Dynamic malware analysis is the preferred way to determine the legitimacy of an application for many AVs/EDRs/MDSs. Unlike static analysis, dynamic analysis can capture and analyze Windows API calls…

✅ Registrarse en sitio web oficial 1win casino & casa de apuestas en México ✓ Bono de 14.000 MXN ✔️ Juega con dinero real ✔ Tragaperras ✔️

Introduction to Windows Drivers Exploitation

iOS 14 is now available to the public, and with it comes the iOS 14.0 security content update . One of the vulnerabilities you'll see listed...

In this post, we are going to take a look at a couple of interesting methods of leveraging third-party technologies to achieve our code injection goals. For us, this translates to running code in the context of a target application without having to resort…

When malware lasts longer than your washing machine

Tiny reboot-less security patches for critical vulnerabilities in Windows, Microsoft Office, and other Windows products

Lambda expressions are one of the most powerful additions to C++11, and they continue to evolve with each new C++ language standard. In this article, we’ll go through history and see the evolution of this crucial part of modern C++.
The second part is available:…

An italian company, SoftMining, developed an Android COVID-19 contact tracing application “SM-COVID-19”. Unfortunately, malware authors…

How to perform source code review to find vulnerabilities in web applications.

The world’s most popular torrent client, uTorrent, contained a security vulnerability — later to be called CVE-2020-8437— that could be exploited by a remote...

Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.

Microsoft took action against the Trickbot botnet, disrupting one of the world’s most persistent malware operations. Microsoft worked with telecommunications providers around the world to disrupt key Trickbot infrastructure.

(Chinese language -- good series) Go Reversing: part 1: https://t.co/WK3RWxrMJp part 2: https://t.co/A8xEooGlnw part 3: https://t.co/DMT2CxKaa1 part 4: https://t.co/2jVvmAc3eE part 5: https://t.co/4JQ2WedvxC #ReverseEngineering #golang #security #malware

Originally posted on 07/23/2017 at gist.github.com

So despite the efforts Microsoft is undertaking to secure their code bases the last months brought us: * Logic (crypto) bug to take over domain controllers (CVE-2020-1472) * True kernel RCE in ICMPv6 (CVE-2020-16898) * Outlook RCE, preview sufficient (CVE…

TokyoWesterns CTF 2020 | writeups by @terjanq. GitHub Gist: instantly share code, notes, and snippets.

This first part of a two-part blog series explores the origins of ransomware, BGH and extortion, as well as introducing some of the criminal adversaries who are dominating this data leak extortion ecosystem.