I said this when #Windows Subsystem for #Linux (WSL) first came out. It is inevitable. It is in fact a Linux world, obvs in the data center but also for end users (where Android is # 1.) Steve Job's greatest move was going #BSD, which too, is just another *nix distro.

The new divide? The only thing clear about that is that it is #AI related. Because I see it in students already.

Where do #LLM or neural nets fit into the OS? One controversy locally at #UCSD is #Trellix.

https://www.xda-developers.com/windows-being-considered-a-linux-distro/

SideWinder APT has evolved - using malicious PDFs and Microsoft ClickOnce to target diplomats across South Asia.
Payloads include ModuleInstaller and StealerBot, deployed via DLL side-loading and regional C2 filtering.
🔗 https://www.technadu.com/sidewinder-apt-group-evolves-tactics-deploys-new-clickonce-malware/611838/

#CyberSecurity #APT #Malware #SideWinder #Trellix

📢 New Malware Threat in the Wild: Obj3ctivity Stealer is back and more sophisticated than ever.
⚠️ It’s targeting:
- System & browser data
- Credentials
- Crypto wallets
- Telegram & Signal app files

🎯 Delivered via phishing emails with multi-layered payloads (PowerShell + steganography + process injection).

Used in attacks across the U.S., Germany, Southeast Asia, and more.

📖 Full breakdown of techniques & targets:
https://www.technadu.com/obj3ctivity-stealer-keeps-evolving-targeting-credentials-crypto-wallets-chat-app-data-via-phishing-emails/604479/

#Malware #InfoStealer #CyberThreat #Obj3ctivityStealer #CyberSecurity #C2 #telegram #Trellix #ThreatIntel

#BSI WID-SEC-2024-3538: [NEU] [hoch] #Trellix #Enterprise #Security #Manager: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Ein Angreifer kann mehrere Schwachstellen in Trellix Enterprise Security Manager ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3538

#BSI WID-SEC-2024-1771: [NEU] [mittel] #Trellix #ePolicy #Orchestrator: Schwachstelle ermöglicht nicht spezifizierten Angriff

Ein Angreifer kann eine Schwachstelle in Trellix ePolicy Orchestrator ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1771

@GossiTheDog They're still around, but under a different name. #McAfee Enterprise is now #Trellix. Trellix Endpoint Protection (EDR) is a similar product to the #Crowdstrike one that failed on Friday.

https://www.trellix.com/products/edr/