The NSA disclosed massive backdoors today. PHP with two critical unauthenticated remote code execution bugs already being used. LiteLLM…

Learn how to document malware behavior, analyze technical evidence, assess risk, and write clear cybersecurity reports with practical…

At a glance Malware family Custom PaperCut exploit kit, Rust credential collectors, chisel-based reverse SOCKS5 tunnels Threat actor Unnamed; suspected Russian-speaking operator using AI coding ag…

A Firewall Bug Becomes a Ransomware Tool A flaw in Palo Alto Networks enterprise firewalls has become a full-fledged ransomware tool. It lets attackers enter protected networks without a password.…

At a glance Malware family SafePay ransomware (encrypted files end in .SafePay) Threat actor SafePay ransomware group; no individuals named Targets At least 600 victims across critical infrastruct…

12 Practical Malware Analysis Labs Every Cybersecurity Beginner Should Try

12 Practical Malware Analysis Labs Every Cybersecurity Beginner Should Try

Welcome to this new Medium post, today we are going to explore a shellcode execution technique that abuses SetupIterateCabinet(a Cabinet…

Task 3

After a three-month lull, Prince of Persia hid a Tornado C&C server on US shared hosting, its first US-based server since 2016.