TDrop2 Attacks Suggest Dark Seoul Attackers ReturnPalo Alto Unit 42·Nov 1, 09:56 UTC · Nov 1, 2018Malware30
The Effectiveness of Publicly Shaming Bad SecurityTroy Hunt·Sep 11, 08:51 UTC · Sep 11, 2018Vulnerability30
I'm Sorry You Feel This Way NatWest, but HTTPS on Your Landing Page Is ImportantTroy Hunt·Dec 14, 21:17 UTC · Dec 14, 2017Vulnerability30
The Internet of Things is a Complete Mess (and how to Fix it)Troy Hunt·Jul 13, 09:59 UTC · Jul 13, 2021Vulnerability30
Extended Validation Certificates are DeadTroy Hunt·Sep 17, 22:02 UTC · Sep 17, 2018Phishing & fraud30
New Pluralsight Course: Modern Browser Security ReportsTroy Hunt·Aug 8, 07:22 UTC · Aug 8, 2018Vulnerability30
Processing 23 Billion Rows of ALIEN TXTBASE Stealer LogsTroy Hunt·Feb 25, 19:23 UTC · Feb 25, 2025Malware30
Inside the Massive Naz.API Credential Stuffing ListTroy Hunt·Jan 17, 21:20 UTC · Jan 17, 2024Malware30
PayPal's Beautiful Demonstration of Extended Validation FUDTroy Hunt·May 22, 20:28 UTC · May 22, 2019Phishing & fraud30
Alleged ‘Satori’ IoT Botnet Operator Sought Media Spotlight, Got IndictedKrebs on Security·Sep 3, 02:58 UTC · Sep 3, 2018Malware30
Is Enumerating Resources on a Website "Hacking"?Troy Hunt·Apr 19, 23:04 UTC · Apr 19, 2018Vulnerability30
Social Media Thread-Hijacking is Nothing More Than Targeted SpamTroy Hunt·Apr 18, 06:48 UTC · Apr 18, 2018Phishing & fraud30
Processing 630 Million More Pwned Passwords, Courtesy of the FBITroy Hunt·Dec 12, 21:29 UTC · Dec 12, 2025Policy & legal30
We're Backfilling and Cleaning Stealer Logs in Have I Been PwnedTroy Hunt·Mar 4, 20:09 UTC · Mar 4, 2025Malware30
Padlocks, Phishing and Privacy; The Value Proposition of a VPNTroy Hunt·Sep 17, 08:44 UTC · Sep 17, 2020Phishing & fraud30
Let's Stop the 5G Hysteria: Understanding Hoaxes and Disinformation CampaignsTroy Hunt·Apr 9, 21:55 UTC · Apr 9, 2020Threat actor45
When Bank Communication is Indistinguishable from Phishing AttacksTroy Hunt·Nov 19, 06:28 UTC · Nov 19, 2019Phishing & fraud30
Extended Validation Certificates are (Really, Really) DeadTroy Hunt·Aug 13, 05:27 UTC · Aug 13, 2019Exploit / PoC45
New Pluralsight Course: Bug Bounties for CompaniesTroy Hunt·May 24, 08:04 UTC · May 24, 2018Vulnerability30
The Decreasing Usefulness of Positive Visual Security Indicators (and the Importance of Negative Ones)Troy Hunt·May 7, 08:35 UTC · May 7, 2018Phishing & fraud30
The One Valuable Thing All Websites Have: Reputation (and Why It's Attractive to Phishers)Troy Hunt·Nov 9, 12:05 UTC · Nov 9, 2017Threat actor45
Free Course: Here's What This Ubiquiti UniFi Stuff Is All AboutTroy Hunt·Aug 14, 22:14 UTC · Aug 14, 2017Industry30
I just permanently removed all ad network code from my blogTroy Hunt·Jan 5, 10:29 UTC · Jan 5, 2017Malware30
All websites have something of value for attackers: reputationTroy Hunt·Dec 22, 12:29 UTC · Dec 22, 2016Phishing & fraud30
Get "The Information Security Big Picture" on Pluralsight now!Troy Hunt·Nov 24, 09:29 UTC · Nov 24, 2016Malware30
The Capgemini leak of Michael Page data via publicly facing database backupTroy Hunt·Nov 11, 21:42 UTC · Nov 11, 2016Vulnerability30
It’s time that you – the vulnerable human – brush up on your social engineering skills with PluralsightTroy Hunt·Feb 9, 00:00 UTC · Feb 9, 2016Phishing & fraud30
Introducing you to browser security headers on PluralsightTroy Hunt·Aug 31, 23:00 UTC · Aug 31, 2015Vulnerability30