Skip to content
Silicon Shecky

Silicon Shecky

Infosec Practitioner

  • Security is Reactionary, No Matter What Security
  • New Year, New Post, from the start General
  • First Defcon – The results Reviews
  • Defender, KQL and Lockbit Microsoft
  • Do well, not be “popular” Ramblings
  • Defense Layers: A Case Study Microsoft
  • Device vs. User Microsoft
  • Ransomware, Are You Ready? General

Author: Michael Kavka

First time for everything

Posted on September 14, 2017September 14, 2017 By Michael Kavka No Comments on First time for everything

On Tuesday, September 12, 2017 4PM CST, my manager gave me a document called KB1243-Critical-Install.docx to analyze. This document is a self executing zip file using a docx type, with an embedded OLE binary object that executes, contacts an external site, and downloads a payload. I ended my analysis about 11AM CST 9-13-2017. Below is…

Read More “First time for everything” »

Security

Practice What You Preach

Posted on August 4, 2017 By Michael Kavka No Comments on Practice What You Preach

Over the last week, the infosec community has had a hard lesson thrown at it. Are we going to actually learn from it though?   We are self righteous, our community, the world of infosec. We preach, make fun of, pick on, slam, and do just about anything else negative about how things get handled….

Read More “Practice What You Preach” »

Rants, Security, Social Networking

In our own sandbox

Posted on July 20, 2017 By Michael Kavka No Comments on In our own sandbox

We all do it. We are so caught up in what we do, and what we are, we give what seems to be good advice, but really is impractical advice. The world of Information Security is all about a balance that reduces risk while still allowing productivity, and we service, that is right SERVICE not…

Read More “In our own sandbox” »

Rants, Security

Posts pagination

Previous 1 … 26 27 28 … 248 Next
  • About
  • Links
    • Burbsec
    • BSides312
    • Infosec Exchange Mastodon
    • BSidesRoc
    • Hacks4Pancakes Blog
    • Krebs On Security
    • Bleeping Computer
  • Categories
    • General
    • Computers
    • Software
    • Rants
    • Security
    • Internet/Music
    • Reviews
    • Microsoft
    • Hardware
    • Mobile Computing
  • Archives
  • Social Media

Browse by tags

2008 Active Directory Android Antivirus Apple Beta CarbonBlack Chrome Computers Exchange Exchange 2007 Firefox General Thoughts Google InfoSec Internet Explorer iOS iPad IT Linux Mac Malware Microsoft OS OSx Patches SBS SBS 2008 Security Server SMB Software Support Surface TechEd Thotcon Tweets Ubuntu Verizon Virus Vista Windows Windows 7 Windows 8 XP
  • About
  • Links
    • Burbsec
    • BSides312
    • Infosec Exchange Mastodon
    • BSidesRoc
    • Hacks4Pancakes Blog
    • Krebs On Security
    • Bleeping Computer
  • Categories
    • General
    • Computers
    • Software
    • Rants
    • Security
    • Internet/Music
    • Reviews
    • Microsoft
    • Hardware
    • Mobile Computing
  • Archives
  • Social Media

Connect

  • Bluesky
  • LinkedIn
  • Mastodon
  • RSS
  • Twitter

RSS feed: iFin Intel Feed iFin Intel Feed

  • Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127) September 23, 2026 Sina Kheirkhah (@SinSinology)
  • Placeholder domain used in dev docs now serves ClickFix attacks September 23, 2026 Lawrence Abrams
  • Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts September 23, 2026 Karlo Zanki
  • New RemControl Android banking malware targets users in Europe and Canada September 23, 2026 Bill Toulas
  • FBI investigates hacking claim amid hiring portal outage September 23, 2026 DysruptionHub Staff
  • UK regulator to investigate Pornhub parent company for alleged age verification failings September 23, 2026
  • Check Point warns of hackers exploiting Security Gateway VPN RCE flaw September 23, 2026 Bill Toulas
  • Watchdog finds most agencies failed to meet CISA cloud security orders, heightening risk of attack September 23, 2026 Tim Starks
  • No evidence of successful foreign meddling in 2024 election, spy agencies found September 23, 2026
  • CVE-2024-0244 – A heap buffer overflow in the Canon MF753Cdw printer September 23, 2026 Connor Ford
  • Hackers start exploiting critical WordPress flaw for code execution September 23, 2026 Bill Toulas
  • Spokane Public Schools in Washington takes systems offline after security incident September 23, 2026 DysruptionHub Staff

Browse by tags

2008 Active Directory Android Antivirus Apple Beta CarbonBlack Chrome Computers Exchange Exchange 2007 Firefox General Thoughts Google InfoSec Internet Explorer iOS iPad IT Linux Mac Malware Microsoft OS OSx Patches SBS SBS 2008 Security Server SMB Software Support Surface TechEd Thotcon Tweets Ubuntu Verizon Virus Vista Windows Windows 7 Windows 8 XP

RSS feed: iFin Intel Feed iFin Intel Feed

  • Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127) September 23, 2026 Sina Kheirkhah (@SinSinology)
  • Placeholder domain used in dev docs now serves ClickFix attacks September 23, 2026 Lawrence Abrams
  • Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts September 23, 2026 Karlo Zanki
  • New RemControl Android banking malware targets users in Europe and Canada September 23, 2026 Bill Toulas
  • FBI investigates hacking claim amid hiring portal outage September 23, 2026 DysruptionHub Staff
  • UK regulator to investigate Pornhub parent company for alleged age verification failings September 23, 2026
  • Check Point warns of hackers exploiting Security Gateway VPN RCE flaw September 23, 2026 Bill Toulas
  • Watchdog finds most agencies failed to meet CISA cloud security orders, heightening risk of attack September 23, 2026 Tim Starks
  • No evidence of successful foreign meddling in 2024 election, spy agencies found September 23, 2026
  • CVE-2024-0244 – A heap buffer overflow in the Canon MF753Cdw printer September 23, 2026 Connor Ford
  • Hackers start exploiting critical WordPress flaw for code execution September 23, 2026 Bill Toulas
  • Spokane Public Schools in Washington takes systems offline after security incident September 23, 2026 DysruptionHub Staff
  • Security is Reactionary, No Matter What Security
  • New Year, New Post, from the start General
  • First Defcon – The results Reviews
  • Defender, KQL and Lockbit Microsoft
  • Do well, not be “popular” Ramblings
  • Defense Layers: A Case Study Microsoft
  • Device vs. User Microsoft
  • Ransomware, Are You Ready? General

Social Media

  • Bluesky
  • Mastodon
  • Twitter

Copyright © 2026 Silicon Shecky.