OPSEC Failures Behind a WebDAV Phishing Operation
Executive summary An MDR alert recently led our team to an exposed server that was doing more than hosting payloads. It was functioning as a fully operational malware delivery lab….
-
-
How to Hack Wi-Fi: Build a Software-Based Wi-Fi Jammer with Airgeddon :: Null Byte
Airgeddon is a multi-Bash network auditor capable of Wi-Fi jamming. This capability lets you target and disconnect devices from a wireless network, all without joining it. It runs on Kali,…
-
Monitoring from the user’s perspective
For years, organizations have relied on Application Performance Monitoring (APM) as the backbone of their observability strategy. The idea was simple: collect as many logs, metrics, and traces as possible,…
-
Cato CTRL™ Threat Brief: AsyncAPI Supply Chain Attack Delivers Miasma Malware Through Trusted npm Packages
Executive Summary On July 14, 2026, attackers compromised release processes connected to the AsyncAPI open- source project and published malicious versions of four widely used npm packages with a combined…
-
MACSec – Media Access Control Security
UPDATE on 11 Jul 2019: I wrote a fresh article describing how to implement MACSec on Cisco devices in the simplest way possible. I think that one is maybe what…
-
How to migrate feature flags without breaking production
Feature flag migrations have a reputation problem. Ask anybody who’s been through one before and you’ll hear the stories, usually from someone still a little frustrated about a bad cutover,…
-
Weekly Threat Bulletin – February 25th, 2026
Malware: AMOS, Atomic macOS Stealer, Atomic Stealer, BadIIS, Broomstick, ClawdBot Agent, CleanUp, CleanUpLoader, ConnectWise Control, ConnectWise ScreenConnect, GhostChat, GORBLE, Lumma, LummaC2, Lumma Stealer, OSX.AtomicStealer, OSX.AtomStealer, OysterLoader, POWERSTAR, Redline, Redline Loader,…
-
The High-Performance DBA: Total Recall, Part 1: SQL Server Memory Best Practices
Memory problems rarely announce themselves clearly. Instead, they show up as long-running queries, random slowdowns, heavy I/O, and vague “SQL Server is slow” style tickets with very little detail. That’s exactly…
-
How to Phish for Social Media & Other Account Passwords with BlackEye :: Null Byte
Social media accounts are a favorite target for hackers, and the most effective tactics for attacking accounts on websites like Facebook, Instagram, and Twitter are often based on phishing. These…
-
APM vs Observability: Observing beyond APM
APM vs Observability: Observing beyond APM In my previous post I made a bold, sweeping statement that APM is not – in the most specific sense – a subset of…
