Tracking a Bad Actor Through the Maze of Obfuscated Malware Code

A new microarchitectural side-channel attack exploiting data memory-dependent prefetchers in Apple silicons.

Gaps in information security communities for product security engineers

This critical security issue allows third party user to record audio from Bluetooth speaker with built-in microphone in vicinity, even when it is already paired and connected with another device. This can result in eavesdropping on private conversations using…

Gourlex is a simple tool that can be used to extract URLs and paths from web pages. - trap-bytes/gourlex

TryHackMe is a free online platform for learning cyber security, using hands-on exercises and labs, all through your browser!

Basic noscript to generate reverse shell payloads, generally most used in ctf. - washingtonP1974/Rev-Shell

Honeypots is catfishing in the world of cybersecurity – no candlelit dinners, just firewalls and encrypted love letters to trap hackers!IntroductionIn the ever-evolving landscape of cybersecurity, staying one step ahead of malicious actors is not just a challenge…

Leverages B64 chunks to split files and save to clipboard - ZephrFish/ChunkyIngress

As I was doing a little seasonal cleaning recently I worked my way through all my tech gear and took stock of everything associated with my…

A MBR Fuzzer. Contribute to nstarke/bootfuzz development by creating an account on GitHub.

Learn about the vulnerabilities affecting Cisco's WAP371 and other Small Business Wireless APs, and the importance of binary static analysis.

This class teaches RISC-V assembly language. It requires you know C programming.

Our work shows that it is possible to trigger Rowhammer bit flips on DDR4 devices on AMD Zen 2 and Zen 3 systems despite deployed TRR mitigations. This result proves that AMD systems are equally vulnerable to Rowhammer as Intel systems, which greatly increases…

All-in-one AI automation platform (workflows, agents, cases, tables) for security and IT teams. - TracecatHQ/tracecat

As explained in Federico‘s latest article, […]

Can anyone control AI?

The Oligo research team discovered a live crypto miner campaign targeting a vulnerability in Ray, a widely used open-source AI framework.

BlueDucky solves the problem of auto device discovery, locally stores found Bluetooth devices and utilized Rubber Ducky noscripts that are injected from separated