Port 22

~ 8 Oct 2018 ~

Defeating the "Deal or No Deal" Arcade Game

~ 5 Oct 2018 ~

"Supposely" GRU using a Pineapple nano (see slide 26)

Debunking "OSINT Analysis of the TOR Foundation" and a few words about Tor's directory authorities

~ 4 Oct 2018 ~

Conspiracy Theories Around the "Presidential Alert"

~ 21 Sep 2018 ~

Friday Squid Blogging: British Columbia "Squid Run" Is a Tourist Attraction

~ 17 Sep 2018 ~

"...But I'm a CIP Cyborg Warrior with Real Kung Fu Grip... Then Prove It!"

~ 13 Sep 2018 ~

Bypassing Antivirus for Your Antivirus Bypass

Bypassing Antivirus for Your Antivirus Bypass

~ 10 Sep 2018 ~

Slides & presentation of "Unpacking the non-unpackable" (anti-static analytic new ELF packer) in R2CON2018

Chrome/Chromium now considers "www" to be a "trivial" subdomain and no longer shows it in the address bar.

~ 9 Sep 2018 ~

"Big Star Labs" spyware campaign affects over 11,000,000 people

~ 5 Sep 2018 ~

Company claim "New" way to access home routers and home networks

~ 30 Aug 2018 ~

LAteral Movement Encryption technique (a.k.a. The "LAME" technique)

~ 29 Aug 2018 ~

We Are Motherboard's Infosec Reporters: Let's Talk Journalism and "Cyber." Ask Us Anything!

~ 21 Aug 2018 ~

"Two Stage" BMW Theft Attempt

~ 18 Aug 2018 ~

GitHub - naltun/eyes: Golang rewrite of eyes.sh. Let's you perform domain/IP address information gathering. Wasn't it esr who said "With enough eyeballs, all your IP info are belong to us?"

~ 13 Aug 2018 ~

This new attack is described is a recently published research paper entitled "The Dangers of Key Reuse: Practical Attacks on IPsec IKE," set to be presented at the 27th Usenix Security Symposium later this week in Baltimore, USA. From the paper's abstract:

~ 8 Aug 2018 ~

BIOS Boots What? Finding Evil in Boot Code at Scale!

~ 7 Aug 2018 ~

Step: A New Open Source "Swiss Army Knife" for Zero Trust Security

~ 3 Aug 2018 ~

When "ASLR" Is Not Really ASLR - The Case of Incorrect Assumptions and Bad Defaults

~ 2 Aug 2018 ~

Kovter malware teardown, including "invisible" registry persistence

~ 18 Jul 2018 ~

How the Rise of Cryptocurrencies Is Shaping the Cyber Crime Landscape: The Growth of Miners

~ 28 Jun 2018 ~

RIG Exploit Kit Delivering Monero Miner Via PROPagate Injection Technique

~ 29 May 2018 ~

Remote Authentication GeoFeasibility Tool - GeoLogonalyzer

~ 24 Apr 2018 ~

Metamorfo Campaigns Targeting Brazilian Users

~ 23 Apr 2018 ~

Loading Kernel Shellcode

~ 17 Apr 2018 ~

"ICS Defense: It's Not a \"copy-paste\" from an IT playbook"

~ 10 Apr 2018 ~

Solving Ad-hoc Problems with Hex-Rays API

~ 5 Apr 2018 ~

Fake Software Update Abuses NetSupport Remote Access Tool

~ 23 Mar 2018 ~

SANNY Malware Delivery Method Updated in Recently Observed Attacks

~ 22 Feb 2018 ~

"Know Thyself Better Than The Adversary - ICS Asset Identification and Tracking"

~ 15 Feb 2018 ~

CVE-2017-10271 Used to Deliver CryptoMiners: An Overview of Techniques Used Post-Exploitation and Pre-Mining

~ 3 Feb 2018 ~

Attacks Leveraging Adobe Zero-Day (CVE-2018-4878) Threat Attribution, Attack Scenario and Recommendations

~ 29 Jan 2018 ~

"Triton\/TriSIS - In Search of its Twin"

~ 17 Jan 2018 ~

Microsoft Office Vulnerabilities Used to Distribute Zyklon Malware in Recent Campaign

~ 15 Jan 2018 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201712" hreflang="en">November-December 2017</a>

~ 11 Jan 2018 ~

FLARE IDA Pro Script Series: Simplifying Graphs in IDA

~ 29 Nov 2017 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201710" hreflang="en">September-October 2017</a>

~ 30 Oct 2017 ~

Introducing GoCrack: A Managed Password Cracking Tool

~ 23 Oct 2017 ~

New FakeNet-NG Feature: Content-Based Protocol Detection

~ 26 Sep 2017 ~

"Preparing for Cyber Security Incidents"

~ 11 Sep 2017 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201708" hreflang="en">July-August 2017</a>

~ 13 Jul 2017 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201706" hreflang="en">May-June 2017</a>

~ 5 Jul 2017 ~

Introducing Linux Support for FakeNet-NG: FLAREs Next Generation Dynamic Network Analysis Tool

~ 21 Jun 2017 ~

Remote Symbol Resolution

~ 19 May 2017 ~

"Four Keys to Effective ICS Incident Response"

~ 4 May 2017 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201704" hreflang="en">March-April 2017</a>

~ 17 Apr 2017 ~

Writing a libemu/Unicorn Compatability Layer

~ 31 Mar 2017 ~

Introducing Monitor.app for macOS

~ 8 Mar 2017 ~

Pen Test Poster: "White Board" - CMD.exe - C:\> netsh interface

~ 2 Mar 2017 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201702" hreflang="en">January-February 2017</a>

~ 22 Feb 2017 ~

Spear Phishing Techniques Used in Attacks Targeting the Mongolian Government

~ 11 Jan 2017 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201612" hreflang="en">November-December 2016</a>

~ 9 Jan 2017 ~

Credit Card Data and Other Information Targeted in Netflix Phishing Campaign

~ 4 Jan 2017 ~

FLARE Script Series: Querying Dynamic State using the FireEye Labs Query-Oriented Debugger (flare-qdb)

~ 30 Nov 2016 ~

One-Stop Shop Phishing Domain Targets Information from Customers of Several Indian Banks

~ 9 Nov 2016 ~

Extending Linux Executable Logging With The Integrity Measurement Architecture

Extending Linux Executable Logging With The Integrity Measurement Architecture

~ 7 Nov 2016 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201610" hreflang="en">September-October 2016</a>

~ 20 Oct 2016 ~

Rotten Apples: Resurgence

~ 9 Sep 2016 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201608" hreflang="en">July-August 2016</a>

~ 3 Sep 2016 ~

Thoughts on the "physically secure" ORWL computer

~ 18 Jul 2016 ~

Cerber: Analyzing a Ransomware Attack Methodology To Enable Protection

~ 7 Jul 2016 ~

<a href="https://www.us-cert.gov/ics/monitors/ICS-MM201606" hreflang="en">May-June 2016</a>

~ 24 Jun 2016 ~

Locky is Back Asking for Unpaid Debts

~ 7 Jun 2016 ~

Rotten Apples: Apple-like Malicious Phishing Domains

~ 2 Jun 2016 ~

IRONGATE ICS Malware: Nothing to See Here...Masking Malicious Activity on SCADA Systems

~ 25 Mar 2016 ~

Surge in Spam Campaign Delivering Locky Ransomware Downloaders

Surge in Spam Campaign Delivering Locky Ransomware Downloaders

~ 11 Mar 2016 ~

A Growing Number of Android Malware Families Believed to Have a Common Origin: A Study Based on Binary Code

~ 18 Feb 2016 ~

Maimed Ramnit Still Lurking in the Shadow

~ 9 Feb 2016 ~

FLARE Script Series: flare-dbg Plug-ins

~ 27 Jan 2016 ~

Hot or Not? The Benefits and Risks of iOS Remote Hot Patching

~ 28 Dec 2015 ~

FLARE Script Series: Automating Obfuscated String Decoding

~ 16 Nov 2015 ~

FLARE IDA Pro Script Series: Automating Function Argument Extraction

~ 4 Nov 2015 ~

iBackDoor: High-Risk Code Hits iOS Apps

~ 3 Nov 2015 ~

XcodeGhost S: A New Breed Hits the US

~ 26 Oct 2015 ~

iBackDoor: High-risk Code Sneaks into the App Store

~ 8 Sep 2015 ~

2015 FLARE-ON Challenge Solutions

~ 8 Aug 2015 ~

Windows Management Instrumentation (WMI) Offense, Defense, and Forensics

~ 19 Jul 2015 ~

Second Adobe Flash Zero-Day CVE-2015-5122 from HackingTeam Exploited in Strategic Web Compromise Targeting Japanese Victims

~ 30 Jun 2015 ~

Three New Masque Attacks against iOS: Demolishing, Breaking and Hijacking

~ 17 Jun 2015 ~

June 2 6/12/2015 Consulting Thought Leadership &quot;Proactively Engaged Questions Executives Should Ask Their Security Teams &quot; &quot;-Many breaches occur as a result of executive decisions made w/out full knowledge of the people/processes needed to prevent them; -Offers specific questions that execs should ask to understand and prevent a breach&quot; Jim Aldridge Kyrk Content Finalized Global June 2 6/12/2015 Consulting Thought Leadership &quot;Proactively Engaged Questions Executives Should Ask Their Security Teams &quot; &quot;-Many breaches occur as a result of executive decisions made w/out full knowledge of the people/processes needed to prevent them; -Offers specific questions that execs should ask to understand and prevent a breach&quot; Jim Aldridge Kyrk Content Finalized GlobCaching Out: The Value of Shimcache for Investigators

~ 23 May 2015 ~

NitlovePOS: Another New POS Malware

~ 20 Mar 2015 ~

7 tasks that waste your IT teams time

~ 13 Mar 2015 ~

Will Windows 10 leave enterprises vulnerable to zero-days?

~ 12 Mar 2015 ~

Hackers phish for data with fake Apple Watch giveaway

~ 10 Mar 2015 ~

Operating System Vulnerabilities, Exploits and Insecurity

~ 9 Mar 2015 ~

CryptoFortress mimics TorrentLocker but is a different ransomware

FBI investigating apparent ISIS attacks on Western websites

DDoS attack on feminist blog backfires on International Women's Day

~ 6 Mar 2015 ~

Lysa Myers: "There are still only a handful of women in the security field"

~ 5 Mar 2015 ~

Casper Malware: After Babar and Bunny, Another Espionage Cartoon

~ 4 Mar 2015 ~

FREAK attack: security vulnerability breaks HTTPS protection

~ 2 Mar 2015 ~

Blu-ray exploits could allow computer malware infection

~ 26 Feb 2015 ~

Europol shuts down Ramnit botnet used to steal bank details

~ 25 Feb 2015 ~

Top 10 breaches of 2014 attacked 'old vulnerabilities', says HP

~ 20 Feb 2015 ~

Lenovo and Superfish? Don't panic, you may not be affected

~ 19 Feb 2015 ~

iOS Masque Attack Revived: Bypassing Prompt for Trust and App URL Scheme Hijacking

Jamie Oliver website serves up a side of malware