Type confusion in the Chrome renderer reachable from a malicious website.

In 1999, a far-fetched movie about a dystopia run by intelligent machines captured our imaginations (and to this day, remains my favorite film). Twenty-four years later, the line between fact and...

Our DevOps threat matrix is a comprehensive knowledgebase defenders can use to track and build defenses against relevant attack techniques.

By Michele Campa Overview We describe a method to exploit a Windows Nday vulnerability to escape the Adobe sandbox. This vulnerability is assigned CVE-2021-31199 and it is present in multiple Windows 10 versions. The vulnerability is an out-of-bounds write…

Keep calm and grab a shell

Obfu[DE]scate is a de-obfuscation tool for Android APKs that uses fuzzy comparison logic to identify similarities between functions, even if they have been renamed as part of obfuscation. It compar...

Stealer, backdoor, executable, dropper and library: a complete analysis of the OrBit malware with Stormshield's CTI team.

A detailed article on how I exploited Remote Command Execution (RCE) with the help of the Vulnerability Chain.

Effective security incident response depends on adequate logging, as described in the AWS Security Incident Response Guide. If you have the proper logs and the ability to query them, you can respond more rapidly and effectively to security events. If a security…

Binarly today announced the general release of the Binarly Transparency Platform, delivering unprecedented transparency for device supply chains enabl

Overview


On Oct 21, 2022, 360Netlab's honeypot system captured a suspicious ELF file ee07a74d12c0bb3594965b51d0e45b6f, which propagated via F5 vulnerability with zero VT detection, our system observces that it communicates with IP 45.9.150.144 using SSL…

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

An x64dbg plugin which marks XFG call signatures as data - m417z/x64dbg-xfg-marker

Check Point Research recently discovered three vulnerabilities in the "Microsoft Message Queuing" service, commonly known as MSMQ. These vulnerabilities were disclosed to Microsoft and patched in the April Patch Tuesday update. The most severe of these, dubbed…

In February 2023, we found a zero-day exploit, supporting different versions and builds of Windows, including Windows 11. This particular zero-day was used by a sophisticated cybercrime group that carries out ransomware attacks.

We recently discovered two vulnerabilities in pretalx and found a generic technique to gain code execution from a file write.

Vulnerability intelligence that predicts avenues of attack with speed and accuracy.