Collaborate Disseminate
Discover the novel QWCrypt ransomware used by RedCurl in targeted hypervisor attacks. This article details their tactics, including… Continue reading RedCurl Uses New QWCrypt Ransomware in Hypervisor Attacks
Organizations running ESXi environments that thought they had somehow escaped the attention of REvil ransomware operators are in for a rude awakening – the ransomware-as-a-service’s repertoire now includes a Linux version aimed squarely at VMware ESXi… Continue reading REvil’s Linux Version Targets VMware ESXi Virtual Machines
The critical and important-severity flaws were found by a team at the China-based Tiunfu Cup hacking challenge. Continue reading VMware Fixes Critical Flaw in ESXi Hypervisor
If we count all the screens in our lives, it takes a hot minute. Some of them are touchscreens, some need a mouse or keyboard, but we are accustomed to all the input devices. Not everyone can use the various methods, like cerebral palsy patients who rely on eye-tracking hardware. …read more
Virtualisation company VMware patched two bugs this week that affected a large proportion of its client-side virtual machines. Continue reading VMware patches virtualisation bugs
Browsers Firefox and Edge take a beating on day two of the Pwn2Own competition. Continue reading Firefox and Edge Fall to Hackers on Day Two of Pwn2Own
A look back on 2018 shows the financial services industry turned out to be the most at risk, with security incidents and breaches skyrocketing. Top threats to the financial services industry include cloud security and third-party risks, while the … Continue reading Cybersecurity Investment to Shoot Up in Financial Industry in 2019; Top Firms Already Spend $1 Billion
Bromium’s co-founder Ian Pratt delivered an insightful talk about hypervisors at Black Hat USA In his talk, Ian examines the evolution of hypervisor design, architecture, and technology over the years If you have missed Ian’s session at Bla… Continue reading Hypervisor Security, Presentation by Ian Pratt
Virtual machines that use AMD’s hardware-based encryption scheme are vulnerable to attacks that can extract the full contents of their main memory – in plaintext. Continue reading SEVered Attack Extracts the Memory of AMD-Encrypted VMs
The newly uncovered POP SS vulnerability takes advantage of a widespread misconception about behaviour of pop ss or mov ss instructions resulting in exceptions when the instruction immediately following is an interrupt. It is a privilege escalati… Continue reading Dissecting the POP SS Vulnerability