Using Amadey as a case study, this post compares static signature detection and memory-based detection through structure, evasion difficulty, and YARA usage.

DLL injection is a well-known Windows technique that allows one process to load a dynamic-link library (DLL) into another process’s address…

ThreatLabz identified malicious NPM packages that deliver NodeCordRAT, which performs credential theft and steals cryptocurrency wallet data.

Tech magazine for cybersecurity specialists

A comprehensive analysis of the year's new macOS malware

DLL sideloading is a technique that allows an attacker to have a legitimate signed application run some malicious code on Windows. It work…

Follow an Island engineer’s deep dive into fixing a years-old Windows Debugger issue - the few-second freeze when copying text from WinDbg.

Ten years ago, we published a Clang Hardening Cheat Sheet. Since then, both the threat landscape and the Clang toolchain have evolved significantly. This blog post presents the new mitigations available in Clang to improve the security of your applications.

Title is self explaining, well theres few methods we can do to read locked file and play with it... - EvilBytecode/IDontLikeFileLocks

Welcome to this new Medium post, in this article, I’ve developed a custom technique for remotely writing arbitrary data (such as a payload…

Binary exploitation is often seen as one of the hardest areas in offensive
 security. Unlike web vulnerabilities, where issues usually…

Malicious Process Environment Block Manipulation, Author: Xavier Mertens