Author: kr1pt7c

  • Uber Fined 290 Million Euros for GDPR Violations

    Uber Fined 290 Million Euros for GDPR Violations

    The Dutch Data Protection Authority(DPA) has imposed a fine of 290 Million euros on transport giant Uber for violations of the General Data Protection Regulation(GDPR) in Europe. Uber was found to be transferring the personal data of European taxi drivers to the United States(US) without safeguarding the data being transferred…

  • The Lay(wo)man’s Guide to Online Security

    The Lay(wo)man’s Guide to Online Security

    Overview The average individual spends 6 hours and 35 minutes of their day on the internet. At least 1/3rd of this time is spent on social media, peering into other people’s lives and giving them peaks into their own. There is however a limit to how much information you can…

  • NIST’s Post Quantum Encryption Standards 2024

    NIST’s Post Quantum Encryption Standards 2024

    The National Institute of Standards and Technology(NIST), on the 13th of August 2024, released its principal set of encryption algorithms, designed to withstand attacks from quantum computers. The development of Quantum computing has caused growing concerns about the ability of current encryption standards to maintain their security. Experts claim that most…

  • GrimResource: Achieving Command Injection on Windows

    GrimResource: Achieving Command Injection on Windows

    After Microsoft’s well founded decision to disable office macros on files sourced from the internet, one of the most widely used techniques by attackers to deliver malware was disarmed. Spearphishers were sent scrambling to find alternate techniques to gain footholds on victim PCs. Many new techniques have since surfaced to fill the void left by…

  • Everything You Need to Know About the Snowflake Breaches

    Everything You Need to Know About the Snowflake Breaches

    Information stealer leaks over the past several years culminated in a series of breaches starting in May this year, involving 165 companies including Ticketmaster, Santander, AT&T, Advance Auto Parts, Anheuser-Busch, and Lending Tree. We will refer to these as the Snowflake breaches. It all started when a threat actor group…

  • ClownStrike: CrowdStrike’s Faulty Update that Broke the Internet

    ClownStrike: CrowdStrike’s Faulty Update that Broke the Internet

    Global cybersecurity giant CrowdStrike unintentionally became the reason for a massive Denial-of-Service(DoS) last Friday when a routine update to their endpoint security platform Falcon went horribly wrong. A faulty component pushed with the update triggered a logic error in Windows PCs worldwide causing them to get stuck on Blue Screens of Death(BSOD) and in never-ending boot loops. The update contained newly observed malicious pipes being used…

  • Ransomware Group DarkAngels and the Largest Payout Ever

    Ransomware Group DarkAngels and the Largest Payout Ever

    The DarkAngels ransomware group is a group of threat actors which emerged in May of 2022 and have since been known to have conducted some of the biggest and most successful ransomware attacks in recent times. What makes this group even more impressive is the fact that they have kept such a low profile all this time, only now catching the limelight due to the record…

  • About Us

    About Us

    Cybersecurity for Everyone Cybersecurity affects everyone. Our purpose is to empower people with the knowledge they need to stay safe and secure online. Hello There! I am Kaval Joshi a.k.a Kr1pt7c, A cybersecurity consultant, security researcher, darknet prowler, and creator of Decrypting. Welcome! Let’s start with why. Why did I start Decrypting? The field of Cybersecurity has…

  • The Ransomware Attack on Synnovis that Broke London Healthcare

    The Ransomware Attack on Synnovis that Broke London Healthcare

    A ransomware attack on pathology and diagnostic service provider Synnovis on the 3rd of June has shaken London’s healthcare system to its core, causing disruptions at multiple major NHS hospitals in London. The Attack Synnovis went live with a Laboratory Information Management System(LIMS) in October of 2023, which combined multiple separate IT systems set…