Experimental News Clipping Site

Tag: indicators of compromise

  • Cloud Blog: Backscatter: Automated Configuration Extraction

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/backscatter-automated-configuration-extraction/ Source: Cloud Blog Title: Backscatter: Automated Configuration Extraction Feedly Summary: Written by: Josh Triplett Executive Summary Backscatter is a tool developed by the Mandiant FLARE team that aims to automatically extract malware configurations. It relies on static signatures and emulation to extract this information without dynamic execution, bypassing anti-analysis logic present in…

  • Unit 42: One Step Ahead in Cyber Hide-and-Seek: Automating Malicious Infrastructure Discovery With Graph Neural Networks

    —

    by

    Kurt Seifried
    in

    Source URL: https://unit42.paloaltonetworks.com/graph-neural-networks/ Source: Unit 42 Title: One Step Ahead in Cyber Hide-and-Seek: Automating Malicious Infrastructure Discovery With Graph Neural Networks Feedly Summary: Graph neural networks aid in analyzing domains linked to known attack indicators, effectively uncovering new malicious domains and cybercrime campaigns. The post One Step Ahead in Cyber Hide-and-Seek: Automating Malicious Infrastructure Discovery…

  • The Register: Zero-day exploits plague Ivanti Connect Secure appliances for second year running

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/09/zeroday_exploits_ivanti/ Source: The Register Title: Zero-day exploits plague Ivanti Connect Secure appliances for second year running Feedly Summary: Factory resets and apply patches is the advice amid fortnight delay for other appliances The cybersecurity industry is urging those in charge of defending their orgs to take mitigation efforts “seriously" as Ivanti battles two…

  • Threat Research Archives – Unit 42: Fighting Ursa Luring Targets With Car for Sale

    —

    by

    system automation
    in

    Source URL: https://unit42.paloaltonetworks.com/fighting-ursa-car-for-sale-phishing-lure/ Source: Threat Research Archives – Unit 42 Title: Fighting Ursa Luring Targets With Car for Sale Feedly Summary: AI Summary and Description: Yes Summary: The text presents a detailed account of a sophisticated cybersecurity threat from the Russian group Fighting Ursa, which targeted diplomats using a phishing campaign disguised as a car…

  • Threat Research Archives – Unit 42: Accelerating Analysis When It Matters

    —

    by

    system automation
    in

    Source URL: https://unit42.paloaltonetworks.com/accelerating-malware-analysis/ Source: Threat Research Archives – Unit 42 Title: Accelerating Analysis When It Matters Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the efficient methods for malware analysis implemented by security professionals, particularly through the use of automated tools like Advanced WildFire’s Malware Configuration Extraction (MCE). This process significantly accelerates…

  • Microsoft Security Blog: Frequent freeloader part II: Russian actor Secret Blizzard using tools of other groups to attack Ukraine

    —

    by

    system automation
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2024/12/11/frequent-freeloader-part-ii-russian-actor-secret-blizzard-using-tools-of-other-groups-to-attack-ukraine/ Source: Microsoft Security Blog Title: Frequent freeloader part II: Russian actor Secret Blizzard using tools of other groups to attack Ukraine Feedly Summary: Since January 2024, Microsoft has observed Secret Blizzard using the tools or infrastructure of other threat groups to attack targets in Ukraine and download its custom backdoors Tavdig and…

  • Hacker News: Researchers discover first UEFI bootkit malware for Linux

    —

    by

    system automation
    in

    Source URL: https://www.bleepingcomputer.com/news/security/researchers-discover-bootkitty-first-uefi-bootkit-malware-for-linux/ Source: Hacker News Title: Researchers discover first UEFI bootkit malware for Linux Feedly Summary: Comments AI Summary and Description: Yes Summary: The discovery of ‘Bootkitty,’ the first UEFI bootkit targeting Linux systems, signifies a concerning evolution in malware threats that traditionally focused on Windows. The research uncovers how Bootkitty operates beneath the…

  • Hacker News: RomCom exploits Firefox and Windows zero days in the wild

    —

    by

    system automation
    in

    Source URL: https://www.welivesecurity.com/en/eset-research/romcom-exploits-firefox-and-windows-zero-days-in-the-wild/ Source: Hacker News Title: RomCom exploits Firefox and Windows zero days in the wild Feedly Summary: Comments AI Summary and Description: Yes Summary: The text provides a detailed analysis of critical zero-day vulnerabilities discovered in Mozilla products, specifically Firefox, Thunderbird, and the Tor Browser, which are being exploited by a Russia-aligned cyber…