About a year have passed since CVE-2019-0685 vulnerability that I reported to MSRC got patched. Initially I planned to write about it sooner but time flies so fast. So here is a long overdue blog post about the vulnerability. CVE-2019-0685 is a reference…

Sergei is a veteran of the early days of the computing industry as it was
developing in the Soviet Union. I had the pleasure of working and learning from
him over the past year, and in that time I picked up more important lessons
about both life and embedded…

~450K QNAP NAS devices were vulnerable to a pre-auth root RCE, which chains multiple CVSS-9.8 vulnerabilities. ALL QNAP models were…

Ethical hacking platforms/trainings/CTFs: https://t.co/TbfGNmFoSg https://t.co/zPKaCYQCbW https://t.co/ncltAIOMx5 https://t.co/AWpU5v74nw https://t.co/oqBEVuN0ek https://t.co/xqggSRXt4d https://t.co/rSNwdodobS https://t.co/4pX0g44JLQ https://t.co/Z3ZhYiwFvl…

A blog from the world class Intelligence Group, Talos, Cisco's Intelligence Group

Over the past year, the security community - specifically Red Team Operators and Blue Team Defenders - have seen a massive rise in both public and private utilization of System Calls in windows malware for post-exploitation activities, as well as for the…

Parallels Desktop for Mac is one of the most popular virtualization programs for macOS, but there hasn’t been much public vulnerability research regarding this product. Last November, Reno Robert ( @renorobertr ) reported multiple bugs in Parallels to the…

In our new paper with HYAS, we dive deep into “Silent Night," a new banking Trojan recently tracked as Zloader/Zbot, and reminiscent of ZeuS.

The SSH service is critical, ensuring its security is key. This blog will describe how best to secure the SSH service from threat actors.

Hooking is a technique to intercept function calls/messages or events passed between software, or in this case malware. The technique can be used for malicious, as well as defensive cases. Rootkits…

Ever wondered about the security of your USB stack? We've explored it and found 10 CVEs on Linux and several crashes on Windows and MacOS with just a bit of fuzzing. Paper is ready, source will come at #SEC20: https://t.co/RtVcG0sRfi Comments welcome!

While analyzing real-world systems, memory analysts will often encounter anti-virus (AV) engines, EDRs, and similar products that, at first ...

The idea behind Fuzzowski, was to create the Network Protocol Fuzzer that we will want to use. The aim of this tool is to assist during...

Presented at DEF CON 28 Car Hacking Village.