Sigma Rules - a generic open-source signature format for SIEM Systems. What Snort is to network traffic, and YARA to files, Sigma is to logs. Released in 2017, Sigma rules are used as a common language to build detection rules for different SIEM systems.

To disrupt human-operated ransomware attacks as early as possible, we enhanced the AI-based protections in Microsoft Defender for Endpoint with a range of specialized machine learning techniques that swiftly identify and block malicious files, processes,…

With a tool like Falco, it’s possible to detect when specific container capabilities like CAP_SYS_ADMIN are misused.

Shodan Monitoring integration for TheHive. Contribute to KaanSK/shomon development by creating an account on GitHub.

Hi! According to the official documentation, Semgrep […]

Gain an understanding of the Compound File Binary Format and OLE Structures to Mess with CVE-2022-30190 in this blog post by Cymulate.

fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain. - GitHub - musana/fuzzuli: fuzzuli is a url fuzzing tool that aims to find ...

# Introduction

Contribute to Mr-Un1k0d3r/EDRs development by creating an account on GitHub.

A breakdown of the Anti-VM skimmer and its variants from the earliest incarnation to the latest iteration served from staticounter.]net.

Ci/CD gets better, faster, and stronger with containers, but the security dilemma is still on the table. See what breaches can teach us.

Query HIBP data with SQL! Open source CLI. No DB required.

Posted by Ian Beer, Google Project Zero NOTE: This issue was CVE-2021-30983 was fixed in iOS 15.2 in December 2021.   Towards the ...

NodeJS runtime protection for supply chain attacks - GitHub - yaakov123/hagana: NodeJS runtime protection for supply chain attacks

High signal information security sources Goggle. Contribute to forcesunseen/netsec-goggle development by creating an account on GitHub.

Grav is an easy to use, yet powerful, open source flat-file CMS

Reveals invisible links within JavaScript files. Contribute to riza/linx development by creating an account on GitHub.

OpenSSL version 3.0.4, released on June 21th 2022, is susceptible to remote memory corruption which can be triggered trivially by an attacker. BoringSSL, LibreSSL and the OpenSSL 1.1.1 branch are n…

Contribute to hardenedvault/vaultboot development by creating an account on GitHub.

A new banking trojan targeting Europe has been discovered by Cleafy's Threat Intelligence Team. We dubbed it Revive and it is an evolution of simple spyware into a banking trojan, with the key capability of conducting Account Takeover attacks: here's the…