Category Archive

Researchers analyzed six malware families that are using the protectors Themida and VMProtect. None of the samples used code virtualization, significantly simplifying the analysis, as only one sample had anti-debugging enabled.  The malware code itself was largely unprotected, except for …

Hackers often abuse weaponized Word docs, as they can contain macros that contain or exploit flaws inside those Word files to run destructive code upon being opened by the intended victims. It enables an attacker to employ this tool to …

A notorious figure known as IntelBroker has claimed to have leaked a trove of Apple’s internal tools. The announcement was made via a post on the social media platform Twitter through the DarkWebInformer account. The post, which has since gone …

A novel information-stealing campaign detailing the attackers’ tactics, techniques, and procedures (TTPs) throughout the attack lifecycle, where the Mitre ATT&CK framework is used to classify these TTPs and identify potential detection points.  By examining the campaign’s behavior and communication with …

Google has released a critical security update for its Chrome browser, addressing six high-severity vulnerabilities that could potentially lead to browser crashes and other serious security issues. The update, version 126.0.6478.114/115 for Windows and Mac and 126.0.6478.114 for Linux is …

Hackers exploit the Windows BitLocker tool, as this utility offers a very powerful tool for selectively encrypting access to the system or data, which helps lock users out.                                                    Attackers can use BitLocker to encrypt the victim’s files, making them inaccessible …

Trellix has patched a critical security vulnerability in its Intrusion Prevention System (IPS) Manager, tracked as CVE-2024-5671. This flaw, caused by insecure deserialization in certain workflows, could allow unauthenticated remote attackers to execute arbitrary code, posing a severe risk to …

An organization’s SOC (Security Operations Center) monitors and analyzes network, system, and data security. The SOC tools detect, investigate, and respond to cybersecurity risks and incidents. Security analysts, incident responders, and engineers monitor the organization’s networks and systems for security …