Technical Resources

Video Tutorials

Save $250 on your CompTIA SecAI+ Boot Camp — use code SAVE250 at checkout (must start befor April 30, 2026): https://www.infosecinstitute.com/courses/comptia-secai-plus-boot-camp/?utm_source=youtube&utm_medium=webinar&utm_campaign=secaiwebinar AI is reshaping cybersecurity careers — but what AI skills do employers actually want? CompTIA SecAI+ has the answer. This new certification from CompTIA is their first focused entirely on AI security — validating your ability to secure AI systems, defend against AI-driven threats and use AI to strengthen security operations. Join James Stanger, Chief Technology Evangelist at CompTIA, for an inside look at SecAI+. James met with organizations worldwide about AI security — and he'll share what he learned and how it shaped this new certification. You’ll learn: 0:00 Welcome + CompTIA SecAI+ overview 1:35 Boot camp offer + SAVE250 code 2:22 Why AI changes cybersecurity work 3:00 Tech shifts analogy (why this matters) 7:35 “AI Security Trifecta” explained 12:23 Pentest story: Packet capture + ChatGPT 16:30 SecAI+ exam domains breakdown 21:10 Agents risk: “Excessive agency” 23:00 MCP server example + AI system security 24:00 Domain 3: AI for security ops 25:22 Pentesting workflow + where AI helps 27:04 AI for security awareness + training 30:15 Hallucinations + human oversight (“adult in room”) 33:00 Pattern detection analogy (threat actors / “grizzly”) 37:00 AI governance + compliance (GRC) 43:11 Connect with James + resources 44:18 Infosec Boot Camp + training access 45:45 Who SecAI+ is for (prereqs) 49:45 Common gaps: Prompts + compliance risk 52:31 Exam format: Questions, timing, scoring 54:30 CEUs + renewing other certs 56:41 Final advice + closing **About Infosec** Infosec Institute makes cybersecurity workforce readiness measurable. We help organizations build skills and verify performance across their entire workforce, providing leaders with clear visibility into who's ready to defend, where capability gaps exist and whether training investment is delivering results. By combining expert training with AI-powered verification, we give organizations confidence backed by data. 70% of the Fortune 500 have trusted Infosec for more than two decades. Learn more at infosecinstitute.com.
Meet SecAI+: CompTIA's first certification for the AI security era
Learn how security architects design enterprise-wide security frameworks and build resilient systems to defend against advanced cyber threats. About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
Cybersecurity Career: Security Architect (9 of 9 Careers)
Learn how professionals secure cloud platforms like Amazon Web Services and Microsoft Azure to protect data, infrastructure and applications in the cloud. About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
Cybersecurity Careers: Cloud Security Engineer (7 of 9 Careers)
Discover how security managers lead teams, manage security programs and align cybersecurity strategy with business objectives. About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
Cybersecurity Careers: Security Manager (8 of 9 Careers)
Explore how security engineers design, implement and maintain secure systems to protect organizations from evolving cyber threats. About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
Cybersecurity Careers: Security Engineer (6 of 9 Careers)
Learn how risk analysts assess threats, evaluate business impact and help organizations manage cybersecurity risk strategically. About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
Cybersecurity Careers: Information Risk Analyst (5 of 9 Careers)
Discover how penetration testers simulate real-world attacks to uncover vulnerabilities and strengthen an organization’s security posture. About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
Cybersecurity Careers: Penetration Tester (4 of 9 Careers)
Learn how cybersecurity professionals protect operational technology (OT) environments like manufacturing systems, utilities and industrial control systems from cyber attacks. About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
Cybersecurity Careers: OT Security Practitioner (3 of 9 Careers)
About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
Cybersecurity Careers: Digital Forensics Analyst (2 of 9 Careers)
Subscribe
In this video, we discuss and demonstrate the Onion AI Assistant, a popular feature in Security Onion Pro that we introduced in version 2.4.190. The Onion AI Assistant can gather context, dig through logs, generate timelines, and otherwise act as a tremendous aid to your analysts during an investigation. If you'd like more information about Security Onion Pro, check out our website at https://securityonion.com/pro If you have questions or problems with your Security Onion deployment, please start a new discussion at https://securityonion.net/discuss If you have words of encouragement for the Security Onion team, please feel free to comment below.
Security Onion Pro: Onion AI Assistant
In this session, Matt Gracie introduces Security Onion 2.4.190. If you have words of encouragement for the Security Onion team, please comment below. Don't forget to like and subscribe! If you have questions or problems, please start a new discussion at https://securityonion.net/discuss. For more training, please see https://securityonion.com/training. For enterprise features, check out Security Onion Pro at https://securityonion.com/pro. For hardware appliances, please see https://securityonion.com/hardware.
Security Onion Essentials 2026 – Introduction
In this session, Matt Gracie downloads and checks the ISO in preparation for installing Security Onion 2.4.190. If you have words of encouragement for the Security Onion team, please comment below. Don't forget to like and subscribe! If you have questions or problems, please start a new discussion at https://securityonion.net/discuss. For more training, please see https://securityonion.com/training. For enterprise features, check out Security Onion Pro at https://securityonion.com/pro. For hardware appliances, please see https://securityonion.com/hardware.
Security Onion Essentials 2026 – Installation Part One
In this session, Matt Gracie completes the installation and setup of Security Onion 2.4.190. If you have words of encouragement for the Security Onion team, please comment below. Don't forget to like and subscribe! If you have questions or problems, please start a new discussion at https://securityonion.net/discuss. For more training, please see https://securityonion.com/training. For enterprise features, check out Security Onion Pro at https://securityonion.com/pro. For hardware appliances, please see https://securityonion.com/hardware.
Security Onion Essentials 2026 – Installation Part Two
In this session, Matt Gracie demonstrates how to update Security Onion to the latest version in either a traditional or airgap deployment. If you have words of encouragement for the Security Onion team, please comment below. Don't forget to like and subscribe! If you have questions or problems, please start a new discussion at https://securityonion.net/discuss. For more training, please see https://securityonion.com/training. For enterprise features, check out Security Onion Pro at https://securityonion.com/pro. For hardware appliances, please see https://securityonion.com/hardware.
Security Onion Essentials 2026 – Updating Security Onion
In this session, Matt Gracie introduces the Alerts and Cases tools in Security Onion, demonstrating how to pivot between datasets to investigate an alert and track the investigation in our case management tool. If you have words of encouragement for the Security Onion team, please comment below. Don't forget to like and subscribe! If you have questions or problems, please start a new discussion at https://securityonion.net/discuss. For more training, please see https://securityonion.com/training. For enterprise features, check out Security Onion Pro at https://securityonion.com/pro. For hardware appliances, please see https://securityonion.com/hardware.
Security Onion Essentials 2026 – Alert Triage and Case Creation
In this session, Matt Gracie introduces the analyst tools built into Security Onion 2.4.190, including Alerts, Hunt, Dashboards, and more! If you have words of encouragement for the Security Onion team, please comment below. Don't forget to like and subscribe! If you have questions or problems, please start a new discussion at https://securityonion.net/discuss. For more training, please see https://securityonion.com/training. For enterprise features, check out Security Onion Pro at https://securityonion.com/pro. For hardware appliances, please see https://securityonion.com/hardware.
Security Onion Essentials 2026 – Introduction to Analyst Tools
In this session, Matt Gracie demonstrates ad-hoc threat hunting in Security Onion using the Hunt and Dashboards tools. If you have words of encouragement for the Security Onion team, please comment below. Don't forget to like and subscribe! If you have questions or problems, please start a new discussion at https://securityonion.net/discuss. For more training, please see https://securityonion.com/training. For enterprise features, check out Security Onion Pro at https://securityonion.com/pro. For hardware appliances, please see https://securityonion.com/hardware.
Security Onion Essentials 2026 – Threat Hunting
In this session, Matt Gracie demonstrates detection engineering in Security Onion by using the Detections tool to write, deploy, and test a new Sigma rule. If you have words of encouragement for the Security Onion team, please comment below. Don't forget to like and subscribe! If you have questions or problems, please start a new discussion at https://securityonion.net/discuss. For more training, please see https://securityonion.com/training. For enterprise features, check out Security Onion Pro at https://securityonion.com/pro. For hardware appliances, please see https://securityonion.com/hardware.
Security Onion Essentials 2026 – Detection Engineering
Subscribe
The EU imposes sanctions after cyberattacks. DHS boosts surveillance spending. AI firms recruit weapons-risk experts. Stryker disruption, no patient impact. LeakNet leans on ClickFix. Sears chatbot data spills. A Chinese security firm leaks a private key. Tech giants team up on scams. Teens sue xAI over alleged AI-generated abuse. On today’s Threat Vector segment, David Moulton and guest Erica L. Shoemate, founder of The EN Strategy Group, explore how AI is fundamentally reshaping the security landscape. Cyber crooks cause a complimentary curbside convenience.  Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing (https://thecyberwire.com/newsletters/daily-briefing) , and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn (https://www.linkedin.com/company/10454826/admin/feed/posts/) . Threat Vector What if the choices we make about AI security today determine who holds power tomorrow? On this Threat Vector segment, David Moulton (https://www.linkedin.com/in/davidmoulton/) and guest Erica L. Shoemate (https://www.linkedin.com/in/ericals/) , founder of The EN Strategy Group, explore how AI is fundamentally reshaping the security landscape, from compressed decision-making timelines and asymmetric threat capabilities to the erosion of trust that creates strategic vulnerabilities. You can listen to David and Erica's full conversation here (https://www.thecyberwire.com/podcasts/threat-vector/108/notes) and catch new episodes of Threat Vector (https://www.thecyberwire.com/podcasts/threat-vector) from Palo Alto Networks each Thursday on your favorite podcast app. Selected Reading EU Sanctions Iranian and Chinese Firms for Cyberattacks Against European Networks (https://www.technadu.com/eu-sanctions-iranian-and-chinese-firms-for-cyberattacks-against-european-networks/623603/) (TechNadu) DHS-built surveillance apparatus to surge in year ahead, documents show (https://fedscoop.com/dhs-surveillance-technology-ai-funding-document-spyware/?ref=metacurity.com) (FedScoop) AI firm Anthropic seeks weapons expert to stop users from 'misuse' (https://www.bbc.com/news/articles/c74721xyd1wo) (BBC) Stryker attack wiped tens of thousands of devices, no malware needed (https://www.bleepingcomputer.com/news/security/stryker-attack-wiped-tens-of-thousands-of-devices-no-malware-needed/) (Bleeping Computer) LeakNet ransomware uses ClickFix and Deno runtime for stealthy attacks (https://www.bleepingcomputer.com/news/security/leaknet-ransomware-uses-clickfix-and-deno-runtime-for-stealthy-attacks/) (Bleeping Computer) Sears Exposed AI Chatbot Phone Calls and Text Chats to Anyone on the Web (https://www.wired.com/story/sears-exposed-ai-chatbot-phone-calls-and-text-chats-to-anyone-on-the-web/) (WIRED) China's biggest cybersecurity firm accidentally leaked an SSL key in a public installer (https://www.neowin.net/amp/chinas-biggest-cybersecurity-firm-accidentally-leaked-an-ssl-key-in-a-public-installer/) (Neowin) Google has signed the Industry Accord Against Online Scams and Fraud. (https://blog.google/innovation-and-ai/technology/safety-security/google-industry-accord-combat-scams-fraud/) (Google) Teenage girls sue Musk’s xAI, accusing Grok tool of creating child sexual abuse material (https://www.theguardian.com/technology/2026/mar/16/lawsuit-elon-musk-ai-grok-child-sexual-abuse) (The Guardian) Free parking in Russia after Distributed Denial-of-Service attack knocks city's parking system offline (https://www.bitdefender.com/en-us/blog/hotforsecurity/free-parking-russia-distributed-denial-of-service-attack-parking-system) (Bitdefender) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey (https://www.surveymonkey.com/r/NCFFCZJ) . Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com (http://sponsor.thecyberwire.com/) . The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Europe clamps down on global hackers.
Please enjoy this encore of Word Notes. A system that translates text-based URLs to their underlying numerical IP addresses. CyberWire Glossary link: ⁠https://thecyberwire.com/glossary/domain-name-system-dns⁠ Audio reference link: HistoryHeard. “⁠History Heard: Paul Mockapetris.⁠ (https://www.youtube.com/watch?v=VLahF1zwAog) ” YouTube, YouTube, 5 Apr. 2009.
Domain Naming System (DNS) (noun) [Word Notes]
Please enjoy this encore of Word Notes. A system that translates text-based URLs to their underlying numerical IP addresses. CyberWire Glossary link: ⁠https://thecyberwire.com/glossary/domain-name-system-dns⁠ Audio reference link: HistoryHeard. “⁠History Heard: Paul Mockapetris.⁠ (https://www.youtube.com/watch?v=VLahF1zwAog) ” YouTube, YouTube, 5 Apr. 2009. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Domain Naming System (DNS) (noun)
In this mid-season episode, Kim takes a step back to reflect on the journey so far—revisiting key conversations, standout moments, and recurring themes that have shaped the season. During the episode, Kim sits down with N2K's own Ethan Cook to connect the dots across episodes, uncovering deeper patterns and takeaways. Whether you're catching up or tuning in weekly, this episode offers a thoughtful recap and fresh perspective on where we've been—and what's still to come. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Mid season reflection with Kim Jones. [CISOP]
Drone strikes hit a key chip supply chain. China-linked hackers target Southeast Asian militaries. Attackers race ahead with AI. ShinyHunters claim a massive Telus breach. Microsoft issues a hotpatch. Malware turns up on Steam. Fileless attacks grow. Airline miles become cybercrime currency. Monday business breakdown. Tim Starks from CyberScoop unpacks the Stryker attack and the nebulous nature of Iranian cyber activity. AI playmates puzzle preschoolers.  Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing (https://thecyberwire.com/newsletters/daily-briefing) , and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn (https://www.linkedin.com/company/10454826/admin/feed/posts/) . CyberWire Guest Our guest is Tim Starks (https://www.linkedin.com/in/tstarks/) from CyberScoop (https://cyberscoop.com/) discussing how the Stryker attack highlights the nebulous nature of Iranian cyber activity amid joint U.S.-Israel conflict. You can read more in Tim’s article here (https://cyberscoop.com/stryker-cyberattack-iranian-hackers-handala/) .  Selected Reading Drone strikes halt a third of the world's helium supply, threatening chip production (https://www.techspot.com/news/111683-critical-semiconductor-gas-lost-third-global-supply-drone.html) (TechSpot) China-Linked Hackers Hit Asian Militaries in Patient Espionage Operation (https://www.securityweek.com/china-linked-hackers-hit-asian-militaries-in-patient-espionage-operation/) (SecurityWeek) Attackers are exploiting AI faster than defenders can keep up, new report warns (https://cyberscoop.com/booz-allen-report-ai-helps-attackers-move-faster-than-current-defenses/) (CyberScoop) Telus Digital confirms breach after hacker claims 1 petabyte data theft (https://www.bleepingcomputer.com/news/security/telus-digital-confirms-breach-after-hacker-claims-1-petabyte-data-theft/) (Bleeping Computer) Microsoft releases Windows 11 OOB hotpatch to fix RRAS RCE flaw (https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-11-oob-hotpatch-to-fix-rras-rce-flaw/) (Bleeping Computer) The FBI is investigating malware hidden inside games hosted on Steam (https://techcrunch.com/2026/03/13/valve-steam-malware-games-fbi/) (TechCrunch) New XWorm 7.1 and Remcos RAT Attacks Abuse Windows Tools to Evade Detection (https://hackread.com/xworm-7-1-remcos-rat-windows-tools-evade-detection/) (Hackread) Airline miles become underground currency in loyalty fraud schemes | brief (https://www.scworld.com/brief/airline-miles-become-underground-currency-in-loyalty-fraud-schemes) (SC Media) Kevin Mandia-founded Armadin launches with $190 million. (https://thecyberwire.com/newsletters/business-briefing/8/10) (N2K Pro Business Briefing) AI toys for young children need tighter rules, researchers warn (https://www.bbc.co.uk/news/articles/clyg4wx6nxgo) (BBC News) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey (https://www.surveymonkey.com/r/NCFFCZJ) . Thank you for helping us continue to improve our show.   Want to hear your company in the show? N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com (http://sponsor.thecyberwire.com/) . The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Watch out for cybercrime frequent flyers.
Please enjoy this encore of Career Notes. Christian Lees, CTO at Resecurity, shares his story and insight on coming into the cybersecurity world. He considers himself a late bloomer because he did not go to college until he was 23. He wasn’t sure of what he wanted to do, and a family friend gave him a computer and the rest was history, he says. He fell in love with computers and started working at different companies trying to get ahead. He says it's not always textbook, and sometimes you just need to cut your teeth on something to get where you're going. Throughout his journey, he was constantly questioning whether he made the right decision, and in the end he says you have to be willing to "define friction points in it, you may join security field, not knowing what you're gonna do, but by being that curious person and breaking things and putting it back together, you'll find the right way and just never stop being curious." We thank Christian for sharing his story. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Christian Lees: It's not always textbook. [CTO] [Career Notes]
On this Deep Space episode, host Maria Varmazis catches up with friend Tim Gagnon (https://www.linkedin.com/in/tim-gagnon-a7281312/) aka KSCartist and Susie Morris (https://www.linkedin.com/in/susan-morris-71801767/) , Tim's long-time creative collaborator at A-B Emblem (https://abemblem.com/) while at SpaceCom (https://www.linkedin.com/company/spacecomexpo) . Everyone loves a patch in aerospace, stick em on board or on your flight jacket, hand them out at meetups or conferences, buy em at your favorite space store, who doesn't love a space patch. And Tim and Susie talked to me about what goes into this unique and very beloved art form.  Remember to leave us a 5-star rating and review in your favorite podcast app. Be sure to follow T-Minus on ⁠⁠⁠LinkedIn⁠⁠⁠ (https://www.linkedin.com/company/n2k-space/) and ⁠⁠⁠Instagram⁠⁠⁠ (https://www.instagram.com/n2kspace/) . Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here’s our ⁠⁠⁠media kit⁠⁠⁠ (https://docsend.com/view/5ncb2vvpz2ntg95q) . Contact us at ⁠⁠⁠space@n2k.com⁠⁠⁠ (mailto:space@n2k.com) to request more info. Want to join us for an interview? Please send your pitch to ⁠⁠⁠space-editor@n2k.com⁠⁠⁠ (mailto:space-editor@n2k.com) and include your name, affiliation, and topic proposal. T-Minus is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Everyone loves a space patch.
Please enjoy this encore of Career Notes. Christian Lees, CTO at Resecurity, shares his story and insight on coming into the cybersecurity world. He considers himself a late bloomer because he did not go to college until he was 23. He wasn’t sure of what he wanted to do, and a family friend gave him a computer and the rest was history, he says. He fell in love with computers and started working at different companies trying to get ahead. He says it's not always textbook, and sometimes you just need to cut your teeth on something to get where you're going. Throughout his journey, he was constantly questioning whether he made the right decision, and in the end he says you have to be willing to "define friction points in it, you may join security field, not knowing what you're gonna do, but by being that curious person and breaking things and putting it back together, you'll find the right way and just never stop being curious." We thank Christian for sharing his story. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Christian Lees: It's not always textbook. [CTO]
This week, we are joined by Or Eshed (https://www.linkedin.com/in/or-eshed/) , Co-Founder and CEO from LayerX Security (https://www.linkedin.com/company/layerx-security/) , discussing their work on "How We Discovered A Campaign of 16 Malicious Extensions Built to Steal ChatGPT Accounts." Researchers uncovered a coordinated campaign of 16 malicious browser extensions posing as ChatGPT productivity tools while secretly stealing user accounts. The extensions intercept ChatGPT session authentication tokens and send them to attacker-controlled servers, allowing threat actors to impersonate users and access their conversations, files, and connected services like Google Drive or Slack. The findings highlight how AI-focused browser extensions are creating a new attack surface, emphasizing the need for organizations to closely monitor and restrict third-party AI tools. The research can be found here: • ⁠⁠⁠ (https://www.infoblox.com/blog/threat-intelligence/parked-domains-become-weapons-with-direct-search-advertising/) How We Discovered A Campaign of 16 Malicious Extensions Built to Steal ChatGPT Accounts (https://layerxsecurity.com/blog/how-we-discovered-a-campaign-of-16-malicious-extensions-chatgpt/) Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Your AI sidekick might be a spy.
Subscribe
Computer password inventor Fernando Corbato dies at 93, Serious Zoom security flaw could let websites hijack Mac cameras, Hackers' Operating System Kali Linux Released for Raspberry Pi 4, Over 1,300 Android Apps Caught Collecting Data Even If You Deny Permissions, and 25 Million Android Phones Infected With Malware That ‘Hides In WhatsApp’.
Cyber Security News Ending July 14 2019 – Android users be afraid, be very afraid. ransomware
Beware! Playing Untrusted Videos On VLC Player Could Hack Your Computer, U.S. Government Announces Critical Warning For Microsoft Windows Users, Florida city to pay $600K ransom to hacker who seized computer systems weeks ago, Confirmed: NASA Has Been Hacked and US 'launched cyber-attack on Iran weapons systems'.
Cyber Security News Ending June 23 2019 – Cyber War?
Microsoft says mandatory password changing is “ancient and obsolete”, Apple Just Patched a Modem Bug That's Been in Macs Since 1999, Unpatched Bug Let Attackers Bypass Windows Lock Screen On RDP Sessions, Google confirms that advanced backdoor came preinstalled on Android devices, and Quest Diagnostics data breach: Nearly 12 million patients had personal info exposed.
Cyber Security News ending June 8 2019
A laptop filled with six of the world’s most dangerous viruses is on sale for more than $1 million, Why you should never use phone charging stations at airports, Google Stored G Suite Users' Passwords in Plain-Text for 14 Years, Snapchat Employees Reportedly Spied on Private Snaps, and In Baltimore and Beyond, a Stolen N.S.A. Tool Wreaks Havoc.
Memorial Day Cyber Security News 2019
The Trade Secret: Firms That Promised High-Tech Ransomware Solutions Almost Always Just Pay the Hackers, Huawei has secret ‘backdoor’ into major European telecoms firm, spy agency reportedly says, Hackers breach Stack Overflow Q&A platform and compromise users' data, WhatsApp security breach may have targeted human rights groups, and What you need to know if you e-transfer money.
Cyber Security News Ending May 18 2019
How to stop Google from tracking web history, Baltimore City Hall Computer Network Infected With Ransomware Virus, Officials Say, Types of backup and five backup mistakes to avoid, Binance Security Breach Update, and Israel Neutralizes Cyber Attack by Blowing Up A Building With Hackers.
Cyber Security News Ending May 12 2019 Mothers Day Edition
Microsoft knows password-expiration policies are useless, Docker Hub Suffers a DataBreach, Asks Users to Reset Password, Over 23 million breached accounts used ‘123456’ as password, A 'Blockchain Bandit' Is Guessing Private Keys and Scoring Millions, and Fort Bragg Army cut power to thousands as cyber-attack test.
Cyber Security News ending April 27 2019
Experts: Breach at IT Outsourcing Giant Wipro, Don’t Acquire a Company Until You Evaluate Its Data Security, Microsoft reveals breachaffecting webmail users, Mueller Report Obama’s NSA Director Told U.S. CyberSecurity Team to “Stand Down” in Face of Russian Hackers, and CIA Offers Proof Huawei Has Been Funded By China's Military And Intelligence.
Cyber Security News ending April 21 2019
Mysterious safety-tampering malware infects a second critical infrastructure site, WikiLeaks Founder Julian Assange Arrested After Ecuador Withdraws Asylum, Samsung’s Galaxy S10 fingerprint sensor fooled by 3D printed fingerprint, Security Flaws in WPA3 Protocol Let Attackers Hack WiFi Password, and Secret Service agent inserted malware-infected USB drive into laptop.
Weekly Cyber Security News ending April 13 – From the Cyber Chronicle Cyber Security News Podcast
Subscribe