The resource for Kaspersky experts' technical research, analysis, and thoughts.
Worldwide
Joined March 2009
- Tweets2.8K
- Following1.4K
- Followers18.7K
- Likes72
Securelist retweeted
HZ Rat backdoor for macOS attacks users of China’s DingTalk and WeChat 👉 kas.pr/c4gw
Securelist retweeted
🍎 Since the last SAS, we've all been very curious about iOS hacking, so a talk on this topic is a welcome addition to the #TheSAS2024 agenda! ✨
Lars Fröder (@opa334dev) will cover the state of iOS hacking in 2024 and discuss Apple's protections against kernel exploitation—and the workarounds for them. For agenda updates, visit kas.pr/6pyu
Securelist retweeted
SOCs have long recognized the critical need for building effective detection techniques. In our upcoming webinar, join Andrey Tamoykin, as he looks at how to develop and prioritize a detection backlog from scratch using the MITRE ATT&CK framework.
More: kas.pr/v693
Securelist retweeted
In 2023, we uncovered a relentless attack campaign on government entities in APAC.
Despite the complex tools used, we were dedicated to uncover their malicious intentions. #TetrisPhantom
Here's what we presented at 👇 #SAS2023
youtube.com/watch?v=1XxPlTNR…
Securelist retweeted
Our latest ICS CERT research: #TelitCinterion modem revealed 7 locally exploited vulnerabilities and a remotely exploited one. Together they can lead to the full compromise of the device.
The full research: kas.pr/8vx7
Securelist retweeted
We've discovered 24 vulns in ZkTeco biometric terminal including remote command injection, arbitrary file read and write, and QR code SQL injection allowing the attackers to enter the protected area under someone else's name (demo included) 👉 kas.pr/ntn9
Securelist retweeted
.@kaspersky researchers have identified a new zero-day vulnerability in #Windows, designated CVE-2024-30051, and exploited by #QakBot and other #malware.
Read the detailed analysis via @securelist 👇 bit.ly/3VnB20A
Securelist retweeted
Our annual Incident Response Report is now live & features:
✔️ Regional statistics
✔️ trends & attacker TTPs
✔️ Incidents by region and industry
✔️ Security recommendations
Full report: kas.pr/7kxm
Securelist retweeted
Join SAS CTF, our global #cybersecurity competition at #TheSAS2024. This year, it consists of online Jeopardy qualifiers and on-site Attack-Defense finals with an $18k prize pool on the line, it's game on!
Learn more & register here ⇒ kas.pr/owd8
Securelist retweeted
We have identified a new #malware campaign targeting govt entities worldwide.
Dubbed #DuneQuixote, this malware utilizes excerpts from Spanish poems to enhance its persistence & evade detection, ultimately aiming for cyber espionage.
Full report 👇
securelist.com/dunequixote/1…
Securelist retweeted
Join our exclusive #webinar with Ayman Shaaban, Digital Forensics and Incident Response Manager.
Gain a deeper understanding of cyberthreat trends and top attack scenarios, with expert recommendations for incident response.
Register now👉 kas.pr/pk6h
📅May 8th
Securelist retweeted
Our MDR solutions received over 314k alerts globally in 2023.
Join our upcoming #webinar to explore the nature of these incidents, as our experts highlight the most common TTPs attackers used.
Reserve your spot ⇒ kas.pr/vd96 #CyberSecurity
Securelist retweeted
Learn more about how to protect automated control systems and OT using OVAL - a data definition format which enables the automated detection of software vulnerabilities.
Full video ⇒ youtube.com/watch?v=dc2yvEcT…
Securelist retweeted
Arsenii Fedoro from our Android dev team shows how to make automated tests flexible & concise.
By applying the Page object design pattern, the convenience of Kaspresso, & Scenario class you'll learn how to make autotests better.
Learn more -> kas.pr/6tyn
Securelist retweeted
Interesting note in today's @securelist post on #DinodasRAT
Upon infection, the malware collects essential information from the host machine to create a unique identifier (UID) without gathering user-specific data, thereby avoiding early detection.
Read more -> securelist.com/dinodasrat-li…
#Linux
Securelist retweeted
Calling all #CTF enthusiasts! As part of #TheSAS2024 we will have a special CTF - will you accept the challenge? kas.pr/n2o6
Securelist retweeted
So, we've talked a lot about how wrong stalkerware is. Unfortunately that problem is not going away... the latest #report and figures on this type of spyware.
@Securelist article - securelist.com/state-of-stal…
Detailed PDF - media.kasperskycontenthub.co…
Securelist retweeted
🍏🍏🍏 Update your iOS devices as soon as possible!
A recent iOS update addresses at least two vulnerabilities exploited as 0-day.
CVE-2024-23225 and -23296 are kernel and RTKit vulnerabilities that enabled attackers to bypass kernel memory protections, which appears to be a direct path to privilege escalation.
Apple has neither disclosed the attackers who used these vulnerabilities nor credited third-party researchers for the discovery, which may suggest an ongoing investigation. In the meantime, we strongly recommend all iOS users to update ASAP.
Furthermore, another vulnerability, CVE-2024-23243, allowed a malicious app to access sensitive location data.
To safeguard yourself, update to the latest iOS/iPadOS version, 17.4 support.apple.com/en-us/HT21…
