Articles, write-ups, and musings concerning the world of cybersecurity and technology.
Ransomware isn't just after file servers anymore. Why attackers target VMware ESXi, what gets encrypted, how the encryption works, and two real campaigns that hit hundreds or thousands of hosts.
Switches stopped sniffing from being trivial, but they didn't end it. How passive and active sniffing work, how ARP spoofing and MAC flooding get around a switch, and what actually stops them.
Twitter 2020 and Target 2013 both started with a person, not a zero-day: a phone call from fake IT, and a phished HVAC vendor. What the two breaches show about why social engineering works.
