The recent mass-theft of authentication tokens from Salesloft, whose AI chatbot is used by a broad swath of corporate America to convert customer interaction into Salesforce leads, has left many …
Category:
Safety & Security
Safety & Security
Malicious npm Packages Exploit Ethereum Smart Contracts to Target Crypto Developers
by David Walker
Sep 03, 2025Ravie LakshmananMalware / Social Engineering Cybersecurity researchers have discovered two new malicious packages on the npm registry that make use of smart contracts for the Ethereum blockchain to …
Managing safety with spreadsheets, email chains, and scattered documents isn’t just frustrating—it’s risky. If you’ve ever lost track of a deadline, missed an inspection, or felt overwhelmed by manual processes, …
For those of you who follow my blog posts but are not prepared to pay a SafetyAtWorkBlog subscription (you know who you are 😁), I have produced a daily audio …
Posted by Jasika Bawa, Andy Lim, and Xinghui Lu, Google Chrome Security Tech support scams are an increasingly prevalent form of cybercrime, characterized by deceptive tactics aimed at extorting money …
Safety & Security
Chinese hacking group Salt Typhoon expansion prompts multinational advisory
by David Walker
“The fundamental issue here is that key pieces of our critical infrastructure, for example network technologies like core routers, remain far too easy to compromise and gain persistence on,” said …
Safety & Security
Affiliates Flock to ‘Soulless’ Scam Gambling Machine – Krebs on Security
by David Walker
Last month, KrebsOnSecurity tracked the sudden emergence of hundreds of polished online gaming and wagering websites that lure people with free credits and eventually abscond with any cryptocurrency funds deposited …
Safety & Security
Attackers Abuse Velociraptor Forensic Tool to Deploy Visual Studio Code for C2 Tunneling
by David Walker
Cybersecurity researchers have called attention to a cyber attack in which unknown threat actors deployed an open-source endpoint monitoring and digital forensic tool called Velociraptor, illustrating ongoing abuse of legitimate …
Digital transformation isn’t coming, it’s already here. Most organizations have already made the shift to EHS software, and the next wave is already underway: consolidating platforms, adopting AI, and using …
Recently, I read Sean Scalmers’ new book “A Fair Day’s Work“. Last week, Scalmer spoke at a lunchtime lecture. There were two questions that I posed in …