Hive ransomware is one of the new ransomware families in 2021 that poses significant challenges to enterprises worldwide. We take an in-depth look at the ransomware group’s operations and discuss how organizations can bolster their defenses against it.

DirtyMoe's Rapid Worming Expansion

Relaying to Greatness: Windows Privilege Escalation by abusing the RPC/DCOM protocols

NTLM “Relaying” is a well known replay attack for Windows systems in which the attacker performs a man in the middle and acts on behalf of the victim while communicating…

Xepor, a web routing framework for reverse engineers and security researchers, brings the best of mitmproxy & Flask - GitHub - xepor/xepor: Xepor, a web routing framework for reverse engine...

FOREWORD: Pandora’s code looks very weird and obfuscate complicated, so this analysis does not cover all its functions.I’m not a crypto expert, so I won’t dive into Pandora’…

We would like to thank researcher Abdelhamid Naceri for his great work in developing these exploit techniques, as well as for the vulnerabilities he has been reporting to our program. We look forward to seeing more from him in the future. Until then, follow…

Developers are exploring new tools and methodologies to ensure the next log4j doesn’t happen. Will it work?

Our first CTF is over! 👏 Thanks to all the students for participating ❤️. Soon (next month?) we will make a presentation (by the participants too!) to show how to solve the challenges and give the prizes to the 1st&2nd team /cc @catedra_TEF_UZ @EINAunizar…

Dragos is observing evidence of multiple automotive manufacturers compromised by Emotet. A malware strain & a cybercrime operation.

As the war in Ukraine rages on, Sandworm, one of the world's most notorious APT groups, enters the spotlight again.

Four Russian government employees were charged by the DoJ for attack campaigns targeting hundreds of energy sector companies and organizations in 135 countries, including the US.

ESET researchers have analyzed three malicious Android apps that attempt to steal their login credentials.from the customers of eight Malaysian banks.

I tend to find ways of occupying myself with new exciting things. It might be a new language I try to learn to speak (not much success there), a new instrument I try to learn to play (I have no mus…

Analysis and exploitation of Linux kernel vulnerabilities CVE-2022-1015 and CVE-2022-1016. I talk about how I found these vulnerabilities, explain the internals of nf_tables and come up with an local privilege escalation exploitation strategy.

Rip Raw is a small tool to analyse the memory of compromised Linux systems. It is similar in purpose to Bulk Extractor

Journey through this post to see how KASLR was previously bypassed on Windows 10, as well as tips on how to look for such bypasses

Introduction It’s been a while since I’ve done one of these, and one of my goals this year is to do more so here we are. A side project of mine is kind of reaching a good stopping point so I’ll have more free-time to do my own research and blog again. Looking…