With key transparency, WhatsApp provides a set of proofs that affirms the correctness of public encryption keys.

FortiGuard Labs highlights the technical details of a multi-staged cyberattack used in the Russian-Ukrainian conflict, as well as some strange artifacts that could be work-in-progress or part of a …

CyberArk Malware Research Team Abstract CyberArk Labs discovered a new malware called Vare that is distributed over the popular chatting service, Discord. Vare has been used to target new malware...

ShmooCon 2023by Shmoo Group, various presentersThe videos in this collection are from ShmooCon 2023, which occurred on 20 - 22 January 2023, at the Washington...

In search of an interesting new detail about CVE-2022-1388, VulnCheck researchers pore over open source intelligence. The researchers detail exploit variants, find signature bypasses, and publish a novel exploit variant.

CyberArk Malware Research Team Abstract CyberArk Labs discovered a new malware called Vare that is distributed over the popular chatting service, Discord. Vare has been used to target new malware...

We guard your domain, so you have peace of mind. Threat Visibility Platform.

Manage (and soon deploy) Android machines with pre-defined behaviors for Cyber Range environments. - GitHub - cybersecsi/robodroid: Manage (and soon deploy) Android machines with pre-defined behavi...

EF/CF - Extremely Fast smart Contract Fuzzing . Contribute to uni-due-syssec/efcf-framework development by creating an account on GitHub.

In the last blog (link), we described how ChatGPT can be used to better understand a codebase and assist us during the making of a PoC for a CVE. ChatGPT didn’t find the vulnerability nor wrote the PoC, but as an assistant gave us hints about the project’s…

Vulnerability scanner for AWS customer managed policies using ChatGPT - GitHub - ustayready/cloudgpt: Vulnerability scanner for AWS customer managed policies using ChatGPT

WorLLMs. GitHub Gist: instantly share code, notes, and snippets.

AhnLab Security Emergency response Center (ASEC) has recently discovered the Trigona ransomware being installed on poorly managed MS-SQL servers. Trigona is a relatively recent ransomware that was first discovered in October 2022, and Unit 42 has recently…

PASTIS: Collaborative Fuzzing Framework. Contribute to quarkslab/pastis development by creating an account on GitHub.

This is a simple example of DLL hijacking enabling proxy execution. - GitHub - MitchHS/Discord-DLL-Hijacking: This is a simple example of DLL hijacking enabling proxy execution.

TruffleHog v3.28.6 introduces the Aho-Corasick algorithm for keyword optimization, leading to a 2x average speedup in scanning. This allows for faster keyword preflight searches in linear time, improving performance as more detectors are added.