The focus of this article isn’t really the history so much as what can OME in M365 do today, right now, what it cannot do, and some of my most frequent recommendations that I share with custo…

HTTP Request Smuggling in NodeJS

Technical Analysis of Crytox Ransomware: A multi-stage ransomware with a weak key generation algorithm. Read more.

If you know who I am, you might think that this post title is clickbait. Maybe it is, a little. But the truth is, you should do printf debugging! Sometimes. Often not. But sometimes, you should!
Let me explain. When most of us first started programming, we…

Hunting for the loading of unsigned DLLs can help you identify attacks and threat actors in your environment. Our examples include well-known APTs.

In this intrusion from May 2022, the threat actors used BumbleBee as the initial access vector. BumbleBee has been identified as an initial access vector utilized by several ransomware affiliates. In this intrusion, we see the threat actor use BumbleBee to…

Hacktivists operating the Telegram channels XakNet Team

Introduction Until last year, hacktivism has primarily been associated with groups like Anonymous – decentralized and unstructured collectives made up of private individuals with a variety of agendas. Anonymous has launched multiple campaigns against a wide…

In this blog post, the main difference between signature-based and behavior-based Detections are explained. In addition, examples are shown with respective D...

DJVU is new variant of STOP ransomware, boasting multiple layers of obfuscation, which makes it difficult to detect and analyze. This is a constantly evolving ransomware family, making it a prevalent threat to both individuals and enterprises alike.

The XNU kernel is essential to iOS and macOS security. In this video, we'll take a look into Apple's open-source releases as well as free tools to analyze closed-source extensions.

Full playlist of reversing shorts: https://www.youtube.com/playlist?list…

Every week, almost without fail, I come across one thing that confuses, entertains, or most commonly infuriates me. I’ve decided to keep a…

What is your worst supply chain nightmare and why is it somebody that could take over all the PHP packages at once? Let's deep dive into how we could demonstrate it!