Malware reads its C2 address out of a poem
PoeLLM reads its command-and-control address out of a poem. The malware, an ELF binary named libgcrypt , pulls four words or phrases from a poem tit…
Последние новости
⚑ Сообщить о проблемеTech news from the best sources
Все темы
- игры
AI
News
Tech
agents
ai
api
architecture
automation
backend
beginners
career
devchallenge
devops
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
Advanced Tools vs. Traditional Skills: Balancing Malware Analysis Training in the AI Era
Introduction: The Evolving Landscape of Malware Analysis Malware analysis remains a critical discipline in cybersecurity, where the battle against m…
Hidden program in cheap Android phones turns them into advertising tools from the factory
Bitdefender details Midnight Mimosa, a preinstalled firmware malware found on low-cost MediaTek-based Android devices across 150+ countries. The ana…
TASK#STOMP: A Windows Backdoor That Lives in Scheduled Tasks and VBS
TASK#STOMP: A Windows Backdoor That Lives in Scheduled Tasks and VBS Securonix published an analysis of TASK#STOMP, a Windows backdoor that uses onl…
Stolen passwords are exposing America’s water providers to hackers
Researchers say another looming threat hangs over some of America's most important critical infrastructure.
ClickFix attacks infecting PCs and Macs are going viral
Simplicity—combined with the difficulty of getting stuff done—makes ClickFix ideal.
YARA Rules for Beginners: Writing Your First Malware Detection Signature
YARA Rules for Beginners: Writing Your First Malware Detection Signature TL;DR: YARA is a pattern-matching engine used by malware analysts, incident…
Открыл обычный VBS, а внутри оказался PowerShell, AES и MSBuild
Мне в руки попался обычный файл с расширением .vbs . Ничего необычного. Открываю посмотреть, что там внутри, и сначала даже немного разочаровался. К…
Матрешка из Base64 и ROT13: разбираем вредоносный .sh, который пришел за FreePBX
Мне в руки попался файл с расширением .sh и, конечно же, его пришлось изучить. Открываю файл — первая половина более-менее читаемая, а дальше начина…
TerminalFix и фейковая Cloudflare CAPTCHA: разбираю PowerShell, который прячет EXE и DLL в PNG
Наверное, многие уже видели или хотя бы слышали про цепочки атак, где пользователю показывают красивую фейковую Cloudflare CAPTCHA, а дальше предлаг…
Anatomy of a Nim Infostealer
Tracing exfiltration and self-deletion through static, dynamic and advanced static analysis Vasilis Mantas — Threat Detection Engineer Verdict: A 64…
Claude, Codex, and Hermes installed unowned code inside corporate networks
227 install commands were found in corporate docs pointing at code nobody owns.
That fake Grand Theft Auto VI demo is actually just malware
Grand Theft Auto fans, eager for news about one of the most anticipated video games of all time, appear especially vulnerable to this new cyberattac…
Someone targeted security researchers using a fake crypto conference as a lure
A hacker pretending to work for a leading cryptocurrency news website targeted several cybersecurity professionals using Google Docs as a way to del…
How we took malware advisories beyond npm
GitHub malware advisories no longer stop at npm. Here's how we wired OpenSSF's malicious-packages data into the Advisory Database, and why we built…
12 Signs Your Website Has Been Hacked
Originally published on the Bug Circuit blog . If your site shows a browser warning, redirects visitors somewhere strange, has admin accounts you di…
Чем вообще занимается служба безопасности GitHub?
В GitHub прямо сейчас есть десятки тысяч репозиториев, которые распространяют вирусы. Любой из вас может найти такие репозитории и для этого вам не…
Denying the Worm: Detecting SANDWORM_MODE and the Emerging Class of AI Toolchain Supply Chain Attacks
SANDWORM_MODE represents a sophisticated multi-stage npm supply chain worm discovered in early 2026. Unlike traditional attacks, it specifically tar…
I caught a trojan in my MCP marketplace. Here's the 8-layer defense I built.
Two weeks ago, a Windows trojan slipped into my MCP (Model Context Protocol) marketplace. The malware was Trojan:Win64/Lazy.PGPK!MTB , hidden inside…
FBI arrests man accused of using Steam games to drain victims’ crypto wallets
Prosecutors accused 21-year-old student Zyaire Wilkins of publishing on Steam several fake video games that contained malware, infecting thousands o…
fast16.sys: первый в истории инструмент киберсаботажа, созданный за 5 лет до Stuxnet
Исследователи лаборатории SentinelLABS (компания SentinelOne) опубликовали отчёт о ранее неизвестном вредоносном фреймворке fast16, ключевые компоне…
Microsoft discovers new lightweight backdoor that steals cryptocurrency
Crypto Clipper spreads over USB and communicates over Tor.
Android verification is coming: Google confirms timeline and supported app stores
A new system service will roll out this month ahead of big changes starting in September.
Rust Crate 'onering' Compromised: Malicious Code Exfiltration Risk Mitigated with Updated Version
Introduction and Background The Rust ecosystem, celebrated for its memory safety and performance, relies heavily on crates —its package management s…
Kash Patel’s clothing brand website shut down after reports it was hacked
According to users on X, the website was hijacked by hackers in an attempt to trick visitors into installing malware.
A hacker group is poisoning open source code at an unprecedented scale
GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks.
This is what some of the world’s largest banks of malware look like stacked as hard drives
What would some of the world's largest repositories of malware look like if they were stacked as hard drives, one on top of the other?
This is what some the world’s largest banks of malware look like stacked as hard drives
What would some of the world's largest repositories of malware look like if they were stacked as hard drives, one on top of the other?