Early last week, Google released a new stable update for Chrome. The update included a single security fix that was reported by Apple's Security Engineering and Architecture (SEAR) team. The issue, CVE-2023-4863, was a heap buffer overflow in the WebP image…

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cont…

Group-IB analysts discovered and analyzed a cryptojacking campaign on a popular educational resource using Group-IB Managed XDR.

In a regular threat and vulnerability hunting activity, SOCRadar has discovered during their research that thousands of DICOM servers were...

Boost this channel to help it unlock additional features.

A C++ tool to unstrip Rust/Go binaries (ELF and PE) - h311d1n3r/Cerberus

Major public institutions and organizations that handle sensitive data frequently enforce strong security policies by implementing network separation policies that segregates their internal work networks and internet network using air gaps to prevent the…

ESET researchers document OilRig’s Outer Space and Juicy Mix campaigns, targeting Israeli organizations in 2021 and 2022

Вебсайт Державної служби спеціального зв’язку та захисту інформації України

How to gain initial access via a hardware implant.

Platform that enables Windows driver development in Rust - microsoft/windows-drivers-rs

Just like we label documents, it would be nice to label incidents or rules with the TLP so people instantly know if something can or can’t…

China-aligned threat actors are increasingly involved in strategic intrusions in Africa, aiming to extend the PRC's influence across the continent.

ESET researchers have discovered Deadglyph, a sophisticated backdoor used by the infamous Stealth Falcon group for espionage in the Middle East

Volexity has identified several long-running and currently active campaigns undertaken by the threat actor Volexity tracks as EvilBamboo (formerly named Evil Eye) targeting Tibetan, Uyghur, and Taiwanese individuals and organizations. These targets represent…

We explore the privacy of machine learning **systems**, and show how many standard components of the ML pipeline create side-channel vulnerabilities that leak private user data.

I recently encountered a blog post by Signal Labs about using in-memory disassembly to perform EDR unhooking. In the post, the authors outline a technique whereby hook jumps implemented by Sophos are followed in order to find the relocated original syscall…

18 Sep 2023 — Borja Merino