Microsoft’s VSS Fix for SeriosSAM May Facilitate Ransomware Infiltration
Microsoft Windows 11’s maiden voyage was cut short by a recently discovered privilege escalation vulnerability that has yet to receive…
CompTIA Security+: Prerequisites, objectives, and cost
CompTIA Security+ is a security certification offered by the Computing Technology Industry Association (CompTIA), a U.S.-based trade and industry nonprofit.…
Russian Federal Agencies Were Attacked With Chinese Webdav-O Virus
An amalgam of multiple state-sponsored threat groups from China may have been behind a string of targeted attacks against Russian…
Global cyber intrusion activity jumped 125% in the first half of 2021
Companies in the U.S. were targeted more than those in any other country, according to Accenture’s Cyber Incident Response Update.
Phishing Campaign Dangles SharePoint File-Shares
Attackers spoof sender addresses to appear legitimate in a crafty campaign that can slip past numerous detections, Microsoft researchers have…
See Ya Sharp: A Loader’s Tale
Introduction The DotNet based CyaX-Sharp loader, also known as ReZer0, is known to spread commodity malware, such as AgentTesla. In…
We COVID-Clicked on Garbage, Report Finds: Podcast
Were we work-from-home clicking zombies? Steganography attacks snagged three out of eight recipients. Nasty CAPTCHAs suckered 50 times more clicks…
Software Security is a Programming Languages Issue
This is the the last of three posts on the course I regularly teach, CS 330, Organization of Programming Languages.…
Software Security is a Programming Languages Issue
This is the the last of three posts on the course I regularly teach, CS 330, Organization of Programming Languages.…
POPL’17 in Paris: Some highlights
Last week I attended the 44th ACM SIGPLAN Symposium on Principles of Programming Languages (POPL 2017). The event was hosted…