Over the last couple of decades, Java has become the lingua franca of
software development, a near-universal platform that works across
different operating systems and devices. With its “write once, run
anywhere” mantra, Java has drawn a horde of…
I have a domain that is only used by me, with several inboxes in the format aep-x-company@domain, where I replace ‘company’ with wherever I sign up. This way I can detect when someone sells email addresses.
However, since yesterday I have …
Less than a week after uncovering Operation
SnowMan, the FireEye Dynamic Threat Intelligence cloud has
identified another targeted attack campaign — this one exploiting a
zero-day vulnerability in Flash. We are collaborating with Adobe
security…
Less than a week after uncovering Operation
SnowMan, the FireEye Dynamic Threat Intelligence cloud has
identified another targeted attack campaign — this one exploiting a
zero-day vulnerability in Flash. We are collaborating with Adobe
security…
Mosh has been around for a while now. Although it’s claimed to be “a replacement for SSH” by its authors, mosh does actually depend on ssh to do the initial authentication, after which an instance of the mosh binary is started on the serv…
About a month ago, I was involved in an investigation that revealed
a targeted attacker using an interesting variation of a well-known
persistence mechanism – a technique that is relevant both to
incident responders hunting for evil and …
About a month ago, I was involved in an investigation that revealed
a targeted attacker using an interesting variation of a well-known
persistence mechanism – a technique that is relevant both to
incident responders hunting for evil and …
Today, we released Security Advisory 2934088 to provide guidance to customers concerned about a new vulnerability found in Internet Explorer versions 9 and 10. This vulnerability has been exploited in limited, targeted attacks against Internet Explorer…
On February 11, FireEye identified a zero-day exploit
(CVE-2014-0322) being served up from the U.S. Veterans of Foreign
Wars’ website (vfw[.]org). We believe the attack is a strategic Web
compromise targeting American military personnel amid a p…
On February 11, FireEye identified a zero-day exploit
(CVE-2014-0322) being served up from the U.S. Veterans of Foreign
Wars’ website (vfw[.]org). We believe the attack is a strategic Web
compromise targeting American military personnel amid a p…
