Recent iPhone models have additional hardware-based security protection for sensitive regions of the kernel memory. We discovered that to bypass this hardware-based security protection, the attackers used another hardware feature of Apple-designed SoCs.

...more

CVE-2021-44228 vulnerability in Apache Log4j library

Published: 2021-12-13 14:10:21

Popularity: 107

Author: AMR

Keywords:

Incidents

Malware Descriptions

Vulnerabilities and exploits

Vulnerability Statistics

Zero-day vulnerabilities

Vulnerabilities and exploits

Web threats

The summary of the critical vulnerability CVE-2021-44228 in the Apache Log4j library, technical details and mitigations.

...more

APT annual review 2021

Published: 2021-11-30 10:00:31

Popularity: 15

Author: GReAT

Keywords:

Kaspersky Security Bulletin

APT

Vulnerabilities and exploits

APT (Targeted attacks)

For this annual review, we have tried to focus on what we consider to be the most interesting trends and developments of the last 12 months.

...more

Operation AppleJeus Sequel

Published: 2020-01-08 10:00:47

Popularity: 282

Author: GReAT

Keywords:

To attack macOS users, the Lazarus group has developed homemade macOS malware, and added an authentication mechanism to deliver the next stage payload very carefully, as well as loading the next-stage payload without touching the disk.

...more

Zero-day vulnerability in Telegram

Published: 2019-03-07 22:31:50

Popularity: None

Author: By

In October 2017, we learned of a vulnerability in Telegram Messenger’s Windows client that was being exploited in the wild. It involves the use of a classic right-to-left override attack when a user sends files over the messenger service.

...more