Caught in the funnel. [Research Saturday]

Caught in the funnel. [Research Saturday]

Today we have Andrew Northern, Principal Security Researcher at Censys, discussing "From Evasion to Evidence: Exploiting the Funneling Behavior of Injects". This research explains how modern web malware campaigns use multi-stage JavaScript injections, redirects, and fake CAPTCHAs to selectively deliver payloads and evade detection. It shows that these attack chains rely on stable redirect and traffic-distribution chokepoints that can be monitored at scale. Using the SmartApe campaign as a case study, the report demonstrates how defenders can turn those chokepoints into high-confidence detection and tracking opportunities. The research can be found here: From Evasion to Evidence: Exploiting the Funneling Behavior of Injects Learn more about your ad choices. Visit megaphone.fm/adchoices

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(3820)

A little something extra comes preinstalled. [Research Saturday]

A little something extra comes preinstalled. [Research Saturday]

Today Cristian Silviu Stahie, Security Analyst from Bitdefender, joins to discuss their work on The phone was compromised before the user turned it on: the rise of Midnight Mimosa. Bitdefender researc...

14 Nov 19min

Out of office, out of service.

Out of office, out of service.

Microsoft 365 recovers from a global outage. StingyBasilisk pivots through Windows named pipes to infiltrate isolated networks. The FBI freezes billions after North Korea's Binance heist, while Pyongy...

13 Nov 31min

A patchwork of problems.

A patchwork of problems.

Patch Tuesday. Maersk investigates a legacy system breach. A chip-smuggling probe stalls after Nvidia reaches out to Commerce. A US Army officer is arrested in the UK for alleged Russian espionage. Ka...

12 Nov 27min

CyberWire Daily at 10: Developments in AI and machine learning over the past decade. [Special Edition]

CyberWire Daily at 10: Developments in AI and machine learning over the past decade. [Special Edition]

In this episode, Dave Bittner joins Maria Varmazis to explore how AI in cybersecurity has changed over the past decade, from opaque, marketed machine-learning features to widely accessible generative ...

11 Nov 35min

The next name on CISA's door.

The next name on CISA's door.

Palantir’s CISO gets the nod for CISA. Tehran takes the rap for sabotaging European grocery freezers. Russia’s Turla turns victim Exchange servers into passive spy hubs. Barracuda battles actively cha...

10 Nov 28min

Peer pressure meets private keys.

Peer pressure meets private keys.

A classified memo ties Nvidia’s chief executive to Chinese espionage. AI coding agents crack under peer pressure, coughing up private keys. Big breaches hit seven million Japanese shoppers and three m...

9 Nov 29min

The hidden risks of system integration. [T-Minus: Space-Cyber Briefing]

The hidden risks of system integration. [T-Minus: Space-Cyber Briefing]

Though many look to ensure that they meet mission readiness requirements, overreliance on these practices can allow hidden risks to go unchecked. Host Maria Varmazis sits down with Vito Askins, found...

8 Nov 21min

Stealing more than the spotlight. [Research Saturday]

Stealing more than the spotlight. [Research Saturday]

This week, we are joined by Matt Poto, Associate Triage Analyst at Huntress, discussing their work on "Grand Theft Auto VI Hype Leads to Malware." Threat actors are exploiting the hype surrounding the...

7 Nov 14min

Populært innen Politikk og nyheter

giver-og-gjengen-vg
aftenpodden
aftenpodden-usa
stopp-verden
forklart
popradet
det-store-bildet
fotballpodden-2
nokon-ma-ga
rss-gukild-johaug
dine-penger-pengeradet
hanna-de-heldige
rss-espen-lee-usensurert
rss-ness
aftenbla-bla
rss-penger-polser-og-politikk
rss-utenrikskomiteen-med-bogen-og-grasvik
lydartikler-fra-aftenposten
frokostshowet-pa-p5
e24-podden