Welcome to the Authentic8 blog

Hollywood hacks and hackers

Hollywood’s depiction of hacking, on the big screen and in TV dramas or on Netflix, isn’t always accurate, to put it mildly. A closer look…

JavaScript: how NPM maintainer accounts amplify risk

20 compromised JavaScript package “maintainer” accounts — that’s all it takes to bring down the global digital supply chain through…

How to detect browser extensions

Working on new methods and tools to identify browser exploits, I recently came across a common question again in a forum: "Is it…

DOD's cybersecurity maturity model certification: Are smaller companies prepared?

New requirements mean contractors will have to pay to play. What does this mean for small businesses in the defense industry? The…

How to REALLY browse anonymously

When anonymous web access becomes business-critical, the web's favorite home remedies won't help. Worse, they can harm you and our…

To Tor or not to Tor?

What’s the ROI of threat hunting?

How can IT security threat hunters measure success? That's one of the core questions raised in the SANS Threat Hunting Survey, co-sponsored…

Operation “Shields Up”: web isolation in the U.S. military

How can government organizations, private enterprises, and academic institutions minimize the cybersecurity and privacy risks associated…

Malvertising: What You Should Know

Large-scale malvertising campaigns have pushed more than a billion malicious ads through online ad networks onto "secure" web browsers. Ad-…