Skip to main content

How to Protect Yourself from Malvertising

Hackers are notoriously clever at committing crimes. Of all the criminal archetypes, they seem to be the most creative; so creative that we were forced to invent yet another word to describe their latest scams. Malvertising — a new shorthand for malicious advertising — is something very different from the traditional methods hackers have historically used.

Read More

Scanning Sites for SRI Usage with sritest.io

Scanning Websites for SRI Hash Usage with sritest.io

Third-party hosted website assets, such as JavaScript libraries, are vulnerable to tampering. However, a new technique named Subresource Integrity (SRI) is here to protect these external assets.

One problem is the slow implementation of SRI, thus sritest.io was born. The new service enables website owners and frontend developers to evaluate their sites for SRI hash usage. Sritest.io aims to help the widespread implementation of SRI, thus, ultimately protect website visitors from malicious code.

Read More

Ransomware Playbook for Managing Infections

Ransomware is a variation of malicious software that encrypts the victim’s files without any consent, then demands a ransom in exchange for the decryption keys. This is a lucrative, multi-million-dollar business model, which targets hundreds of thousands of users each day.

Files becoming unavailable could lead to the disruption of normal business activities, therefore it costs money. A formal incident response playbook with effective pre-designed instructions, however, helps minimize the impact on the business.

Read More