Top all-time · #1215
Proofpoint
Company blog · proofpoint.com/us/blog/threat-insightsecurity
Proofpoint is the company blog at proofpoint.com, writing about security. Since 2013, 57 different Hacker News readers have linked it 67 times, most often “Home Routers Under Attack via Malvertising on Windows, Android Devices”. It is still writing: the last post was on 2026-10-28, and you can follow it by feed.
Proofpoint helps protect people, data and brands against cyber attacks. Offering compliance and cybersecurity solutions for email, web, cloud, and more.
Most-linked posts?
- Home Routers Under Attack via Malvertising on Windows, Android Devices3 people · 4 mentions · first linked 2016-12-15
- Ongoing Malicious Campaign Impacting Azure Cloud Environments3 people · 3 mentions · first linked 2024-02-13
- Your Fridge is Full of SPAM: Proof of An Internet of Things-driven Attack2 people · 2 mentions · first linked 2014-01-17
- Phishing template uses fake fonts to decode content and evade detection2 people · 2 mentions · first linked 2019-01-05
- New Variant of Buer Loader Written in Rust2 people · 2 mentions · first linked 2021-05-08
What Hacker News says?
> Microsoft is the Microsoft of the enterprise security market, more or less. They completely dominate email, largely dominate identity, have a plurality if not a majority on endpoint, but don't compete in network. The most recent figures I’ve seen are that Microsoft has around 25% of the endpoint market[0], which is a plurality because the market is so fragmented. Proofpoint claims around 24% of the email security…
Comment linking /us/blog/email-and-cloud-threats/proofpoint-overall-market-leader-frost-radar-email-security-2024
on “Google to buy Wiz for $32B”Submitted Threat actor abuses Cloudflare tunnels to deliver remote access trojans as a story · 320 points
HN discussionI'm not a reverse engineer or a white hacker but I like reading about it. Most of the malware is made for Windows OS because of the Windows' enormous market share. Majority of information about Windows malware I get from big computer security companies' research blogs like: https://www.trendmicro.com/en_us/research.html https://www.proofpoint.com/us/blog https://research.checkpoint.com/ https://blog.talosintelligenc…
Comment linking /us/blog
on “Many ransomware strains will abort if they detect a Russian keyboard installed (2021)”Submitted PornHub served up malware in ads for a year undetected as a story · 46 points
HN discussionIn other news, bots have now started using DoH (one via Google's DoH service): * https://www.proofpoint.com/us/threat-insight/post/psixbot-no... * https://news.ycombinator.com/item?id=20934680
Comment linking /us/threat-insight/post/psixbot-now-using-google-dns-over-https-and-possible-new-sexploitation-module
on “Turn off DoH, Firefox”Submitted Malware in Ad Networks Infects Visitors and Jeopardizes Brands as a story · 20 points
HN discussion>>Neither Apple nor Google have found TikTok problematic enough Security researchers have found it grossly problematic though. 1. https://www.proofpoint.com/us/blog/threat-protection/underst... 2. https://www.bleepingcomputer.com/news/security/tiktok-flaws-...
Comment linking /us/blog/threat-protection/understanding-information-tiktok-gathers-and-stores
on “TikTok’s Chinese owner offers to forego stake to clinch U.S. deal – sources”Submitted Operation SpoofedScholars: A Conversation with TA453 as a story · 15 points
HN discussion> You own your machine but not the text. You don't get to own the text just because you can read it, see if you read this - it is still my text (because I wrote it!). >what would be your opinion if the major websites would put a T&C that you have to enable (Let's say it was safe JS) ads to view content. And how would I know it's safe? I don't even let the closest friends on the wifi because they don't run adblockers…
Comment linking /us/threat-insight/post/home-routers-under-attack-malvertising-windows-android-devices
on “AdNauseam: Fight Back Against Advertising Networks and Privacy Abuse”Submitted Malware Targets U.S. Utilities, Phishing Impersonating Engineer Licensing Boards as a story · 8 points
HN discussionSee this: https://www.proofpoint.com/us/corporate-blog/post/understand... A quote: TikTok app permissions include personal information and device control First, our researchers examined the permissions TikTok requires on Android and iOS devices following installation. While some of the permissions detailed below are to be expected, all of this is consistent with TikTok’s written privacy policy. However, when you see…
Comment linking /us/corporate-blog/post/understanding-information-tiktok-gathers-and-stores
on “TikTok app to stop accessing user clipboards after being caught in the act”Submitted Remote access, real cargo: cybercriminals targeting trucking and logistics as a story · 5 points
HN discussionNumbers are a bit loose, but even a Fermi style estimation suggests malware in general is worse than phishing. Phishing is on the order of tens of millions [1] to a few billion [2]. Ransomware alone probably causes upwards of many billions [3]. Equifax breach (XML exploit) alone has cost billions. Heartbleed, spectre, meltdown, those are at least 1B each. [1] https://www.cybersecuritydive.com/news/phishing-cost-ente…
Comment linking /us/corporate-blog/post/fbi-reports-125-billion-global-financial-losses-due-business-email-compromise
on “Microsoft ruined passwords, now aims for a passwordless future”Submitted Adylkuzz Cryptocurrency Mining Malware Spreading for Weeks via EternalBlue as a story · 5 points
HN discussionNot spy messages, but steganography has been used for malvertizing campaigns, hiding malicious code inside ad images to prevent automated detection by ad networks. See for example https://www.proofpoint.com/us/threat-insight/post/massive-ad... .
Comment linking /us/threat-insight/post/massive-adgholas-malvertising-campaigns-use-steganography-and-file-whitelisting-to-hide-in-plain-sight
on “Show HN: Encrypt and hide files inside images”Submitted Ongoing Malicious Campaign Impacting Azure Cloud Environments as a story · 4 points
HN discussionTikTok collects a lot of user data: Geolocation data, including: longitude, latitude, and time zone Device information, including: Android ID, International Mobile Equipment Identity (IMEI), Address Book Access, Device carrier region, Device region, Device type, Device OS version, Device language, Device connection type, and Mobile network code App information, including: App name https://www.proofpoint.com/au/corpo…
Comment linking /au/corporate-blog/post/understanding-information-tiktok-gathers-and-stores
on “Trump gives Microsoft 45 days to clinch TikTok deal”Submitted Phishing template uses fake fonts to decode content and evade detection as a story · 4 points
HN discussionAnyone used the commercial firewall / IP list you can slap on top of pfSense? There is the community version, but then there is also this: https://www.proofpoint.com/us/threat-insight/et-pro-ruleset My understanding is it’s around $900 or so a year for a license. That kind of sucks. But on the other hand I know it’s very easy to install, just a one-liner in the GUI of pfSense (which is how I found out about it).
Comment linking /us/threat-insight/et-pro-ruleset
on “The pfSense Book”Submitted The Bitter End: Unraveling Eight Years of Espionage Antics as a story · 3 points
HN discussionRelevant context: The author, Ryan Kalember, is an executive at Proofpoint. His title says "Cybersecurity Strategy", but he's really in marketing and PR. I know Ryan and would say he's a great guy and by far the best marketing executive I've worked with, but marketing is marketing. This piece is marketing. Proofpoint competes with Microsoft in the email security space, less and less effectively as time has gone on.…
Comment linking /us/partners/spectra-alliance
on “The Microsoft paradox: Contributing to cyber threats and monetizing the cure”Submitted Nebula: The Next-Gen ML Platform at Proofpoint as a story · 3 points
HN discussionEmail has this problem all the time! [1] Real estate companies have to give customers cybersecurity advice [2] because phishers pretend to be the agent and send incorrect addresses for wire transfers. [1]: https://www.proofpoint.com/us/threat-reference/email-spoofin... [2]: https://www.rate.com/resources/how-to-avoid-phishing-scams-a...
Comment linking /us/threat-reference/email-spoofing
on “There’s No Algorithms”Submitted Attackers Use Compromised Accounts to Create and Distribute Malicious OAuth Apps as a story · 3 points
HN discussionIt looks like this started all the way back in the beginning of last year: https://www.mimecast.com/blog/guide-to-google-dmarc-setup/ This overview also shows other requirements you may have missed: https://www.proofpoint.com/us/blog/email-and-cloud-threats/g... As for DMARC in the headers, I'm pretty sure Google has done that for years when DMARC is being checked (i.e. when it's being offered by the sending domain).
Comment linking /us/blog/email-and-cloud-threats/google-and-yahoo-set-new-email-authentication-requirements
on “Google DMARC Policy Changes?”Submitted Phishing template uses fake fonts to decode content and evade detection as a story · 3 points
HN discussionSeems to be this Proofpoint blogpost about a phishing campaign: https://www.proofpoint.com/us/blog/cloud-security/community-... being blown out of proportions by a series of obscure news websites exaggerating each other's stories. Edit: for a real interesting Microsoft security disaster (not exploited in the wild AFAIK) check out ChaosDO by Wiz: https://www.wiz.io/blog/chaosdb-explained-azures-cosmos-db-v...
Comment linking /us/blog/cloud-security/community-alert-ongoing-malicious-campaign-impacting-azure-cloud-environments
on “Microsoft Azure Hit with the Largest Data Breach in Its History”Submitted Smominru Monero mining botnet making millions for operators as a story · 3 points
HN discussionMore on this via https://www.proofpoint.com/uk/blog/threat-insight/clipboard-...
Comment linking /uk/blog/threat-insight/clipboard-compromise-powershell-self-pwn
on “Windows PowerShell Phish Has Scary Potential”Submitted From Clipboard to Compromise: A PowerShell Self-Pwn as a story · 2 points
HN discussion
