We found a piece of a particularly sophisticated Android ransomware with novel techniques and behavior, exemplifying the rapid evolution of mobile threats that we have also observed on other platforms.

By Warren Mercer, Paul Rascagneres and Vitor Ventura.

* The Azerbaijan public sector and other important organizations are still targeted by new versions of PoetRAT.
* This actor leverages malicious Microsoft Word documents alleged to be from the Azerbaijan…

Date:  2020-10-13 Author:  Kevin2600 CVE:  CVE-2020-27524 Version:    Audi A7 2014 MMI Vendor :  https://www.audi.com/en.html Attack-Vector:...

Learn how to emulate, trace, debug, and Reverse Engineer UEFI modules in part 2 of our new blog series on Firmware Security

Introduction Everyone knows how to track which processes run on Linux, but almost no-one tracks them accurately. In fact, all of the methods listed in this post have some deficiency or another. Lets define requirements:
All processes should be logged including…

NCC Group Technical Advisory: Pulse Connect Secure - RCE via Template Injection (CVE-2020-8243)

Last March, Roberto Amado and I (Víctor Calvo) gave a talk at RootedCON 2020 titled Sandbox fingerprinting: Avoiding analysis environments. The talk consisted of two parts, the first of which dealt with classifying public sandbox environments for malware…

BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution Blog post available soon on: https://t.co/2SDRm6PZaQ Google Security Research Repository: https://t.co/0HolidyWvV Intel Security Advisory: https://t.co/kfGj3MWajy Video: https://t.co/sE35AoD0V4

Here's what you need to begin a career in Malware Analysis.

an increasing number of malware authors are opting to convert Python to executables. Today we look at how to triage this type of malware.

News, Updates and Events of splone.

The typical timing of patch releases, exploit development and CVE publication underscores the need for effective vulnerability management.

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities - rasta-mouse/Watson

After seeing Oracle Solaris compromises, we analyzed the exploit to determine how it worked and then reported it to Oracle.

By Vanja Svajcer, with contributions from Caitlin Huey.

* We are used to ransomware attacks and big-game hunting making headlines, but there are still methods adversaries use to monetize their efforts in less intrusive ways.
* Cisco Talos recently recorded…

📌 [ 繁體中文 | English ] Hi, it’s a long time since my last article. This new post is about my research this March, which talks about how I found vulnerabilities on a leading Mobile Device Management