Here's a first look at the Armbian Linux distribution for ARM devices on the Raspberry Pi 4 Model B single-board computer with 8GB RAM.

Highly Used Packages Identified Through Text Analysis

We found a suspicious binary and determined it as an IIS module, aimed at stealing credentials and enabling remote command execution from OWA. We named the malicious module ‘Owowa’,

Abstract:
In this webinar Matt Venn will demonstrate some ASIC reverse engineering and compromise its operation by introducing an undetectable error.

PadSec (making the world a better place through IoT padlocks) is losing market fast against their competitors…

Rodan Exploitation Framework. Contribute to Etisalat-Egypt/Rodan development by creating an account on GitHub.

Samsung Kernel Heap Leak in Vision DSP Driver

Elastic Security has identified active intrusions leveraging the newly identified BLISTER malware loader utilizing valid code-signing certificates to evade detection. We are providing detection guidance for security teams to protect themselves.

A new version of a malicious shell noscript targeting insecure cloud instances has recently been discovered.

CVE-2020-1599 is a vulnerability that can be abused by adding data ( that will be later executed) to the signature section of a file, for i...

Got malicious Microsoft Office files? Check out this deep dive into the different Office file formats and how they are abused by attackers.

A human-operated ransomware, Pysa encrypts the victim files and drops ransom notes to instruct users on how to recover the files.

Targets of spyware attacks in which each malware sample has a limited-scope and a short lifetime include industrial enterprises. Victim organizations’ SMTP services are abused to send phishing emails and collect stolen data.

With victims in the US, Australia and India, BlackCat is a new RaaS making a big impact. Learn more about this unique ransomware's behavior and IoCs.

Key Findings  Proofpoint identified a malware packer which researchers have dubbed DTPacker.  The payload decoding uses a fixed password containing former U.S. president Donald

Vulnerability Research on Low-Level Systems