PUBLIC DEFENDER By Brian Livingston Realistic-looking videos that are the most-often recommended by the popular TikTok social media app regarding health care contain no real people 40 percent of the time, a new analysis of the site’s mini-movies has found. Many of TikTok’s top-rated videos on every topic are AI-generated but look exactly like actual […]

PUBLIC DEFENDER By Brian Livingston Millions of people around the world have installed Internet-connected “security cameras” to monitor foot traffic around their homes and offices. Unfortunately, many of these video devices make it easy for unwanted persons to see your live feed and record whatever comes into view. It’s convenient to know who’s at your […]

ISSUE 23.29 • 2026-07-20 PATCH WATCH By Susan Bradley Well, the benefits of AI are clearly here — at least in terms of bug counts. Microsoft fixed 621 vulnerabilities this time around. However, take a breath — a big breath. Even with all those fixes that encompass both Windows and .NET, the updates are pushed […]

ISSUE 23.28 • 2026-07-13 Look for our BONUS issue on July 20, 2026!! PUBLIC DEFENDER By Brian Livingston Millions of people in the US and around the world are developing “tech neck,” a medical syndrome caused by prolonged hunching over smartphones, tablets, and other electronic devices. It’s hard to state the exact number of tech-neck […]

The privilege escalation vulnerability tracked as CVE-2026-50656 has been patched with a Microsoft Malware Protection Engine update.

The post Microsoft Patches Defender ‘RoguePlanet’ Vulnerability appeared first on SecurityWeek.

PUBLIC DEFENDER Don’t pay for bot-detection tools — use these free apps By Brian Livingston • Comment about this article We’re subjected every day to more and more “AI slop.” That’s the flat, droning pap that chatbots and large language models (LLMs) churn out with none of the vigor and vitality of human writing. You […]

PUBLIC DEFENDER By Brian Livingston You may think you can make easy money by betting on sports and political events in so-called prediction markets such as Polymarket and Kalshi. I’d bet that you’d lose your shirt. If bettors believe there’s a 75 percent chance that interest rates will rise, for instance, you can bet 75 […]

ISSUE 23.22 • 2026-06-01 PUBLIC DEFENDER By Brian Livingston Waves of state-sponsored malware attacks are expected to overwhelm traditional antivirus software as early as July 2026. By then, hacker teams will surely gain access to powerful large language models (LLMs) such as Anthropic’s Mythos Preview and OpenAI’s GPT-5.4-Cyber. In April 2026, Anthropic and OpenAI announced […]

PUBLIC DEFENDER Microsoft ruined Windows’ local account — but here’s the fix By Brian Livingston Windows users have installed the operating system for decades using what’s known as a local account. But Microsoft has nibbled away at end users’ independence to the point that most people are finding it impossible to set up Windows without […]

PUBLIC DEFENDER By Brian Livingston The maker of the popular Claude large language model (LLM) — which became the number-one download from US app stores in February 2026 — recently announced a powerful service called Claude Mythos. The new LLM has reportedly discovered thousands of security holes in every major operating system and Web browser. […]

WINDOWS 11 By Martin Brinkmann Here’s a surprising speed boost for everyday, heavy-duty tasks. It works on many Windows setups and costs nothing. When Microsoft rolled out Dev Drive for Windows 11 back in 2023, it slapped a massive “For Developers Only” sign on the feature. The pitch was that enterprise programmers compiling millions of […]

Want to learn how attackers bypass endpoint products? Slides for this webcast can be found here: https://www.blackhillsinfosec.com/wp-content/uploads/2020/09/SLIDES_SacredCashCowTipping2020.pdf 3:41 – Alternate Interpreters 9:19 – Carbon Black Config Issue 15:07 – Cisco […]

The post Webcast: Sacred Cash Cow Tipping 2020 appeared first on Black Hills Information Security, Inc..

💾

Do your PowerShell scripts keep getting caught? Tired of dealing with EDRs & Windows Defender every time you need to pop a box?  In this one-hour podcast, originally recorded as […]

The post BHIS PODCAST: Endpoint Security Got You Down? No PowerShell? No Problem. appeared first on Black Hills Information Security, Inc..

💾

Do your PowerShell scripts keep getting caught? Tired of dealing with EDRs & Windows Defender every time you need to pop a box?  In this one-hour webcast, we introduce a somewhat […]

The post Webcast: Endpoint Security Got You Down? No PowerShell? No Problem. appeared first on Black Hills Information Security, Inc..

Carrie Roberts //* (Updated 2/12/2020) ADVISORY: The techniques and tools referenced within this blog post may be outdated and do not apply to current situations. However, there is still potential […]

The post Getting PowerShell Empire Past Windows Defender appeared first on Black Hills Information Security, Inc..

Kent Ickler & Jordan Drysdale // BHIS Webcast and Podcast This post accompanies BHIS’s webcast recorded on August 7, 2018, Active Directory Best Practices to Frustrate Attackers, which you can view below. […]

The post Active Directory Best Practices to Frustrate Attackers: Webcast & Write-up appeared first on Black Hills Information Security, Inc..

Carrie Roberts // * Would you like to run Mimikatz without Anti-Virus (AV) detecting it? Recently I attempted running the PowerShell script “Invoke-Mimikatz” from PowerSploit on my machine but it was […]

The post How to Bypass Anti-Virus to Run Mimikatz appeared first on Black Hills Information Security, Inc..