Or: How a malicious Chrome extension investigation at work led to an open-source tool The Extension That Started It All A few months back, I was working on a security investigation at work. We had hundreds of blocked requests in our logs, all beaconing to what Zscaler flagged as a
Note: This is the real story - not the sanitized LinkedIn version. So I Just Started My First Job in Cybersecurity A few months ago (March 2025) I started as a Tier 1 SOC Analyst with Leidos on the CISA contract. After years of building, learning, and honestly questioning if
Introduction Setting up a DShield honeypot is just the beginning. The real challenge lies in configuring all the necessary post-installation settings, which can be tedious when deploying multiple honeypots. Drawing from personal experience and valuable feedback from past interns at the Internet Storm Center (ISC), I developed DShieldKickStarter to automate
In the shadowy corners of the internet, a new vulnerability has emerged—one that doesn't attack through flashy ransomware or phishing emails but through the humble act of printing. Security researcher Simone Margaritelli (@evilsocket) has uncovered a series of critical flaws in the Common Unix Printing System (CUPS)
Executive Summary This report summarizes activity observed on the DShield sensor between September 12 and 15, 2024, targeting both web and SSH services. Multiple techniques, including SSH brute-force attacks and web-based automated reconnaissance attempts, were identified. The attackers primarily leveraged poorly configured services and default credentials across both attack surfaces.
