Port 22

~ 26 Mar 2019 ~

WinRAR Zero-day Abused in Multiple Campaigns

~ 19 Mar 2019 ~

How malvertiser "VeryMal" abused Firebase to conceal and smuggle their payload.

~ 15 Mar 2019 ~

Dissecting a NETWIRE Phishing Campaign's Usage of Process Hollowing

~ 13 Mar 2019 ~

Breaking the Bank: Weakness in Financial AI Applications

CVE-2019-0539 Microsoft Edge Chakra Exploitation: Achieving memory full R\W primitive

~ 11 Mar 2019 ~

"If you want, I can store the encrypted password." - A Password-Storage Field Study with Freelance Developers [PDF]

~ 5 Mar 2019 ~

Automated/declarative "pen testing as code"

~ 1 Mar 2019 ~

"Cheapest" sketchy hindi certs for sale

~ 28 Feb 2019 ~

FLARE Script Series: Recovering Stackstrings Using Emulation with ironstrings

~ 27 Feb 2019 ~

"Insider Threat" Detection Software

~ 25 Feb 2019 ~

"Building Virtual Machine Labs" is now free!

~ 24 Feb 2019 ~

"How a chain of multiple hacks leads me to database compromise"

~ 13 Feb 2019 ~

Researchers Implant "Protected" Malware On Intel SGX Enclaves

~ 6 Feb 2019 ~

Using Gmail "Dot Addresses" to Commit Fraud

~ 5 Feb 2019 ~

Exploiting Google "dot" Email Accounts for Fun and for Profit. But mostly for profit

~ 1 Feb 2019 ~

"A fresh look on reverse proxy related attacks" by @antyurin

~ 27 Jan 2019 ~

The end of the "perimeter" as we know it

~ 24 Jan 2019 ~

A brazilian academic researcher's BGP "research" triggered a bug in FRR twice (jan 8 and jan 23), knocking routers around the world offline

~ 22 Jan 2019 ~

Evilginx 2.3.0 "Phisherman's Dream" Update - 2FA bypassing reverse proxy phishing framework (Tool)

~ 20 Jan 2019 ~

xioc: Extract IOCs from text, including "escaped" ones.

~ 17 Jan 2019 ~

Troy Hunt: The 773 Million Record "Collection #1" Data Breach

~ 6 Jan 2019 ~

Tool release: Universal Phishing Reverse Proxy "Modlishka" (2FA support)

~ 26 Dec 2018 ~

Detecting Use of SandboxEscaper's "MsiAdvertiseProduct" 0-day PoC

~ 23 Dec 2018 ~

Hey everyone, I was wondering what you think about the topic talked about in the linked document, "Overwriting Hard Drive Data: The Great Wiping Controversy"

~ 12 Dec 2018 ~

FLARE Script Series: Automating Objective-C Code Analysis with Emulation

~ 28 Nov 2018 ~

The "Typical" Security Engineer: Hiring Myths & Stereotypes

~ 20 Nov 2018 ~

Cmd and Conquer: De-DOSfuscation with flare-qdb

~ 16 Nov 2018 ~

SaSSHimi: tool to bypass "AllowTcpForwarding no" and build dynamic tunnels

Secret Charges Against Julian Assange Revealed Due to "Cut-Paste" Error

~ 15 Nov 2018 ~

7 new "Spectre Like" attacks using transient execution

~ 14 Nov 2018 ~

Oracle and "Responsible Disclosure"

~ 4 Nov 2018 ~

New "Breached Database Search Engine" on the Radar

~ 2 Nov 2018 ~

New "Bleedingbit" Vulnerability could allow an attacker to run arbitrary code on Enterprise Access Points.

U.S. ISBN registry ran "unauthorized code" on its checkout page for nearly 6 months

~ 31 Oct 2018 ~

Apple's New MacBook Disconnects Microphone "Physically" When Lid is Closed

~ 29 Oct 2018 ~

IBM Buys "Red Hat" Open-Source Software Company for $34 Billion

~ 14 Oct 2018 ~

"Big Star Labs" spyware campaign affects over 11,000,000 people

~ 8 Oct 2018 ~

Defeating the "Deal or No Deal" Arcade Game

~ 5 Oct 2018 ~

"Supposely" GRU using a Pineapple nano (see slide 26)

Debunking "OSINT Analysis of the TOR Foundation" and a few words about Tor's directory authorities

~ 4 Oct 2018 ~

Conspiracy Theories Around the "Presidential Alert"

~ 21 Sep 2018 ~

Friday Squid Blogging: British Columbia "Squid Run" Is a Tourist Attraction

~ 17 Sep 2018 ~

"...But I'm a CIP Cyborg Warrior with Real Kung Fu Grip... Then Prove It!"

~ 13 Sep 2018 ~

Bypassing Antivirus for Your Antivirus Bypass

Bypassing Antivirus for Your Antivirus Bypass

~ 10 Sep 2018 ~

Slides & presentation of "Unpacking the non-unpackable" (anti-static analytic new ELF packer) in R2CON2018

Chrome/Chromium now considers "www" to be a "trivial" subdomain and no longer shows it in the address bar.

~ 9 Sep 2018 ~

"Big Star Labs" spyware campaign affects over 11,000,000 people

~ 5 Sep 2018 ~

Company claim "New" way to access home routers and home networks

~ 30 Aug 2018 ~

LAteral Movement Encryption technique (a.k.a. The "LAME" technique)

~ 29 Aug 2018 ~

We Are Motherboard's Infosec Reporters: Let's Talk Journalism and "Cyber." Ask Us Anything!

~ 21 Aug 2018 ~

"Two Stage" BMW Theft Attempt

~ 18 Aug 2018 ~

GitHub - naltun/eyes: Golang rewrite of eyes.sh. Let's you perform domain/IP address information gathering. Wasn't it esr who said "With enough eyeballs, all your IP info are belong to us?"

~ 13 Aug 2018 ~

This new attack is described is a recently published research paper entitled "The Dangers of Key Reuse: Practical Attacks on IPsec IKE," set to be presented at the 27th Usenix Security Symposium later this week in Baltimore, USA. From the paper's abstract:

~ 8 Aug 2018 ~

BIOS Boots What? Finding Evil in Boot Code at Scale!

~ 7 Aug 2018 ~

Step: A New Open Source "Swiss Army Knife" for Zero Trust Security

~ 3 Aug 2018 ~

When "ASLR" Is Not Really ASLR - The Case of Incorrect Assumptions and Bad Defaults

~ 2 Aug 2018 ~

Kovter malware teardown, including "invisible" registry persistence

~ 18 Jul 2018 ~

How the Rise of Cryptocurrencies Is Shaping the Cyber Crime Landscape: The Growth of Miners

~ 28 Jun 2018 ~

RIG Exploit Kit Delivering Monero Miner Via PROPagate Injection Technique

~ 29 May 2018 ~

Remote Authentication GeoFeasibility Tool - GeoLogonalyzer

~ 24 Apr 2018 ~

Metamorfo Campaigns Targeting Brazilian Users

~ 23 Apr 2018 ~

Loading Kernel Shellcode

~ 17 Apr 2018 ~

"ICS Defense: It's Not a \"copy-paste\" from an IT playbook"

~ 10 Apr 2018 ~

Solving Ad-hoc Problems with Hex-Rays API

~ 5 Apr 2018 ~

Fake Software Update Abuses NetSupport Remote Access Tool

~ 23 Mar 2018 ~

SANNY Malware Delivery Method Updated in Recently Observed Attacks

~ 22 Feb 2018 ~

"Know Thyself Better Than The Adversary - ICS Asset Identification and Tracking"

~ 15 Feb 2018 ~

CVE-2017-10271 Used to Deliver CryptoMiners: An Overview of Techniques Used Post-Exploitation and Pre-Mining

~ 3 Feb 2018 ~

Attacks Leveraging Adobe Zero-Day (CVE-2018-4878) Threat Attribution, Attack Scenario and Recommendations

~ 29 Jan 2018 ~

"Triton\/TriSIS - In Search of its Twin"

~ 17 Jan 2018 ~

Microsoft Office Vulnerabilities Used to Distribute Zyklon Malware in Recent Campaign

~ 15 Jan 2018 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201712" hreflang="en">November-December 2017</a>

~ 11 Jan 2018 ~

FLARE IDA Pro Script Series: Simplifying Graphs in IDA

~ 29 Nov 2017 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201710" hreflang="en">September-October 2017</a>

~ 30 Oct 2017 ~

Introducing GoCrack: A Managed Password Cracking Tool

~ 23 Oct 2017 ~

New FakeNet-NG Feature: Content-Based Protocol Detection

~ 26 Sep 2017 ~

"Preparing for Cyber Security Incidents"

~ 11 Sep 2017 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201708" hreflang="en">July-August 2017</a>

~ 13 Jul 2017 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201706" hreflang="en">May-June 2017</a>

~ 5 Jul 2017 ~

Introducing Linux Support for FakeNet-NG: FLAREs Next Generation Dynamic Network Analysis Tool

~ 21 Jun 2017 ~

Remote Symbol Resolution

~ 19 May 2017 ~

"Four Keys to Effective ICS Incident Response"

~ 4 May 2017 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201704" hreflang="en">March-April 2017</a>

~ 17 Apr 2017 ~

Writing a libemu/Unicorn Compatability Layer

~ 31 Mar 2017 ~

Introducing Monitor.app for macOS

~ 8 Mar 2017 ~

Pen Test Poster: "White Board" - CMD.exe - C:\> netsh interface

~ 2 Mar 2017 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201702" hreflang="en">January-February 2017</a>

~ 22 Feb 2017 ~

Spear Phishing Techniques Used in Attacks Targeting the Mongolian Government

~ 11 Jan 2017 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201612" hreflang="en">November-December 2016</a>

~ 9 Jan 2017 ~

Credit Card Data and Other Information Targeted in Netflix Phishing Campaign

~ 4 Jan 2017 ~

FLARE Script Series: Querying Dynamic State using the FireEye Labs Query-Oriented Debugger (flare-qdb)

~ 30 Nov 2016 ~

One-Stop Shop Phishing Domain Targets Information from Customers of Several Indian Banks

~ 9 Nov 2016 ~

Extending Linux Executable Logging With The Integrity Measurement Architecture

Extending Linux Executable Logging With The Integrity Measurement Architecture

~ 7 Nov 2016 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201610" hreflang="en">September-October 2016</a>

~ 20 Oct 2016 ~

Rotten Apples: Resurgence

~ 9 Sep 2016 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201608" hreflang="en">July-August 2016</a>

~ 3 Sep 2016 ~

Thoughts on the "physically secure" ORWL computer

~ 18 Jul 2016 ~

Cerber: Analyzing a Ransomware Attack Methodology To Enable Protection