Tag: obfuscation
-
Microsoft Security Blog: Frequent freeloader part II: Russian actor Secret Blizzard using tools of other groups to attack Ukraine
Source URL: https://www.microsoft.com/en-us/security/blog/2024/12/11/frequent-freeloader-part-ii-russian-actor-secret-blizzard-using-tools-of-other-groups-to-attack-ukraine/ Source: Microsoft Security Blog Title: Frequent freeloader part II: Russian actor Secret Blizzard using tools of other groups to attack Ukraine Feedly Summary: Since January 2024, Microsoft has observed Secret Blizzard using the tools or infrastructure of other threat groups to attack targets in Ukraine and download its custom backdoors Tavdig and…
-
Cisco Talos Blog: Something to Read When You Are On Call and Everyone Else is at the Office Party
Source URL: https://blog.talosintelligence.com/something-to-read-when-you-are-on-call-and-everyone-else-is-at-the-office-party/ Source: Cisco Talos Blog Title: Something to Read When You Are On Call and Everyone Else is at the Office Party Feedly Summary: Its mid-December, if you’re on-call or working to defend networks, this newsletter is for you. Martin discusses the widening gap between threat and defences as well as the growing…
-
Hacker News: X41 Reviewed Mullvad VPN
Source URL: https://x41-dsec.de/news/2024/12/11/mullvad/ Source: Hacker News Title: X41 Reviewed Mullvad VPN Feedly Summary: Comments AI Summary and Description: Yes Summary: The text details a white box penetration test conducted by X41 on the Mullvad VPN application, revealing a high security standard with six vulnerabilities identified. The report highlights the complexity of the application running across…
-
Hacker News: LLVM-Powered Devirtualization
Source URL: https://blog.thalium.re/posts/llvm-powered-devirtualization/ Source: Hacker News Title: LLVM-Powered Devirtualization Feedly Summary: Comments AI Summary and Description: Yes Summary: The text elaborates on the techniques and methodologies for deobfuscating virtualized binaries, primarily utilizing dynamic taint analysis and LLVM optimization strategies. This study showcases new approaches to reverse engineering obfuscated binaries, which is critical in the context…
-
Cloud Blog: Cloud CISO Perspectives: Ending ransomware starts with more reporting
Source URL: https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-ransomware-cyber-insurance-reporting/ Source: Cloud Blog Title: Cloud CISO Perspectives: Ending ransomware starts with more reporting Feedly Summary: Welcome to the second Cloud CISO Perspectives for November 2024. Today, Monica Shokrai, head of business risk and insurance, Google Cloud, and Kimberly Goody, cybercrime analysis lead, Google Threat Intelligence Group, explore the role cyber-insurance can play…
-
Cisco Talos Blog: Finding vulnerabilities in ClipSp, the driver at the core of Windows’ Client License Platform
Source URL: https://blog.talosintelligence.com/finding-vulnerabilities-in-clipsp-the-driver-at-the-core-of-windows-client-license-platform/ Source: Cisco Talos Blog Title: Finding vulnerabilities in ClipSp, the driver at the core of Windows’ Client License Platform Feedly Summary: By Philippe LaulheretClipSP (clipsp.sys) is a Windows driver used to implement client licensing and system policies on Windows 10 and 11 systems.Cisco Talos researchers have discovered eight vulnerabilities related to clipsp.sys…
-
Cloud Blog: Empowering Gemini for Malware Analysis with Code Interpreter and Google Threat Intelligence
Source URL: https://cloud.google.com/blog/topics/threat-intelligence/gemini-malware-analysis-code-interpreter-threat-intelligence/ Source: Cloud Blog Title: Empowering Gemini for Malware Analysis with Code Interpreter and Google Threat Intelligence Feedly Summary: One of Google Cloud’s major missions is to arm security professionals with modern tools to help them defend against the latest threats. Part of that mission involves moving closer to a more autonomous, adaptive…
-
Cisco Talos Blog: New PXA Stealer targets government and education sectors for sensitive information
Source URL: https://blog.talosintelligence.com/new-pxa-stealer/ Source: Cisco Talos Blog Title: New PXA Stealer targets government and education sectors for sensitive information Feedly Summary: Cisco Talos discovered a new information stealing campaign operated by a Vietnamese-speaking threat actor targeting government and education entities in Europe and Asia. AI Summary and Description: Yes Summary: The text discusses a threat…
-
Hacker News: North Korean hackers create Flutter apps to bypass macOS security
Source URL: https://www.bleepingcomputer.com/news/security/north-korean-hackers-create-flutter-apps-to-bypass-macos-security/ Source: Hacker News Title: North Korean hackers create Flutter apps to bypass macOS security Feedly Summary: Comments AI Summary and Description: Yes Summary: North Korean threat actors are exploiting macOS by creating trojanized applications, particularly targeting cryptocurrency themes, that bypass Apple’s security mechanisms. These apps, developed using the Flutter framework, present a…