digicat

Defeating KASLR by Doing Nothing at All (googleprojectzero.blogspot.com)

Treasury Sanctions DPRK Bankers and Institutions Involved in Laundering Cybercrime Proceeds and IT Worker Funds (home.treasury.gov)

How RMM abuse fuelled Medusa & DragonForce attacks (zensec.co.uk)

Curly COMrades: Evasion and Persistence via Hidden Hyper-V Virtual Machines (www.bitdefender.com)

Chicago firm that resolves ransomware attacks had rogue workers carrying out their own hacks, FBI says (chicago.suntimes.com)

Inside the attack chain: Threat activity targeting Azure Blob Storage (www.microsoft.com)

Demystifying Zero Trust (www.ncsc.gov.uk)

Using PAWs in OT environments (www.ncsc.gov.uk)

Scaling Security Testing by Addressing the Reachability Gap (gpsapia.github.io)

Graph Api Overwhelm (www.alphaf0x.com)

RDSEED Failure on AMD “Zen 5” Processors (www.amd.com)

Remote access, real cargo: cybercriminals targeting trucking and logistics (www.proofpoint.com)