MCMD Malware Analysis
Type: Threat AnalysisMCMD Malware AnalysisMCMD’s primary function is to provide a remote command shell capability to support existing tools such as Karagany that do not provide it natively. Learn more about MCMD.
Type: Threat AnalysisMCMD Malware AnalysisMCMD’s primary function is to provide a remote command shell capability to support existing tools such as Karagany that do not provide it natively. Learn more about MCMD.
Type: Threat AnalysisUpdated Karagany Malware Targets Energy SectorSee how the Karagany malware is still under active development as of July 2018, including updates to the core RAT component, as well as changes to the number of plugins commonly used in…
I need to send verification emails for things like
email verification
password reset
email change
password change
In the past most webapps would send an email with a clickable verification link that I’d click to go back to the site an…
In this series, we have explored the need for proactive measures to eliminate a class of vulnerabilities and walked through some examples of memory safety issues we’ve found in Microsoft code that could have been avoided with a different language. Now …
In our first post in this series, we discussed the need for proactively addressing memory safety issues. Tools and guidance are demonstrably not preventing this class of vulnerabilities; memory safety issues have represented almost the same proportion …
Let’s say I want to allow the customers of my website to upload PDF documents. What would be more safe to:
Convert the PDF to image using a library and store it in my file server as an image? Can the process of converting a potentially ma…
I’m pretty new to the certificate renewal process, so bear with me if this is a stupid/easy question I’m asking. I have a jks store that had a certificate expire under the alias aliasA. Another member of my team renewed the certificate i…
What if we could eliminate an entire class of vulnerabilities before they ever happened?
Since 2004, the Microsoft Security Response Centre (MSRC) has triaged every reported Microsoft security vulnerability. From all that triage one astonishing fact st…
The most straightforward way to install NodeJS on Ubuntu or Debian seems to be Nodesource, whose installation instructions say to run:
curl -sL https://deb.nodesource.com/setup_12.x | sudo -E bash –
This clashes with some basic security…
I’m trying to create a secure method of authentication for my Node.js REST API that will work both for direct API requests as well as from my React.js web application. I’ve done some reading on how to properly store authentication tokens t…