Armored Likho expands its cyber-espionage toolkit

Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing…

NotPetya potential risks during analysis

Hello. I am relatively a beginner at malware analysis as a hobby, and was wanting to know if there would be any risks of a potential VM escape with…

Projectivy Launcher räumt Android TV und Fire TV auf

Projectivy Launcher ersetzt die Startseite von Android TV, Google TV und kompatible Fire-TV-Geräte mit einer total werbefreien Oberfläche.

Mirall: So funktioniert die neue Filesharing-Software

Das Open Source Tool Mirall überträgt große Dateien direkt zwischen den Geräten - ohne Cloud, ohne Konto und Ende-zu-Ende-verschlüsselt.

Black Hat USA 2026: AI is racing ahead of cybersecurity controls

AI took center stage, but the clearest lesson was less about what AI can do than about who is accountable when something goes wrong

WhiteCobra Malware on VS Code: Cloudflare C2 to Telegram Infostealer

submitted by /u/tame-impaled [link] [comments]

[Guide] Win x64 Shellcode Part 3: Deep Dive into the PE Format & Export Directory Structures

submitted by /u/RubberDuck31337 [link] [comments]

Compiled JavaScript - V8 compilation pipeline and Bytenode

Some threat actors distribute JavaScript as compiled V8 bytecode to prevent reverse engineering and potentially for detection evasion.

Career Advice: Navigating Low-Level Security vs. Market Realities

submitted by /u/HORUS-405 [link] [comments]

Stop threats in its tracks

APK file analysis

Hi guys, I handle threat intelligence for a bank & we receive multiple URLs/APKs impersonating our organization.

EU-Studie: ISPs, CDN-, DNS- und VPN-Anbieter sollen Websperren in nur 30 Minuten umsetzen

Nach Angaben einer neuen EU-Studie sollen Anbieter für das Internet, eines CDN, DNS und VPN Sperren innerhalb von 30 Minuten durchführen!

Enriched URL Reports: VirusTotal URL Scanning 2.0

Introduction In today's fast-moving cybersecurity landscape, threat analysts must move beyond basic, binary reputation scores to successfully defend…

Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference participants

Kaspersky experts have discovered malicious TrueConf software installers.

Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection

Project CAV3RN targets Israel with Google Apps Script C2 relays and DNS-based routing. Modular .

Fußball-Livestreams: Canal+ erwirkt Websperren gegen 73 Domains

Die illegalen Anbieter von Fußball-Livestreams blockiert man laut Urteil des Pariser Justizgerichts per DNS, ISP, VPN und die Suchmaschinen.

I built a lightweight C++ Memory Scanner & Pointer Chain Resolver (HexaCore)

submitted by /u/Wgrxgy [link] [comments]

The Basics of Exploit Development

submitted by /u/Potential-Couple-745 [link] [comments]

Suspicious macOS curl | zsh command installed a LaunchAgent and hidden binaries. anyone recognize this malware/able to reverse engineer it?

while looking for the claude terminal, clicked on the first link and didn't check what I was curling (sorry I'm an idiot and was tired) I…

I have made tutorials for the https://ropemporium.com/ challenges, if you find difficulties feel free to reach out.

https://youtu.be/SIVf3qmBAV0 submitted by /u/navoos_00 [link] [comments]

Job availability

Hi guys i just have one question is it worth it to dive in this career even if my country or where i live there is no available jobs for it like…

ChatBots erzählen zu oft Unsinn: Interview mit dem BRAIN-Entwickler Heiko Janicke

BRAIN ist eine kostenlose wie lokale KI-Plattform, bei der keine Daten abfließen. Wir haben uns kürzlich mit ihrem Entwickler unterhalten.

i got tired of switching between windbg ida and x64dbg so i built an orchestrator to control them all

hey guys if youve ever deal with windows security research or just heavy reverse engineering you probably know the pain.

IT threat evolution in Q2 2026. Non-mobile statistics

The report presents key trends and statistics on malware that targeted personal computers running Windows and macOS, as well as internet of things…

IT threat evolution in Q2 2026. Mobile statistics

This report contains mobile threat statistics for Q2 2026, along with noteworthy discoveries and quarterly trends: the Anatsa banker and a transition…

Back-to-School-Angebot: Das GEEKOM GeekBook M16 mit Intel-Core-Ultra-9-Prozessor, 24 Stunden Akkulaufzeit und 23 % Rabatt!

Das qualitativ hochwertige 16-Zoll-Laptop M16 entwickelte GEEKOM speziell für moderne Studenten, die eine lange Laufleistung benötigen.

Are AI tutors safe for your kids?

AI tutors can offer useful support, but their quality and safeguards vary widely. Here’s what parents should check before handing one to a child.

Web exploitation + Binary exploitation feasible?

This has been a hard decision for me. I'm not sure if I should learn both. Is it mostly not worthwhile of time if I learn both of them?

Malware Analysis for beginners

get Malware Analysis For Beginners pdf from here at: https://resources.codelivly.

DOOM-Piraterie: John Romero enthüllt, warum id Software mit Piraten kooperierte

DOOM-Piraterie hatte für id Software einen Nebeneffekt: John Romero verrät, warum das Studio mit taiwanischen Piraten kooperierte.

Looking for a coding buddy (or mentor) — C → ASM → pwn.college → RE CTFs

Hey everyone, Looking for someone to learn alongside — a peer at similar stage, or even better, someone experienced willing to mentor a beginner.

Investigating a Multi-Stage PowerShell Loader

Introduction During recent threat hunting, I identified suspicious PowerShell content being served directly from an IP address and a domain…

How do you actually make the jump into exploit dev full-time?

​ Hey, Looking for some advice from people who work in exploit dev / low-level vuln research.

Hamster auf Strava: Dieser Nager läuft Menschen davon

Hamster auf Strava: Mollie läuft bis zu 10,8 Kilometer pro Nacht. Ein selbstgebauter ESP32-Tracker macht die Leistung des Nagers messbar.

LockBit 5.0 Linux Malware Analysis: ChaCha20 + Curve25519 Offline Encryption, strace Evasion & IOCs | Netacoding

submitted by /u/Pale_Surround_3924 [link] [comments]

Analysis of the Connection Between Xctdoor and Past CRAT Attack Cases (Larva-26005)

2026-08-03 • AhnLab • ASEC • win.crat, win.dratzarus Open article on Malpedia