SecureWorld News

SEPTEMBER 25, 2021

In a blog post, Neel Mehta, Information Security lead for Google, explains how a hacker has managed to break certificate code parsing to invade email inboxes and infect users with malware. Attackers often rely on varying behaviors between different systems to gain access. Faking legitimate code signatures: how does it work?

Google 63

Google Malware Analysis Windows 63

ForAllSecure

FEBRUARY 8, 2023

From her talk at SecTor 2022 , Paula Januszkiewicz, CEO of Cqure , returns to The Hacker Mind and explains how a lot of little configuration errors in common Windows tools and services can open the door to persistence on a system for bad actors and what sysadmins can do to mitigate these. Often they hide in common misconfigurations.

Windows 40

Windows Course Examples Tools 40

ForAllSecure

JANUARY 22, 2023

Having a common framework around vulnerabilities, around threats , helps us understand the information security landscape better. Literally, how the rebellion fighting the Empire has echoes in how we approach and mitigate information security threats. How does he authenticate? In a moment, we’ll find out.

Engineering 40

Engineering Security Microsoft Film 40

ForAllSecure

JUNE 21, 2022

I have all the abilities built into Windows or built into Linux or Mac to do this for me. Vamosi: In a sideloading attack, an attacker places a spoofed malicious DLL file in a Windows’ directory so that the operating system loads it instead of the legitimate file. Why don't I use the trusted ones that I'll get by antivirus.

Operating Systems 52

Operating Systems System Microsoft Examples 52