نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
CSO Online

The Sandbox Fights Back: Joe Security Launches Adaptive Detonation

AI agents help Joe Sandbox uncover malicious behavior concealed by evasion techniques and unmet execution conditions. Joe Security‘s Adaptive Detonation brings active intervention to malware analysis, helping security teams investigate threats that may conceal their behavior during an initial sandbox run. Adaptive Detonation uses AI agents to examine execution results, identify obstacles preventing a sample from reve…

بدافزار و آلودگی فیشینگ امنیت اینترنت اشیا و صنعتی مهندسی معکوس
خواندن متن کامل در CSO Online درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
CSO Online

Attackers turned OpsShield’s trusted update channel into a supply-chain attack

The kinks in the software supply chain are once again being exposed, with attackers now targeting OpsShield’s update process. This week, threat actors used compromised credentials to push malicious updates out to cPGuard customers. They then accessed data stored on the vendor’s servers and in its billing portal accounts, and made copies of at least three of OpsShield’s cloud servers. The company said in an advisory t…

بدافزار و آلودگی آسیب‌پذیری و روز صفر نشت داده
منبع
Graham Cluley

Smashing Security podcast #491: How AI agents are spooking the banks

Bank of America has a message for its customers: please, for the love of God, stop handing your banking passwords to your AI assistant. And if your robot does something daft with your money? That's your problem, not theirs. Meanwhile, a company that promised to rescue ransomware victims without paying the criminals stands accused of... paying the criminals. ProPublica's Renee Dudley was on the case years before the i…

بدافزار و آلودگی نشت داده باج‌افزار
منبع
Sonatype Blog

PolinRider Loader Reappears in Hijacked npm Packages

TL;DR Sonatype Research Labs identified concealed runtime loaders in 12 npm releases across 10 hijacked packages. All 12 releases contain loaders designed to decode payload-server IP addresses from Ethereum transactions sent by the same hard-coded wallet previously reported in PolinRider activity, then retrieve, XOR-decode, and execute JavaScript. Six conceal the loader in eval(atob(...)); six use a character-permuta…

بدافزار و آلودگی برنامه‌نویسی و زبان‌ها شبکه و اینترنت
منبع