Analyzing RagaSerpent’s “Tax Audit” malware campaign to uncover new indicators of compromise, enhancing detection accuracy and strengthening threat intelligence capabilities while staying ahead of evolving attack techniques.
Originally published on LinkedIn — reposting here because the thesis lands hardest in security work, where the gap between code that looks right and code that is right is the difference between green dashboards and a breach. A product manager asks an AI for a "one-click buy button."...
SmartLoader Campaign The SmartLoader campaign represents a significant escalation in the sophistication of commodity malware distribution, establishing a critical new threat vector for organizational defense. By combining advanced evasion techniques with large-scale automation, this multi-stage loader poses a significant threat that demands an immediate reassessment of existing security...
What if I told you your microcopy could help a hacker break into your system? In cybersecurity UX writing, sometimes “boring,” “vague,” and “intentionally unhelpful” are your strongest defenses.
Jetpack Compose offers more than simplicity—it brings security through code obfuscation. Unlike XML layouts easily decompiled by hackers, Compose UI code gets scrambled by R8 with Kotlin functions, making your app's structure harder to reverse-engineer while boosting productivity.
Akira (REDBIKE) ransomware, emerging in 2023, is a sophisticated operation linked to the former Conti syndicate, extorting $42M from over 350 SMBs. It targets Windows, Linux, and ESXi systems, using a complex hybrid cryptosystem with ChaCha20, AES-256, and RSA-4096 via the Nettle library.
1. The Global Scale and Impact of Stealer Malware 1.1. Breaking In Without ‘Breaking’ Anything What if we told you that breaking into a system today often requires no complex exploits at all? Despite years of headlines and hacker movie stereotypes, hacking is still commonly associated with techniques like...
by Mulyadi Santosa Since the early release of IntelliBroń security suite, ITSEC team deployed Mini PC based sensors to clients, either in production or demo stage. The device is small yet powerful in terms of computing power. There is also yet another from of deployment that we release. A docker...
This research highlight methodology to visualize the cyber threat from public report using LLM and MCP. Introduction This article introduces our approach to Cyber Threat Visualization, leveraging automation to transform raw, text-based threat reports into structured, actionable intelligence. By utilizing a suite of Model Context Protocol (MCP) tools, we...
1. The Global Scale and Impact of Stealer Malware 1.1. Breaking In Without ‘Breaking’ Anything What if we told you that breaking into a system today often requires no complex exploits at all? Despite years of headlines and hacker movie stereotypes, hacking is still commonly associated with techniques like...
Introduction In today’s rapidly evolving digital battlefield, staying ahead of cyber threats has become a real challenge, with recent incidents showing us that attackers are getting smarter and faster. For the teams on the front lines in security operations centers, it's like trying to find a needle...
GraphRAG + OpenCTI transforms security operations by enabling AI to navigate threat intelligence relationships, not just isolated facts. This integration delivers contextual insights and always-current intelligence—turning complex data into actionable defense strategies.
Learn safe logging practices for Android apps to prevent exposing sensitive data. Discover how Timber library filters debug logs in production, automatically manages tags, and helps implement proper log levels for security.
