The concept of a stealthy, difficult-to-detect malware operating behind the scenes has proven to be an irresistible proposition for many threat actors, and they're evidently adding even more techniques, as seen in a cryptocurrency miner (detected as Coin…

In a post-Supermicro-scoop world, it's important for security teams to review the basics on detecting and guarding against hardware backdoors. Malicious IT security departments must step up their game in detecting backdoors and other malware that compromises…

API Security is a community website with API security articles and news of API security breaches, vulnerabilities, regulations, technology and best practices

This blog is about malware analysis and reverse engineering. I’m Lasha Khasaia

2 votes and 0 comments so far on Reddit

Arecibo is an Out of Band (OOB) tool for data exfiltration via DNS resolutions and HTTP requests through a simple API

4 votes and 0 comments so far on Reddit

Intel Microcode Boot Loader automatically updates the CPU microcode every time the system is booted.

Hello Everyone,

Exciting things have been happening on TLS land lately. TLS 1.3 was finally released, bringing many security and performance improvements…

FortiGuard Labs found a new TrickBot variant, with a new module pwgrab, which attempts to steal credentials, autofill data, history and so on. We did a deep analysis on this pwgrab module to explai…

Posted by Jason Woloz and Eugene Liderman, Android Security & Privacy Team Update: We identified a bug that affected how we calculated dat...

The amount of attacks a server gets when the SSH port is open is ridiculous.

FOFA is a Cyberspace search engine. By conducting Cyberspace mapping, it can help researchers or enterprises quickly match network assets, such as vulnerability impact range analysis, application distribution statistics, and application popularity ranking…

23 votes and 2 comments so far on Reddit

Trojan discovered on Googel Play was available for download almost for a year. Its malicious functionality was hidden inside “Simple Call Recorder” application with over 5,000 installs.