##debug Add DRCOV trace import by seifreed · Pull Request #25275 · radareorg/radare2

Summary add DRCOV coverage import as analysis plugin (a:drcov) parse drcov v2 files and mark traced basic blocks load sample from testbins (drcov/drcov.sample) Testing r2r test/db/archos/linux-x...

github.com

Guarding Against Physical Attacks: The Xbox One Story (2019) | Hacker News

Games consoles aim to prevent piracy/cheat modchips, even though the device owner has physical access and legal ownership. The levels Microsoft had to go to to prevent such attacks are something to…

news.ycombinator.com

A Game's Memory: Reverse Engineering Mount and Blade: Warband | Hacker News

reply

news.ycombinator.com

GOFFEE’s recent attacks: new tools and techniques

Kaspersky researchers analyze GOFFEE’s campaign in H2 2024: the updated infection scheme, new PowerModul implant, switch to a binary Mythic agent.

securelist.com

A miner and the ClipBanker Trojan being distributed via SourceForge

Malicious actors are using SourceForge to distribute a miner and the ClipBanker Trojan while utilizing unconventional persistence techniques.

securelist.com

APT group ToddyCat exploits a vulnerability in ESET for DLL proxying

While analyzing a malicious DLL library used in attacks by APT group ToddyCat, Kaspersky experts discovered the CVE 2024-11859 vulnerability in a component of ESET’s EPP solution.

securelist.com

US Border Patrol Called Raid 300 Miles From Border 'Targeted'. Open Source Evidence Suggests Otherwise - bellingcat

US Border Patrol travelled 300 Miles for a 'targeted' operation. Rights groups say it was anything but targeted.

bellingcat.com

What Audio Analysis Reveals About Aid Workers Killed in Gaza - bellingcat

Hundreds of shots fired at aid convoy that resulted in deaths of multiple aid workers, audio analysis shows.

bellingcat.com

Analysis of Lazarus Group’s Attack on Windows Web Servers - ASEC

AhnLab SEcurity intelligence Center (ASEC) has identified attack cases of the Lazarus group breaching a normal server and using it as a C2. Attacks that install a web shell and C2 script on South…

asec.ahnlab.com

ViperSoftX Malware Distributed by Arabic-Speaking Threat Actor - ASEC

AhnLab SEcurity intelligence Center (ASEC) uncovered that attackers, suspected to be Arabic speakers, have been distributing ViperSoftX malware targeting Korean victims since April 1, 2025.…

asec.ahnlab.com

March 2025 APT Group Trends (South Korea) - ASEC

Overview   AhnLab is monitoring Advanced Persistent Threat (APT) attacks in South Korea using its own infrastructure. This report covers the classification, statistics, and features of the APT…

asec.ahnlab.com

March 2025 Threat Trend Report on Ransomware - ASEC

This report provides statistics on the number of new ransomware samples, number of targeted systems, and targeted companies collected in March 2025, as well as major Korean and international…

asec.ahnlab.com

Ransom & Dark Web Issues Week 2, April 2025 - ASEC

ASEC Blog publishes Ransom & Dark Web Issues Week 2, April 2025                     DragonForce’s Acquisition of RansomHub: A New Paradigm in the Ransomware Ecosystem Analysis of a Major Security…

asec.ahnlab.com

March 2025 Infostealer Trend Report - ASEC

This report provides statistics, trends, and case information on the distribution quantity, distribution methods, and disguise techniques of Infostealer collected and analyzed during March 2025.…

asec.ahnlab.com

Mobile Security & Malware Issue 2st Week of April, 2025 - ASEC

ASEC Blog publishes “Mobile Security & Malware Issue 2st Week of April, 2025”

asec.ahnlab.com

Silent Ransom Group "Call-back" Phishing Campaign - Arctic Wolf

Arctic Wolf has observed an uptick in activity from the Silent Ransom Group. The group has been targeting the legal industry using "call-back" phishing tactics. Find recommendations.

arcticwolf.com

Amazon EC2 instance metadata targeted in SSRF attacks

EC2 instance metadata can include sensitive information such as IAM role credentials.

scworld.com

Proteger dispositivos Android, Windows y Linux contra el rastreo a través de la red Find My

El ataque nRootTag aprovecha la red de Apple para rastrear los dispositivos Android, Windows y Linux de otros proveedores. Descubre cómo es posible y cómo protegerte del ataque.

bit.ly

GoResolver: Using Control-flow Graph Similarity to Deobfuscate Golang Binaries, Automatically

In the course of its investigations, Volexity frequently encounters malware samples written in Golang. Binaries written in Golang are often challenging to analyze because of the embedded libraries…

volexity.com

Max severity RCE flaw discovered in widely used Apache Parquet

A maximum severity remote code execution (RCE) vulnerability has been discovered impacting all versions of Apache Parquet up to and including 1.15.0.

bleepingcomputer.com

Europcar GitLab breach exposes data of up to 200,000 customers

A hacker breached the GitLab repositories of multinational car-rental company Europcar Mobility Group and stole source code for Android and iOS applications, as well as some personal information…

bleepingcomputer.com

Australian pension funds hit by wave of credential stuffing attacks

Over the weekend, a massive wave of credential stuffing attacks hit multiple large Australian super funds, compromising thousands of members' accounts.

bleepingcomputer.com

PoisonSeed phishing campaign behind emails with wallet seed phrases

A large-scale phishing campaign dubbed 'PoisonSeed' compromises corporate email marketing accounts to distribute emails containing crypto seed phrases used to drain cryptocurrency wallets.

bleepingcomputer.com

Port of Seattle says ransomware breach impacts 90,000 people

​Port of Seattle, the U.S. government agency overseeing Seattle's seaport and airport, is notifying roughly 90,000 individuals of a data breach after their personal information was stolen in an…

bleepingcomputer.com

WinRAR flaw bypasses Windows Mark of the Web security alerts

A vulnerability in the WinRAR file archiver solution could be exploited to bypass the Mark of the Web (MotW) security warning and execute arbitrary code on a Windows machine.

bleepingcomputer.com

Coinbase to fix 2FA account activity entry freaking out users

Coinbase is fixing an incorrect account activity message that freaks out customers and makes them think their credentials were compromised.

bleepingcomputer.com

Carding tool abusing WooCommerce API downloaded 34K times on PyPI

A newly discovered malicious PyPi package named 'disgrasya' that abuses legitimate WooCommerce stores for validating stolen credit cards has been downloaded over 34,000 times from the open-source…

bleepingcomputer.com

OpenAI tests watermarking for ChatGPT-4o Image Generation model

OpenAI is reportedly testing a new "watermark" for the Image Generation model, which is a part of the ChatGPT 4o model.

bleepingcomputer.com

The Bellingcat Open Source Challenge is Back - bellingcat

Test your open source research skills with the Bellingcat Challenge – a new resource for all levels of online investigators.

bellingcat.com

The Story of a Storm - Part 1: Visualising Climate Data with NASA’s Giovanni Tool - bellingcat

In this guide on visualising climate, conflict, and displacement data, we’ll show you how to turn raw climate data into visualisations using NASA’s Giovanni tool.

bellingcat.com