Collaborate Disseminate
You have probably heard the news of new vulnerabilities that affect most major chipsets, including Intel, Arm, and AMD. This means that the vulnerability affects nearly everyone who owns a computing device. What is the vulnerability? The vulnerability … Continue reading Overview of Meltdown and Spectre
A week ago, the author of BrickerBot claimed that they retired and published their manifesto along with some source code of their bot. In the manifesto, they wrote: “Take a look at the number of payloads, 0-days and techniques and…
Continue reading BrickerBot mod_plaintext Analysis
Like good old Microsoft Office Macros, Compiled HTML (CHM) Help files have been utilized by malware authors for more than a decade to sneak malicious downloader code into files making them harder to detect. CHMs are a Microsoft proprietary online…
Continue reading CHM Badness Delivers a Banking Trojan
If you thought using BAT files was old hat, think again. While monitoring our Secure Email Gateway Cloud service, we came across several suspect spam emails targeting Brazilian users. The figure below shows email details to trick and entice users…
Continue reading Sneaky *.BAT File Leads to Spoofed Banking Page
Today marks the last Microsoft Patch Tuesday of 2017 and, with only 34 CVEs patched, it’s one of the smallest releases of the year. 19 of those CVEs are rated “Critical” and 15 are rated “Important”. Of course the Microsoft…
Continue reading Microsoft Patch Tuesday, December 2017
A short intro to Password Spraying and an introduction to a tool built to simplify it
Continue reading Simplifying Password Spraying
These days many vendors, like IoT vendors, use Linux running on top of ARM CPU for their embedded solutions. Some of these vendors use a tool called buildroot (https://buildroot.org) to produce a root filesystem for the device. This becomes obvious…
Continue reading Using Buildroot for Security Research of IoT and Other Embedded Systems
When big high-tech companies like Apple, Red Hat and Cisco use PostgreSQL in their data infrastructure, you can be certain that PostgreSQL ranks up there with the bigger relational database managers. PostgreSQL is an enterprise-level open source databa… Continue reading Helping to Secure your PostgreSQL Database
It’s that time of the month again for Microsoft updates. November’s Patch Tuesday brings with it patches for 53 CVEs as well as rollup security patches for Adobe Flash and Microsoft Office. 19 of those 53 are rated “Critical”, 31…
Continue reading Microsoft Patch Tuesday, November 2017
A vulnerability in the web front-end of Brother printers (called Debut) allows an attacker to launch a Denial of Service attack. The attack is executed by sending a single malformed HTTP POST request. The attacker will receive a 500 error…
Continue reading Denial of Service Vulnerability in Brother Printers