The Vietnam-aligned threat actor known as OceanLotus has been attributed to two distinct campaigns that targeted domestic ...

Writing my own virtualized loader is something I’ve been wanting to do since I first read Microsoft’s deep dive on FinFisher’s multi-layered VM obfuscation back in 2018. FinFisher didn’t just use one ...

X.Org Server vulnerability patch released June 2 fixes nine flaws — eight found by TrendAI’s FENRIR static analysis tool, the ...

Microsoft released its first full Linux distro: Azure Linux 4.0. Azure Linux ix split into Azure Container Linux and the virtual machine edition. Microsoft effectively admits that it's a de facto ...

Azure Linux 4.0 expands Microsoft’s Linux strategy for secure AI and server workloads. Azure Container Linux offers hardened, lightweight infrastructure for Azure containers and regulated enterprises.

Another bad Linux kernel bug has appeared. Fragnesia can give unauthorized users root powers. More open-source security bugs are likely coming. According to Linus's law, "Given enough eyeballs, all ...

Weekly ThreatsDay recap: old bugs, fake tools, shady payload tricks, AI mishaps, and the usual reminder that the internet is ...

The open-source community is looking for a way out of the wave of new laws requiring operating systems to collect users’ ages. The open-source community is looking for a way out of the wave of new ...

Reports without fixes, and people finding the ‘same things with the same tools,’ are causing a logjam. Reports without fixes, and people finding the ‘same things with the same tools,’ are causing a ...

A threat actor is using an AI-built ransomware attack toolkit that automates Active Directory discovery and helps evade ...