rust, Google's four-day Rust course from Android Byte

23

Using OpenAI to Generate Phishing Campaigns Byte

23

Data exfiltration using Excel Byte