When it is well-implemented, Kernel Address Space Layout Randomization (KASLR) makes Windows kernel exploitation extremely difficult by making it impractical to obtain the base address of a kernel driver directly. In an attempt to bypass this…
Norsk Hydro, one of the world's largest aluminium producers, revealed today that it 'became victim of an extensive cyber-attack' that crippled its operations and forced it to switch to manual operations in several of its smelting locations. 'Hydro…
Palo Alto Networks
–
Tom Lancaster
– Mar 19, 6:00 AM
In 2017, Unit 42 reported on and analyzed a low-volume malware family called Cardinal RAT. This malware family had remained undetected for over two years and was delivered via a unique downloader named Carp Downloader. Since that publication, we…
Great, another Nigerian prince in your inbox. Instead of deleting it, why not answer for a change. I did and it turned out to be quite interesting. Last week, I received my first Nigerian prince scam mail (also known as 419-scam) in German. I…
Threatpost | The first stop for security news
– Mar 19, 8:26 AM
Ghidra, a free, open-source software reverse-engineering tool that was released by the National Security Agency at RSA, has been found to be a potential conduit to remote code-execution. Ghidra is a disassembler written in Java; software that…
