To wrap up this blog series we wanted to include one more technique that you can use when exploiting this class of vulnerabilities. This technique, introduced to us by Abdelhamid Naceri, becomes useful when you have an on-boot arbitrary delete primitive that…

🧵1/2 Professor David J. Malan demonstrates how to use Valgrind to identify and resolve memory-related bugs in a C program.

👇The best introduction to computer science I have seen in my life👇

GUI to profilers such as Valgrind. Contribute to KDE/kcachegrind development by creating an account on GitHub.

Named pipes are a mechanism for inter-process communication (IPC) in Windows operating systems. detect suspicious and malicious named pipe with splunk and these threat hunting searches

In mid-2023, Volexity detected and responded to multiple incidents involving systems becoming infected with malware linked to StormBamboo (aka Evasive Panda, and previously tracked by Volexity under “StormCloud”). In those incidents, multiple malware families…

Introducing 3TOFU -- a Harm-Reduction process to Supply Chain Security when downloading software that cannot be verified cryptographically

Apache Airflow is an open-source platform for programmatically authoring, scheduling, and monitoring workflows. While it offers robust features for managing complex workflows, it has experienced...

While some ransomware will appear as quickly as they fade out of existence, some establish an extended stay, and others simply change their virtual clothes. We recently came across an example of the latter — calling itself Zola.

Retr0's Threat Research

Access consolidated remediation and guidance resources for the CrowdStrike Falcon content update affecting Windows hosts.

Bug 1902307 - Better validate shm sections. r=gfx-reviewers,lsalzman

Explore the potential impact of a critical CVE-2024-43425 vulnerability in Moodle, a widely-used Learning Management System.