| Website | https://marcushutchins.com |
| Security Blog | https://malwaretech.com |
I think it’s hilarious that I now have my first CVE because I got annoyed with an unresponsive vendor and just posted the zero day exploit I was trying to report to them on my GitHub 😆
ComoDoS - Exploiting a Remote Kernel Zero-Day Vulnerability in Comodo Internet Security
How an IP parsing vulnerability makes it possible to remotely crash systems with a single TCP/IP packet
It's been a while since I did a vulnerability research article. How about a little DoS zero-day as a treat?
My thoughts on Microsoft's threat to prosecute researchers for dropping zero day exploits
I spent nearly 4 months investigating the inner workings of a North Korean state-sponsored hacking group. Here's what I found:
- The group used generative AI tools to aid in almost every part of their operations.
- They exfiltrated 26,584 cryptocurrency wallets from victim systems, with a combined value totaling as much $12 million dollars.
- In several cases, the threat actors set up entire front companies to lure in developers via fake job posting, then infected them with malware.
- The threat actors successfully pulled off a supply-chain attack by compromising a VS Code extension developer's system.
🔗 Full article: https://expel.com/blog/inside-lazarus-how-north-korea-uses-ai-to-industrialize-attacks-on-developers/
Will Harris