Browse Tag

MITRE ATT&CK

MITRE ATT&CK framework for threat modeling, adversary technique tracking, and building detection rules based on real-world attack patterns.

8 Articles

Microsoft Defender Weaponization: Deleting Security at Boot

Yuniawan Tri Cahyono By Yuniawan Tri Cahyono
No Comments on Microsoft Defender Weaponization: Deleting Security at Boot
3 Min Read

Security teams face a daunting reality as Microsoft Defender weaponization highlights severe risks in native system drivers. Adversaries now exploit trusted Microsoft drivers to dismantle enterprise endpoint protection at boot time. Modern endpoint…

Read More

Lazarus Windows Zero-Day Exploit Grants SYSTEM Access

Yuniawan Tri Cahyono By Yuniawan Tri Cahyono
No Comments on Lazarus Windows Zero-Day Exploit Grants SYSTEM Access
2 Min Read

Lazarus exploits Windows zero-day vulnerabilities with precision. State-sponsored hackers target critical infrastructure using advanced techniques. Security teams must analyze this campaign. North Korean threat actors continue to evolve. They weaponize…

Read More

BdThemes Supply Chain Attack Poisons JSON for Rogue Admins

Yuniawan Tri Cahyono By Yuniawan Tri Cahyono
No Comments on BdThemes Supply Chain Attack Poisons JSON for Rogue Admins
4 Min Read

Recent security reports highlight a critical BdThemes supply chain attack targeting popular WordPress plugins. Attackers poisoned JSON update mechanisms to quietly create rogue administrators. Website owners must act immediately to secure their digital…

Read More

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper

Yuniawan Tri Cahyono By Yuniawan Tri Cahyono
No Comments on CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper
3 Min Read

The CrashStealer macOS malware has recently emerged as a significant threat to Apple users. This sophisticated attack vector utilizes a notarized dropper to bypass traditional security measures like Gatekeeper. In this analysis, we will explore how this…

Read More