Every day, blog posts and news articles warn us about the danger of artificial intelligence (AI) and how the technology behind it can be used by criminals to perform sophisticated attacks.

Our clients often ask, “Should we be worried?” Emerging technology…

Not sure how to Google dork a specific website? Read this article to learn what Google dorking is, how to Google dork, and issues to pay attention to.

We will go through the analysis of chaos malware based on our captured attacks with an emphasis on persistence techniques.

The full OpenSIPS Security Audit report is published, with all details on how to reproduce the vulnerabilities found, root cause analysis and methodology used

Posted by Tim Willis, Project Zero Note: Until security updates are available, users who wish to protect themselves from the baseband ...

Combination of small snippets of code to simulate getprocaddress avoiding dangerous functions

Your phone is under constant attack from criminals, corporations and foreign governments.

📝 This repository contains dumps of the monthly "Chrome UX Report" (CrUX) datasets. - GitHub - crissyfield/crux-dumps: 📝 This repository contains dumps of the monthly "Ch...

Modified Emnoscripten compiler with LLVM-level obfuscation - HakonHarnes/emcc-obf

Public disclosure of CloudTrail bypass in AWS Service Catalog and other logging research.

The service control manager (SCM) is responsible to start and stop services in windows environments including device drivers and start up applications. Microsoft introduced in Windows 2000 and late…

Update 2023-03-21 – We’ve talked with members of the NuGet team and they had already detected and removed the malicious packages in question. Malicious packages are often spread by the open source NPM and PyPI package repositories, with few other repositories…

A Library for Detecting Known or Weak Secrets Across Many Web Frameworks

KillNet, a group that the US Department of Health and Human Services (DHHS) has called pro-Russia hacktivists, has been launching waves of attacks targeting governments and companies with focus on the healthcare sector. In this blog post, we provide an overview…

Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality. - GitHub - XaFF-XaFF/Black-Angel-Rootkit: Black Angel is a W...

Akamai researchers uncover and reverse engineer a new Go-based DDoS botnet.

ThreatLabz observed a new campaign targeting a Government organization in which the threat actors utilized a new Command & Control (C2) framework named Havoc