Skip To Main Content
Sarah Lane on Muck Rack

Sarah Lane

As seen in: MSN, MSN UK, Yahoo Life, The Telegraph, The Washington Post, Flipboard, Yahoo Sports, Science Magazine, BioRxiv, Yahoo Style Canada and
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile

Get in touch with Sarah

Contact Sarah, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Is this you?

As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile

Articles

Better business through smarter cybersecurity

|
By Sarah Lane
| CISO Series
Threat intelligence firm SOCRadar says it found PEEP, a post-exploitation toolkit disguised as a Smart Bookmarks extension for Chrome and Edge. An attacker needs to already have administrator or code-execution access, then PEEP forges browser preference-integrity values so it can sideload without Web Store checks or prompts. From there, it steals cookies and browsing data and uses a native-messaging tool to run commands and manage files on the host.
Open in Who Shared Issue with article?

China’s hackers pick DeepSeek, OpenAI blocks Russian influence push, webpages mess with local AI

|
By Sarah Lane
| CISO Series
Taiwanese security firm TeamT5 says China-linked hacking groups have more than doubled their attacks since adding DeepSeek and other open-source AI models to their workflow. This is not AI launching attacks by itself. TeamT5 says the groups use it for reconnaissance, exploit code, malware development, and other repetitive work that helps state-backed crews move faster and cheaper.
Open in Who Shared Issue with article?

SynkLoader throws in the kitchen sink, NIST flags multi-cloud sprawl, ReliaQuest blocks a ShinyHunters swing

|
By Sarah Lane
| CISO Series
Researchers at Expel say SynkLoader packs a lot into one malware family. The attack starts with a fake IT Service Desk email from a Microsoft onmicrosoft.com address and a malicious installer on Azure storage. Once installed, it brings its own Python environment, fake Microsoft runtime DLLs, system profiling, persistence, remote access, desktop streaming, a reverse proxy, and a fake Windows lock screen called PhishLocker to capture the user’s Windows password.
Open in Who Shared Issue with article?
See all 155 licensed articles (160 Total)