Apache log4j2 is one of the most widely utilized logging library in the Java ecosystem. Many applications depend on log4j that include and are not limited to VMware, Apple, Twitter, Minecraft to plethora of open-source projects like Apache Solr, Apache Druid, and many more. On November 30, 2021, the Apache…

And if you think you are safe (as you recently procured a well marketed commercial open source dependency scanner) is when you are most in danger as all such tools lack intelligence to track such advanced infiltration patterns. The phrase “Think like an Attacker” is often abused in cyber security…

Ransomware is an epidemic that adversely affects the lives of both individuals and large companies, where criminals demand payments to release infected digital assets. In the wake of the ransomware success, Ransomware-as-a-Service (RaaS) is being offered as a franchise model that allows people without programming skills to become active attackers…

The fallout of SolarWinds compromise has resulted in a bevy of new malware families, each with different characteristics and behaviors.

The U.S. was caught off guard by foreign interference in the 2016 election. Given the powerful role of social media in political contests, understanding the Russian efforts was crucial in preventing or blunting similar, or more sophisticated, attacks in the 2020 congressional races. …

If you’ve arrived to this post, I’d suggest reading the Part-1 and Part-2 to gain context. FireEye released additional details here (on December 24th, 2020) that is well worth reading. With the increase of complexity in software and the availability of complex and customizable malware, the amount of work required…

First, let me be clear that I have no insider knowledge. This is my best guess at what occurred, based on publicly available information If you’ve arrived to this post, I’d suggest reading the prior post to gain context. As details are still emerging, let’s speculatively examine the attacker’s post…

First, let me be clear that I have no insider knowledge. This is my best guess at what occurred, based on publicly available information If you’ve arrived to this post, I’d suggest reading the prior post to gain context. As details are still emerging, let’s speculatively examine the attacker’s post…

First, let me be clear that I have no insider knowledge. This is my best guess at what occurred, based on publicly available information here (FireEye) and others indicated in references section below. [UPDATE] : A detailed followup post has been published here FireEye discovered the supply chain attack that…