The security research team explains the attack scenario with a vulnerable AWS Lambda function could be a threat used by attackers.

In October of this year, we received a report from ngocnb and khuyenn from GiaoHangTietKiem JSC covering a SQL injection vulnerability in WordPress. The bug could allow an attacker to expose data stored in a connected database. This vulnerability was recently…

BLKSMTH | S2W TALON

Prelude This post is about the personal experiences of me; A noobie hacker- who is super new into router reversing and the challenges I had to face, the research I did and the things I had learned …

Posted by Natalie Silvanovich, Project Zero Zoom  is a video conferencing platform that has gained popularity throughout the pandemic. U...

Twitter: @s4tan GitHub: https://github.com/enkomio/ In this post I'll analyze a piece of code that induces IDA Pro to decompile t...

Methodology for reverse engineering Windows drivers, finding vulnerabilities and understanding their exploitability.

red team, blue team, penetration testing, red teaming, threat hunting, digital forensics, incident response, cyber security, IT security

During my 6-months intership, I developed a tool to ease vunerability research on Java applications.

At the end of 2021, we inspected UEFI firmware that was tampered with to embed a malicious code we dub MoonBounce. In this report we describe how the MoonBounce implant works and how it is connected to APT41.

CVE-2021-34600: How predictable random numbers (literally) open the door for attackers: Our discovery of a flaw in the generation of AES keys, used for both physical and remote access, in a popular alarm system’s parameterization software. Includes a proof…

A curated list of awesome resources related to executable packing - packing-box/awesome-executable-packing

Part 5 of a series covering fuzzer development using LibAFL

Security is the poster child of a Non-Functional Requirement: most people don’t care until the proverbial fecal matter hits the rotary propeller. Consequences can range from losing reputation to legal liability to putting the business out. In my post on running…

Linux maintainers and vendors disclosed a heap overflow vulnerability in the Linux Kernel causing DoS, escape container or elevate privileges

Microsoft reported evidence of destructive malware targeting organizations in Ukraine starting from January 13 . The LIFARS threat intelligence team have A Detailed Analysis of WhisperGate Targeting Ukrainian Organizations

The mobile banking malware BRATA keeps evolving. Read here the new Technical Report, which explains in detail how it monitors banks account and how to prevent it.