New answers tagged

2 votes

Is FIDO2 authentication vulnerable to a social engineering replay attack?

I found the detail I was missing in this answer. The TL;DR explanation (as I understand it anyway) is U2F devices can generate and store keys one of two ways Generate and store separate keys and key ...
user avatar
  • 835
2 votes
Accepted

How to hunt for phishing websites?

Your best bet is Certificate Transparency logs. These can give you a stream of all HTTPS certificates in almost real-time as they are issued which you can then run your analysis on the domains they're ...
user avatar
1 vote

How to deal with these legit-looking major-company phishing emails?

What's the solution to these? The best practice hasn't changed: Don't use links in the email/SMS/whatever Visit the official site yourself, using either: your own saved bookmarks (best) launching ...
user avatar
  • 760

Top 50 recent answers are included