Researchers at Palo Alto Networks recently published a report regarding the NOKKI malware, which has shared code with KONNI and, although not in the report by Palo Alto, KimJongRAT (discovered by Paul Rascagnères of Cisco Talos in 2013), and another report…

This post will walk through a malware infection that used PsExec and show how the OODA loop method can help improve detection speed and accuracy.

FIDO2 USB+NFC token optimized for security, extensibility, and style - SoloKeysSec/solo

Some time ago Karl Fosaaen with NetSpi came out with some pretty interesting research around Federated Services and Skype for Business. One of the attack vectors was being able to access other comp…

We release details on APT38, a threat group we believe is responsible for conducting financial crime on behalf of the North Korean regime, stealing millions of dollars from banks worldwide.

Common Sense Cybersecurity

The attack by Chinese spies reached almost 30 U.S. companies by compromising America's technology supply chain.

I am looking for some advice. The goal is to gain a bit of knowledge about hypervisor layer security, as in av/ips/something and remain agentless...

The attack by Chinese spies reached almost 30 U.S. companies by compromising America's technology supply chain.

JavaScript has become one of the most ubiquitous technologies in the modern web browsers. Applications built using client-side JavaScript…

Complete text

An open-source post-exploitation framework for students, researchers and developers. - GitHub - malwaredllc/byob: An open-source post-exploitation framework for students, researchers and developers.

A few weeks ago I discovered this neat little trick that helps you see your saved nmap results in HTML formats, locally. This can be very helpful when you are performing large scans, like on an enterprise or a university for example. TL;DR: Use nmap …

I got this problem when I try to use hostapd on Kali Linux 2018.1 nl80211: Could not configure driver mode I am using TP-link WR722n. Can u give me some suggestion?

Personnal blog of Julien (jvoisin) Voisin

Come and read Follow Up: Container Scanning Comparison on Kubedex.com. The number one site to Discover, Compare and Share Kubernetes Applications.

Press conference cyber, 4 October 2018.

Finding Google Meet phone numbers and bruteforcing PINs to join random meetings

Of the nearly 200 papers on software fuzzing that have been published in the last three years, most of them—even some from high-impact conferences—are academic clamor. Fuzzing research suffers from…

There are hundreds of teams working professionally trying to break into any single digital device to compromise sensitive data leaving no fingerprint.Malware industry is bigger than you might think…