Research by: hasherezade Highlights Introduction Rhadamanthys is an information stealer with a diverse set of modules and an interesting multilayered design. In our last article on Rhadamanthys [1], we focused on the custom executable formats used by this…

Introducing a novel technique for e-mail spoofing

This report is a little different than our typical content. We were able to analyze data from a perspective we typically don’t get to see… a threat actor’s host! In early November…

PowerShell PE Parser. Contribute to jonny-jhnson/PowerParse development by creating an account on GitHub.

CVE-2023-6817, poses a severe threat with a CVSS score of 7.8, categorizing it as a high-severity issue, also PoC exploit published.

The story of CVE-2023-6483, my first CVE and biggest security disclosure yet.

ESET researchers document a series of new OilRig downloaders, all relying on legitimate cloud service providers for C&C communications.

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

In part 1 of this two-part series, Akamai researchers explore two new Windows vulnerabilities that could lead to remote code execution against Outlook clients.

A single .exe binary which runs DOOM on DOS 6, Windows 95 and Windows 10 (and probably everything in between). - nneonneo/universal-doom

Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.

In this post, I’ll look at a security-related change in version r40p0 of the Arm Mali driver that was AWOL in the January update of the Pixel bulletin, where other patches from r40p0 was applied, and how these two lines of changes can be exploited to gain…

Prying Deep - An OSINT tool to collect intelligence on the dark web. - iudicium/pryingdeep

Barracuda Networks has faced a formidable challenge with the discovery of two zero-day vulnerabilities, CVE-2023-7102 and CVE-2023-7101