1.1      Introduction At the end of November, Check Point Research detected a new Office malware builder called APOMacroSploit, which was implicated in multiple malicious emails to more than 80 customers worldwide. In our investigation, we found that this…

Learn all about MacHound, a plugin for Bloodhound Active Directory, allowing to collect Active Directory relationships from MacOS devices.

This blog post is about the mechanics of a long tail iframe sandbox bypass found in a payload belonging to the persistent malvertising attacker that we call ScamClub.

PE-Packer is a simple packer for Windows PE files. The new PE file after packing can obstruct the process of reverse engineering.

A framework for constructing self-spreading binaries - redcode-labs/neurax

The functions and evolution of malware LODEINFO have been described in our past articles in February 2020 and June 2020. Yet in 2021, JPCERT/CC continues to observe activities related to this malware. Its functions have been expanding with some new...

In most cases, hackers

Research by: Eyal Itkin and Itay Cohen There is a theory which states that if anyone will ever manage to steal and use nation-grade cyber tools, any network would become untrusted, and the world would become a very dangerous place to live in. There is another…

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM. - WerWolv/ImHex

This blog discusses a DLL hijacking vulnerability affecting all versions of Windows Server 2012 (but not Server 2012 R2). This 0-day vulnerability can be exploited for privilege escalation by any regular user and does not require a system reboot, yet it will…

Don’t let cyber threats get the best of you. Read our post, Hancitor Infection Chain Analysis: An Examination of its Unpacking Routine and Execution Techniques, to learn more about cyber threats and cyber security.

Really nice book collection! 👇👇 https://t.co/Te7wc5MfEI

In case you missed it - we created a GitHub repo called "WinAPI Tricks". We've added a little bit of content to it. *All content is in C *Attached image lists current examples *A LOT more to come Check it out here: https://t.co/Xb2Y4ojjSq

Paper preprints and artifact links are now available for the 2021 NDSS Binary Analysis Research Workshop: https://t.co/QkcwUQ8FQp

Anti-Debug and Anti-Memory Dump for Android. Contribute to darvincisec/AntiDebugandMemoryDump development by creating an account on GitHub.

Our paper on similarity digest algorithms (joint work with M. Martín-Pérez and F. Breitinger) accepted at @DFRWS EU 2021 is finally out! https://t.co/8nlUib2zrO we will publish a blog post in @reverseame soon, stay tuned!

The Patch The patched versions are BIND 9.16.12 and BIND 9.11.28. To fix BIND 9.16, ISC fixed the buffer allocation size at (1). In BIND 9.11, they applied the patch as well. Conclusion This bug shows how vulnerabilities can reside undetected for years…

CrowdStrike puts together a list of connections and how cybercrime groups cooperate with each other.

Third-party code in security-critical apps is obviously suboptimal, but company says you can opt out

Gaining meaningful Insights out of Security Data