A spoofed CCleaner download site is spreading a multi-stage malware that hijacks Chrome to steal credentials, cookies and authentication tokens while recording keystrokes and screenshots. A convincing ...
Tenable called it on Tuesday: the afd.sys zero-day looked like nation-state work. The same day, Check Point named the group. It was Lazarus, and the exploit had been live ...
Sandworm fake recruiter campaign targets Ukrainian IT workers with SopraVPN, a trojanized WireGuard app that hides AES-encrypted attack commands in VPN config files, not the binary. CERT-UA issued its ...
David Chisnall discusses how the CHERI hardware architecture redefines pointer safety to solve isolation and sharing challenges. He explains how CHERI enables spatial and temporal memory safety for ...