Menaces, vulnérabilités, incidents et bonnes pratiques en sécurité informatique.
1116 articles
S’abonner (RSS)> malware delivered from a live website these dumb fucks vibe coded a malware payload and had it connect back to a local ip address. are they actually fucking retarded???
Fileless malware These definitions are too vague, I think a better explanation (although a little bit trickier...) - Infector - Stager - Module - Stealer - Spyware - Ransomware - Loader - Toolkit However, this doesn't accurately capture the nuance of web based malware or IOT and/or ICS/SCADA malware.
It reads like someone describing swimming who hasn't ever been in a pool
hived): 285 Bazaar (actively collected): 733,985 Families (retired): 122,888 InTheWild (actively collected): 8,195,377 Malware Analysis (actively collected): 53,746 Malware Ingestion (retired): 7,511,822 OpenSourceMalware (archived): 40 Twitter IOC Collection (archived): 40,324 VirusShare (actively collected): 23,775,600 VirusSign (actively collected): 1,786,542 Total malwares: 42,225,439 Total archives (7z files): 128,786 Total size: 12.9TB (7z ultra compressed) Time performed collecting malware: 2,618 days
The huge Microsoft release likely reflects how good AI has become at helping vendors find vulnerabilities, says one expert.
The unrestricted file upload flaw is likely being exploited by an initial access broker to deploy JSP web shells that grant full access to servers and allow installing additional malware payloads.
But the vulnerability in the Kerberos system also has an exploit, so patch now.
Both the vulnerabilities score above 9 on CVSS and can allow access to sensitive data if not patched immediately.
Elastic Security Labs exposes an attempt by the DPRK to infect blockchain engineers with novel macOS malware.
Obfuscator.io is a powerful JavaScript obfuscator that protects your source code from theft and reverse engineering.
That same intelligence-to-action challenge is at the center of our main stage session at Black Hat. On Wednesday, August 5, 2026, from 2:30 PM PT to 3:00 PM PT, Aarti Borkar, Corporate Vice President (CVP), Microsoft Security, and Tanmay Ganacharya, Vice President of Microsoft Security Research and Threat Intelligence, will share intelligence and insights into the ongoing supply chain campaigns impacting all areas of the threat landscape. The talk, Poisoned at the Source: Inside the Hunt for Sup
Microsoft experts will also lead sessions that give you a closer look behind the scenes, including: Mind the Gap: Turning Threat Intelligence into Decisive Action with Expert-Led Defense Presented by Wes Malaby, General Manager of Customer Success Wednesday, August 5, 2026, from 5:00 PM PT to 5:20 PM PT Presented by Fanta Kaba and special guest Jimmie Galaites Wednesday, August 5, 2026, from 5:00 PM PT to 5:20 PM PT Presented by Naadia Sayed, Principal Product Manager Thursday, August 6
This year we are transforming the Microsoft Security booth into a community center. Click here to jump to the full schedule. If the keynote and main stage sessions frame the largest challenges across the threat landscape, booth #2144 is where you can directly explore the workflows behind it: threat intelligence, incident response, AI security, security operations, partner solutions, and hands-on practice. Customers: Schedule a time to meet with our team
Microsoft Defender XDR customers can use the following threat analytics reports in the Defender portal (requires license for at least one Defender XDR product) to get current information available in the Defender portal about the threat actor, malicious activity, and techniques discussed in this blog. These reports provide the intelligence, protection information, and recommended actions to help prevent, mitigate, or respond to associated threats found in customer environments: Amatera Stealer:
CVE Lite CLI scans lockfiles locally and matches dependencies against the OSV database to surface known vulnerabilities. It supports npm, pnpm, Yarn, and Bun lockfiles and classifies every finding as direct or transitive. Rather than stopping at detection, it generates a ranked remediation plan with copy-and-run upgrade commands for direct dependencies and parent-aware upgrade guidance for transitive chains. The tool is built for the developer workflow: it runs in seconds at the terminal, requir
Expand All + CVE-2025-12011 A denial-of-service issue exists in 5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, causing the device to enter a major non-recoverable fault (MNRF). View CVE Details Affected Products Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix Vendor:Rockwell Automation Product Version:Rockwell Automation CompactLogix 5370: <=V35.015, Rockwell Automation Compact GuardLogix 5370: <=V
A security issue exists within Arena Simulation due to a memory corruption vulnerability in the expmt.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process by convincing a user to open a malicious file. View CVE Details Affected Products Rockwell Automation Arena Vendor:Rockwell Automation Product Vers
An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This could lead to limited information disclosure or disruption of the affected product. View CVE Details Affected Products AutomationDirect Productivity Suite Vendor:AutomationDirect Product Version:AutomationDirect Productivity Suite: <=v4.6.2.2 Product Status:known_affected Remediations MitigationAutomationDirect recommends that user
While LLMs excel at identifying syntax patterns, source code itself rarely contains the full picture of unwritten business intent. Some organizations attempt to solve this by connecting LLM agents to internal wikis, design documents, and issue trackers using retrieval-augmented generation (RAG). While RAG gives the model access to external business context, it is not a perfect fix. Corporate documentation is frequently stale, contradictory, or incomplete. An AI agent might retrieve an outdated a
Achieve a 360-degree, contextual view of your multicloud environment and bolster security with Wiz and Google Cloud.
CORTEX