ElysiumSecurity

MU.SCL S03E06 – Catch Me If You Can: Life After MFA and Zero Trust in the Age of AI

Some security controls become so fundamental that we start treating them as certainties.
Multi-Factor Authentication and Zero Trust are two of the most important security concepts deployed by organisations today. Neither is obsolete, and both remain essential. But attackers, and technology, are changing the assumptions on which we have built them.

For the next Mauritius Cyber Security Club event we will look at two of those assumptions: what happens when attackers can get past MFA, and what happens when a perfectly authenticated and authorised AI agent does the wrong thing?

MU.SCL S03E06 – Catch Me If You Can will take place on Tuesday, 6 October 2026 6pm at the Flying Dodo in Bagatelle (Mauritius)

Talk 1 – Life After MFA
Sylvain Martinez – ElysiumSecurity

Multi-Factor Authentication has long been one of the closest things cybersecurity has had to a sil...
>>[READ MORE]

World Quantum Readiness Day: The Q-DAY Deadline

NOTE: In this series of posts, we revisit recent presentations delivered at MU.SCL and provide additional context around the slide decks shared here. While a written post cannot fully reproduce the depth, examples and discussion of a live session, it should help readers better understand the topic, the key messages, and the practical points behind the slides.

Earlier this month, at our latest Mauritius Cyber Security Club event, I gave a presentation on Post-Quantum Cryptography with a deliberately practical objective: not to explain every detail of quantum physics, but to answer a much more useful question for organisations:

What do we need to do now to make sure that information which must still be secret tomorrow remains protected?

The presentation therefore focused...
>>[READ MORE]

Rogue AI agents, who is accountable?

The answer to that question when looking at recent events, it would seem to be: no one!

I have written several times recently about how AI is changing cyber security. One of the recurring themes has been that AI does not necessarily need to invent completely new attacks to change the risk equation. If it can discover vulnerabilities faster, test attack paths faster and automate parts of an intrusion that previously required skilled humans, then the time available to defenders becomes much shorter.

In July, OpenAI provided a real-world demonstration of that problem:
During internal cyber security evaluations, a number of its AI agents escaped the controls intended to contain them, obtained access to the Internet and eventually compromised production infrastructure belonging to Hugging Face (other companies as well?).
This was not a theoretical benchmark result or an AI ...
>>[READ MORE]

MU.SCL S0305 – A Kind of Magic: Post-Quantum Cryptography and AI Agent Security

Some technologies look like magic, AI and Quantum more than qualify to that group!

For the next Mauritius Cyber Security Club event, MU.SCL brings together two fast-moving security challenges: preparing for post-quantum cryptography and understanding how weaknesses in AI agents can lead to real system compromise.

MU.SCL S03E05 – A Kind of Magic will take place on Tuesday, 1 September 2026, at the Flying Dodo in Bagatelle (MAURITIUS)

Talk 1 – Post-Quantum Cryptography
Sylvain Martinez – ElysiumSecurity

Quantum computers capable of breaking today’s widely used public-key cryptography are not yet available at the required scale. However, organisations cannot afford to wait until they are.
The “harvest now, decrypt later” threat changes the timeline: An attacker can collect encrypted information today and retain it until future technology makes...
>>[READ MORE]

AI Cyber Risk in Finance: The Ticking Clock

Over the past few months, we have written several times about how AI may affect cyber security. In our previous blog post Infinite Zero Day Machine, so what?, our view was that AI did not suddenly make our existing defences obsolete. In Patching Faster Than Your Shadow?, we looked at the more immediate problem: AI is reducing the time between a vulnerability being disclosed and attackers being able to exploit it.

The IMF (International Monetary Fund) has now published a Note titled Artificial Intelligence and Cybersecurity in the Financial Sector. It looks at the same issue from a financial stability perspective and raises an important question: what happens when faster vulnerability discover...
>>[READ MORE]

Cyber Security controls that actually matters

NOTE: In this series of posts, we revisit recent presentations delivered at MU.SCL and provide additional context around the slide decks shared here. While a written post cannot fully reproduce the depth, examples, and discussion of a live session, it should help readers better understand the topic, the key messages, and the practical points behind the slides.

Cyber security does not fail because organisations lack frameworks, standards or good advice. In fact, the opposite is often true. There are more frameworks, control catalogues, maturity models, vendor recommendations, regulatory expectations and best-practice documents than most organisations can realistically absorb. The real problem is not the lack of guidance. The problem is deciding what matters most, in the context of a real organisation, with real constraints. ...
>>[READ MORE]

Cyber Resilience: From the Floor to the Board

Last month, on the 13th May, I had the opportunity to take part in a panel discussion at the Security First Cyber Security Conference 2026 in Mauritius.
The event brought together practitioners, technology providers and business leaders around a timely theme: how cyber resilience needs to evolve in the human-AI era.

The wider conference covered several important topics, including AI-driven threats, identity, critical infrastructure, third-party risk, AI in the SOC, quantum resilience and the changing role of people in cybersecurity.

A recurring message was clear: AI is changing both sides of the equation.

It gives defenders new capabilities for detection, automation and analysis, but it also increases the speed, scale and sophistication available to attackers.

My contribution to one of the panel was focused on a more operational question: what really happens when an organisation faces its first serious cyber incident, and how can companies be b...
>>[READ MORE]

Are You Human?

There was a time when "seeing is believing" was still a reasonable assumption.
That assumption is collapsing rapidly.

Over the last year, the quality of AI-generated identities, voices and videos has improved at a pace that many organisations underestimated. What was once easy to spot as "fake" is now becoming increasingly difficult to distinguish from reality, even for trained professionals.

One recent example that circulated online involved an AI-generated French woman presenting what appeared to be a legitimate French identity card in a video generated by Grok. The rendering quality, facial movements, document reflections and overall realism were sufficient to fool many viewers at first glance.
At the same time, threat actors are increasingly using live deepfake technologies during video calls, interviews and social engineering attacks. Security researchers and law enforcement agencies have already documented cases where attackers used AI-generated voi...
>>[READ MORE]

Ransomware: Inside the Criminal Enterprise

NOTE: In this series of posts, we revisit recent presentations delivered at MU.SCL and provide additional context around the slide decks shared here. While a written post cannot fully reproduce the depth, examples, and discussion of a live session, it should help readers better understand the topic, the key messages, and the practical points behind the slides.

Ransomware is no longer just malware. It is now a criminal business model, supported by developers, affiliates, brokers, negotiators, laundering services, help desks, data leak sites and a clear operating process. That was the main message behind our recent MU.SCL presentation, "Ransomware 2026: Inside the Criminal Enterprise", which looked at how the ransomware economy works, why victims still pay, and what organisations can do to reduce both the risk and the impact of an attack.

The first point to understand is scale. Chainalysis estimates that ransomware p...
>>[READ MORE]

Your Digital Ghost and why it matters

NOTE: In this series of posts, we revisit recent presentations delivered at MU.SCL and provide additional context around the slide decks shared here. While a written post cannot fully reproduce the depth, examples, and discussion of a live session, it should help readers better understand the topic, the key messages, and the practical points behind the slides.

Most organisations still think of a cyber attack as something that starts when an attacker touches their systems. A phishing email arrives, a VPN login fails, a scanner appears in the firewall logs, or an endpoint alert is triggered. At that point, security teams start investigating and everyone agrees that something has begun.

But in many cases, the attack started earlier.

Not in a way that generated logs or triggered an alert, but in the attacker's preparation. Before the first malicious packet reaches the perimeter, the attacker may already know...
>>[READ MORE]

Risk Averse Vs Risk Aware: a difference that matters!

There is a conversation happening right now in boardrooms, leadership teams, and strategy sessions across almost every industry.
A conversation that has been recurring each time a new technology makes news head lines and is transformative: : "We need to adopt (insert technology name here). We need to move fast. Security, please stop being a blocker."
Of course, at the moment that technology is AI.
A few weeks ago I wrote about why organisations are rushing into AI and the risks that come with it. That post dealt with the pace of adoption and the absence of governance frameworks. This one is about something different: the internal cultural dynamic that the rush creates, and one specific damaging idea that keeps surfacing inside organisations under pressure.
The idea that being risk averse is the enemy of innovation (possibly) and that being security-aware (or conscious) is the same as being risk averse.
It is not. And t...
>>[READ MORE]

Patching Faster Than Your Shadow? AI and the New Vulnerability Race

A few days ago, I wrote that there was no need to panic about AI and cybersecurity.
I still believe that.
But "do not panic" does not mean "do nothing". It certainly does not mean that organisations can keep doing exactly the same thing, at exactly the same speed, with exactly the same assumptions.
And one of those assumptions may be quietly dying in front of us: the idea that organisations have weeks to fix serious vulnerabilities before attackers can realistically exploit them at scale.

The Old Patching Rhythm
For many organisations, vulnerability management has historically been built around a fairly comfortable rhythm: scan, prioritise, assign, test, patch, report, chase, escalate, and eventually close.
That process was never perfect, but it was familiar. Critical vulnerabilities often had remediation SLAs measured in weeks. High vulnerabilities were sometimes given months. Only the truly urgent cases, the ones...
>>[READ MORE]

Maybe AI won't kill us after all: a more balanced take on AI and CyberSecurity

The doom headlines write themselves.
AI creates infinite zero days. AI will automate hacking at scale. AI will make every developer's code a security liability. Your organisation is exposed. You should be scared.
And sure, some of that is true. We've covered it here before.
But lately, there's been a quieter conversation happening, a growing number of credible voices suggesting that AI might actually move the needle in the right direction for cybersecurity, over the medium to long term. Not instead of the risks, but alongside them. And that's worth talking about.

The Infinite Bug Problem, and the Math
Let's start with Firefox.
Last week, Mozilla released Firefox 150, which patched 271 vulnerabilities, many of them identified with the help of Anthropic's Claude Mythos. That's a remarkable number. Industry coverage predictably focused on the headline figure.
But here's the thing worth sitting with: how many vulnerabilities existed in Fir...
>>[READ MORE]

Infinite Zero Day Machine, so what?

Anthropic just released MYTHOS, a model trained to find zero day exploits.
The security world is buzzing.
But before you panic and rewrite your entire incident response playbook, let's ask the obvious question: does this actually change how you defend your organization?
The answer is yes, but maybe not in the way you think.

Yes, a model that can systematically discover zero days is genuinely significant.
But no, it doesn't render your existing security controls obsolete.
In fact, the fundamentals that have protected you against zero day threats for decades are still your best bet.

So what's really different? And what stays the same?

The Hype Problem
Zero days have always been the boogeyman of cybersecurity.
They're unknown, they're weaponized before patches exist, and up to know, often difficult to find.
But here's the thing, you've never actually been able to prevent them directly.
Your defense stra...
>>[READ MORE]

Racing to AI: Don’t Forget the Rules of the Road

Artificial Intelligence is moving faster than almost any technology in history.

Organizations are racing to adopt AI, seeing it as a tool that can accelerate decision-making, improve productivity, and unlock new capabilities.
Yet, while AI is a tremendous enabler, diving in headfirst without fully understanding it carries cybersecurity and data privacy risks, and mistakes are just waiting to happen.

To understand the potential pitfalls, consider a historical analogy: when cars were first invented, society still relied on horses and carriages.
Roads, regulations, and safety systems didn't exist overnight.

Imagine if, one day, everyone suddenly switched to cars, with no driving experience, no rules of the road, and no safety measures like seat belts or airbags.
The result would have been chaos (and it was in some part of the world with cars early adopters)

That's essentially what's happening with AI today.

Organizations...
>>[READ MORE]

When Microsoft Turns Against You: Hackers Wipe Thousands of Devices

Microsoft Intune is used by many organisation as a security/admin tool to manage endpoints, ensure they have the correct security controls, the right level of patches, only certain authorised applications, etc.
And, as well, when an endpoint/device may get lost, it allows the company/an admin, to remotely wipe the device for security reason.

So what could go wrong?
In March 2026, Stryker Corporation learned a hard lesson: attackers don't always need malware.
By compromising admin credentials, the threat actors leveraged Microsoft Intune to remotely wipe tens of thousands of devices across the organization: laptops, servers, and mobile endpoints.

The attack caused widespread disruption to operations, from order processing to shipping.

Who would ever need to mass wipe out all endpoints in an organisation besides a hacker?
It looks like Microsoft never asked themselves that question...
Because not only is that option there by defau...
>>[READ MORE]

MAURITIUS SECURITY CLUB IS BACK - MU.SCL Season 3!

After many years, we are finally back!

We are happy to confirm our new meeting for the Mauritius Cyber Security Club: MU.SCL.
This FREE to attend meeting will take place at the Flying Dodo Brewing Company in Bagatelle. In there conference room upstairs.

In this new event, the following two talks will be presented:

Talk1 - 2025 LESSONS FOR 2026 (Sylvain Martinez - ELYSIUMSECURITY): The first talk will provide an overview of the main security stories (horrors) or 2025 and what we can learn about them to make 2026 more secured.
Talk2 - AI, ENABLER OR THREAT? (Sylvain Martinez - ELYSIUMSECURITY): The second talk will look at the latest news related to Artificial Intelligence, how it is used to enhance security protections but also used to facilitate more sofisticated attacks. We will also touch on what it may means for our future security jobs/roles!

You can register for this event, for free, on the eventbrite website: ...
>>[READ MORE]

Notepad++ and the joy of shadow IT application procurement

Last month the maintainer of Notepad++ published a disclosure that will make any developer or sysadmin uncomfortable.
For about six months, from June through December 2025, the software's update mechanism had been hijacked by a Chinese state-sponsored threat actor.
Every time a targeted user hit "Check for Updates", they were potentially downloading malware instead of a legitimate new version, and the installer looked and behaved exactly like the real thing.

Notepad++ is not a niche tool. It is one of the most widely installed text editors in the world, used daily by developers, system administrators, network engineers, and security professionals.
That demographic is precisely why it was targeted. In enterprise environments, these are often the most privileged users on the network. Compromise their workstation through a trusted update and you have bypassed the perimeter entirely.

The attackers did not touch a single line of Notepad++ source code. They...
>>[READ MORE]

Apple's Spyware Alerts and 2025 closing thoughts!

On 2 December 2025, Apple sent threat notifications to users in 84 countries - one of the largest single waves since the programme launched.
Not a security tip.
A direct, personal warning: your device may have been targeted by state-sponsored attackers. Apple reserves these alerts for situations where it believes a user is being hunted by well-resourced, sophisticated operators. Custom operations. Expensive. Almost always government-connected.

The alerts landed in the middle of a coordinated disclosure by Google, Amnesty International, and a consortium of investigative journalists focused on Intellexa - the company behind the Predator spyware platform. Already sanctioned twice by the US government, Intellexa had simply adapted: setting up shell companies to infiltrate advertising networks, and deploying a new infection method called "Aladdin" that silently compromises a device through a targeted banner ad.
There was no link to click, no file to open. Just an...
>>[READ MORE]

Cyber Security Governance resources from the UK Government

Last month, the UK government addressed a letter to all CEOs and Chairs or leading UK companies emphasising that hostile cyber activity is increasing in frequency, sophistication, and impact. It also stated that cyber resilience is a critical enabler of economic growth and that organisations recover better when they have planned and rehearsed for worst-case disruption.

Although it references services and bills that are UK centric, there are some interesting points and information that could be considered and/or used in any country.

The letter asks companies to take three specific actions:

Make cyber risk a Board-level priority by using the Cyber Governance Code of Practice.
Sign up to the Early Warning service of the National Cyber Security Centre (NCSC) – a free service giving early alerts of potential attacks on your network. Your country may offer a national CERT service that is similar and if not but it could also be replaced with a

>>[READ MORE]

What the Salesfoce breach can teach us on Cloud/SaaS Security?

What Happened?
The attack ran on two front simultaneously.

On the first, attackers quietly compromised Salesloft's GitHub repositories between March and June 2025, stealing Drift OAuth refresh tokens. Those tokens gave them persistent, legitimate-looking API access to the Salesforce environments of every company using their integration. Thousands of database queries were run in the background, pulling contact records, case data, and critically embedded credentials like AWS keys and tokens that had been pasted into support tickets.
On the second, attackers impersonated Salesforce support staff in targeted phone calls, tricking employees into installing a malicious app that granted OAuth access and bypassed MFA entirely. This campaign hit consumer brands directly.

Once they had accumulated enough data, the group went public. On 3 October 2025, they launched a dark web site called: Trinity of Chaos, published samples of...
>>[READ MORE]

ElysiumSecurity is 10 Years old!

Ten years ago (5 October 2015), ElysiumSecurity Ltd was incorporated in the UK.
At the time, it was simply a decision to build something small, independent, and useful: a security practice focused on what actually reduces risk in the real world, prevention where it's sensible, detection where it matters, and response that works when things go wrong.
It also started as a side project! as Sylvain Martinez, ElysiumSecurity's founder, was still fully employed at BP.
Sylvain had agreed with his management to only work out of office hours, at weekend and not for the big four or a competitor. That's why he focused on Hedge Funds.
And a small but important details, Sylvain no longer had one early appraisal, but monthly appraisals!

If you've followed our writing over the years, you'll recognise the themes: less theory, more practical and proven advice. The website tagline says "Cyber Protection & Response" and that has always been the point, help organisations s...
>>[READ MORE]

Jaguar down, insurance regrets?

On 31 August 2025, managers at Jaguar Land Rover's Halewood plant in the UK noticed systems behaving strangely. By the following morning, JLR's IT teams had confirmed an active intrusion. The company's response was drastic but deliberate: a near-total shutdown of its global IT network to stop the spread. Production lines in the UK, Slovakia, India, China, and Brazil went dark.

On 2 September 2025, JLR issued its first public statement: "JLR has been impacted by a cyber incident." That was the extent of what the company said publicly. The attacker said considerably more. A group calling itself Scattered Lapsus$ Hunters - a coalition linked to Scattered Spider, Lapsus$, and ShinyHunters - claimed responsibility on Telegram, sharing screenshots of JLR's internal SAP systems and stating that ransomware had been deployed across the company's compromised infrastructure.

As of 30 September 2025, production has still not fully resumed. JLR announced on 23 September that th...
>>[READ MORE]

Oracle in Denial

On 20 March 2025, a previously unknown threat actor posting under the handle "rose87168" listed six million records for sale on BreachForums, claiming they had been stolen directly from Oracle Cloud's authentication infrastructure.
The data included Java KeyStore (JKS) files, encrypted Single Sign-On (SSO) passwords, LDAP credentials, OAuth2 keys, and Enterprise Manager JPS keys - the kind of data that sits at the very core of how cloud environments authenticate users and systems.

Oracle's initial response was a flat denial. The company told BleepingComputer: "There has been no breach of Oracle Cloud. The published credentials are not for the Oracle Cloud. No Oracle Cloud customers experienced a breach or lost any data."
That statement did not hold.
Within days, independent researchers confirmed the breach. By early April 2025, Oracle had quietly begun notifying affected customers directly. The incident is estimated to impact over 140,000 cloud tenants acros...
>>[READ MORE]

How to secure your mobile phone and check for spyware?

To effectively detect if your mobile phone has been compromised or infected with spyware, as well as to secure it from potential future attacks, it is important to follow some security best practices.
Below, we will cover a thorough guide aimed at personal and work phones, which are often unprotected compared to corporate laptops with more advanced security tools (EDR/XDR) which are not often found on mobile phones.

Detecting potential compromise on your Mobile device

Review device configuration:

Installed Apps: Unrecognized applications, especially those in foreign languages or from unknown developers, could indicate potential spyware. If you discover suspicious apps, consider a full device reset.

>>[READ MORE]

Can a pen and paper really save you from a Cyber Incident?

We all know the adage:
It is not a question of "IF" you will be hacked, but "WHEN".

This is true for all companies in all industries.

The ultimate answer to this problem is, to quote a famous French film:
"What is important is not the fall, but the landing." (*)

However, when speaking to upper management about cyber risks and the cost to implement remediation or prevention security controls, the answer we often get is a "Don't worry, we will be fine. We can just operate manually with pen and paper until we fix everything again”.

It might be true for (very few) companies, but the reality is unfortunately often much more complicated than that.

A recent example is a cyber-attack that occurred in the Indian Ocean region this week:
Leal Réunion, a car dealership on the Réunion island, got attacked by a hacker group.
This attack is impacting their ability to use their IT systems and some sensitive financial informati...
>>[READ MORE]

BUGS Package updated to version 4.1.3

Following our renewal support for the BUGS cryptography project, it came to our attention there was some compiling issues on newer linux systems (i.e.: the latest version of Debian/Kali Linux)
This is due to a change in GCC where the default behaviour related to global variable is stricter. Therefore, we have updated the BUGS Unix package to version 4.1.3 and it can now be compiled on newer Linux systems.
You can download it from our local BUGS Download page
Or it can also be downloaded from our GITHUB project page

ElysiumSecurity

MU.SCL S03E06 – Catch Me If You Can: Life After MFA and Zero Trust in the Age of AI

World Quantum Readiness Day: The Q-DAY Deadline

Rogue AI agents, who is accountable?

MU.SCL S0305 – A Kind of Magic: Post-Quantum Cryptography and AI Agent Security

AI Cyber Risk in Finance: The Ticking Clock

Cyber Security controls that actually matters

Cyber Resilience: From the Floor to the Board

Are You Human?

Ransomware: Inside the Criminal Enterprise

Your Digital Ghost and why it matters

Risk Averse Vs Risk Aware: a difference that matters!

Patching Faster Than Your Shadow? AI and the New Vulnerability Race

Maybe AI won't kill us after all: a more balanced take on AI and CyberSecurity

Infinite Zero Day Machine, so what?

Racing to AI: Don’t Forget the Rules of the Road

When Microsoft Turns Against You: Hackers Wipe Thousands of Devices

MAURITIUS SECURITY CLUB IS BACK - MU.SCL Season 3!

Notepad++ and the joy of shadow IT application procurement

Apple's Spyware Alerts and 2025 closing thoughts!

Cyber Security Governance resources from the UK Government

What the Salesfoce breach can teach us on Cloud/SaaS Security?

ElysiumSecurity is 10 Years old!

Jaguar down, insurance regrets?

Oracle in Denial

How to secure your mobile phone and check for spyware?

Can a pen and paper really save you from a Cyber Incident?

BUGS Package updated to version 4.1.3

A Generic Incident Playbook

Log4j vulnerability information and 4x steps to prioritise

Programming and Cyber Security

The WhatsApp Privacy Question

Free Cyber Incident Playbooks on GitHub

HOW TO PROTECT AGAINST THE NEW PHISHING ATTACKS GETTING AROUND MFA (CONSENT PHISHING)

SOME CYBER INSURANCE CLAIMS IMPACTED BY COVID-19?

FREE CYBER SECURITY TESTING FOR SMALL BUSINESSES IN MAURITIUS

The problem with password expiry

Afer 17 years, a NEW BUGS Cryptography Package for Unix (version 4.1.2)

2019 CYBER SECURITY TRENDS REPORT OVERVIEW

PHISHING PROTECTION FRAMEWORK

NATIONAL CYBER SECURITY DRILL 2019

HOW TO CHOOSE MICROSOFT 365 SECURITY PLANS AND ADD-ONS: E3, E5, EMS E3, EMS E5, 365 E3, 365 E5

THE MAURITIUS SECURITY CLUB IS BACK!

ELYSIUMSECURITY LTD MAURITIUS IS ONE YEAR OLD!

New Download section with Presentations

FREE Cyber Security Event - 3rd Episode!

MU.SCL - Second Meeting for the Mauritius Cyber Security Club

MU.SCL - The Birth of a Cyber Security Club in Mauritius

FIRST Technical Colloquium 2017 in Mauritius - Our presentation on IDS

Today's Cyber Security Risk Context

GDPR and what it means to companies in the Indian Ocean and Africa

1 - Key facts about GDPR

Are Cyber Security Challenges and Opportunities in Mauritius and Africa different from Europe?

PART 1 - CYBER SECURITY...

When Business and Family priorities come together

Cyber Security Planning - A simple 6 Steps Approach

The 2015 SANS Holiday Hack Challenge Write-Up

How to build an efficient Anti-Phishing Framework?

How to build a Red Team and Why?

RANT FORUM - Red Team Recipes Presentation

IDS used as a Network Forensic Tool

IDS used as an Offensive Security Tool

Securing your Cloud Storage with a Boxcryptor alternative called EncFS

How to reduce WEB 2.0 attack surface by going back to WEB 1.0, the dynamic way!

Website update

SELKS 2.0 vs. Security Onion

BlackHat Mobile Security Summit - London 2015

Hackfu2015 Challenge 7 - Solution

Hackfu2015 Challenge 5 - Solution

Hackfu Challenge 2015 - Solution for Challenge 1

One more update to the Security Onion Guide

Updated Security Onion Guide

How to setup PIWIK to track visitors' downloads

How to setup Security Onion on a home network with Splunk, email alerts and some basic tuning

Fix for compiling VMwaretools 9.9.2 on kernel 3_18+

New Site Migration Complete

SANS Brochure Challenge Write-Up

BlackHat Europe 2014 – Some Highlights

iOS Backdoors

Critical Infrastructure and Cyber attacks