Adam Shostack

JANUARY 2, 2025

I last discussed this in " Architectural Review and Threat Modeling ".) Builders say problems with the system are setting their projects back by weeks or months.Soon after launch, the new system repeatedly stalled and permit documents appeared to go missing. It's hard to face the mirror and say 'could I have done that better?'

Architecture 130

Architecture 130

eSecurity Planet

APRIL 26, 2024

Network security architecture is a strategy that provides formal processes to design robust and secure networks. This article explores network security architecture components, goals, best practices, frameworks, implementation, and benefits as well as where you can learn more about network security architecture.

Architecture 120

Architecture Network Security Firewall Risk 120

Centraleyes

FEBRUARY 17, 2025

Designing a Strategic Policy Management Architecture A mature program requires more than a process overhaulit demands a strategic architecture that integrates process, information, and technology. Process Architecture: Structure your policy lifecyclefrom development to retirementfor seamless operation.

Architecture 52

Architecture Government Risk Technology 52

Hacker's King

FEBRUARY 9, 2025

Modular Architecture: SploitScan is highly flexible. To make it user-friendly for both beginners and experts, clear commands and comprehensive documentation are incorporated in this tool. Check the documentation for detailed instructions. SploitScan keeps things simple with a user-friendly CLI.

Penetration Testing 52

Penetration Testing Architecture Cybercrime Security Defenses 52

Hacker's King

FEBRUARY 9, 2025

Modular Architecture: SploitScan is highly flexible. To make it user-friendly for both beginners and experts, clear commands and comprehensive documentation are incorporated in this tool. Check the documentation for detailed instructions. SploitScan keeps things simple with a user-friendly CLI.

Penetration Testing 52

Penetration Testing Architecture Cybercrime Security Defenses 52

Security Affairs

MARCH 20, 2025

The modular architecture of the malware allows to extend its functionalities for multiple malicious purposes, including surveillance, reconnaissance, information theft, DDoS attacks, and arbitrary code execution.

Computers and Electronics 108

Computers and Electronics Telecommunications Malware Surveillance 108

The Last Watchdog

MARCH 18, 2025

Throughout 2025, SquareXs research team will disclose at least one critical web attack per month as part of the YOBB project, focusing on vulnerabilities that exploit architectural limitations of the browser and incumbent solutions. As the year progresses, security teams can expect monthly disclosures to be documented at [link].

Cybersecurity 130

Cybersecurity Architecture Media Password Management 130

Krebs on Security

JUNE 15, 2022

Dubbed “ Follina ,” the flaw became public knowledge on May 27, when a security researcher tweeted about a malicious Word document that had surprisingly low detection rates by antivirus products. “Most malicious Word documents leverage the macro feature of the software to deliver their malicious payload. .

Architecture 289

Architecture Internet Internet Software 289

Schneier on Security

AUGUST 30, 2019

Abstract: Modern CPU architectures offer strong isolation guarantees towards user applications in the form of enclaves. And there are no security mechanisms that can deal with malicious enclaves, because the designers couldn't imagine that they would be necessary. The results are predictable.

Malware 257

Malware Architecture Encryption Phishing 257

CyberSecurity Insiders

SEPTEMBER 21, 2021

Defining 5G security and architecture. According to the document, 5G’s trustworthiness is made possible by a set of security features that were built using system design principles applied with a risk-based mindset. Delving into the technical details of the 5G security architecture is beyond the scope of this article.

Architecture 117

Architecture IoT Mobile Internet 117

SecureWorld News

APRIL 16, 2025

Shared memory, shared risk This is the big one: GPUs rely on shared memory architectures. Researchers have demonstrated attacks that can extract neural network architecture and weights by observing GPU memory access patterns. It holds sensitive datasetsPII, trade secrets, internal documents. This isn't science fiction.

Architecture 98

Architecture Artificial Intelligence Passwords Risk 98

eSecurity Planet

APRIL 7, 2023

DMZ network architecture DMZ Architecture There are two main layout options to choose from when developing a DMZ subnetwork: a single firewall layout and a dual firewall layout. Definition, Architecture & Benefits appeared first on eSecurityPlanet.

Architecture 102

Architecture Firewall Network Security Technology 102

Schneier on Security

AUGUST 16, 2019

The CIS/MS is responsible for applications like maintenance systems and the so-called electronic flight bag, a collection of navigation documents and manuals used by pilots. Boeing maintains that other security barriers in the 787's network architecture would make that progression impossible.

Software 274

Software Architecture Engineering Hacking 274

Schneier on Security

OCTOBER 13, 2020

One of the things we learned from the Snowden documents is that the NSA conducts “about” searches. We have knowingly and willingly built the architecture of a police state, just so companies can show us ads. That is, searches based on activities and not identifiers.

Surveillance 363

Surveillance Wireless Accountability Architecture 363

Security Affairs

NOVEMBER 2, 2024

The first documented attack against a Sophos facility is the one that targeted Cyberoam in 2018. “The adversaries appear to be well-resourced, patient, creative, and unusually knowledgeable about the internal architecture of the device firmware. ” concludes the report.

Firmware 122

Firmware Government Firewall Malware 122

SecureList

APRIL 17, 2025

Infection through a malicious MMC script One of the recent infections we spotted was delivered through a malicious MMC script, designed to be disguised as a document from the National Land Agency of Mongolia (ALAMGAC): Malicious MMC script as displayed in Windows Explorer. Open the downloaded lure document for the victim.

Malware 95

Malware Encryption Architecture Engineering 95

Lenny Zeltser

JULY 22, 2020

This Linux distribution for malware analysis includes hundreds of new and classic tools for examining executables, documents, scripts, and other forms of malicious code. Revamped REMnux documentation provides an extensive, categorized listing of the installed malware analysis tools, and lists their authors, websites, and license details.

Architecture 145

Architecture Malware Software Technology 145

eSecurity Planet

MARCH 4, 2022

The NSA’s 58-page Network Infrastructure Security Guidance (PDF) is more of a catalog of network security best practices, based on principles of zero trust and segmentation , following up on brief January guidance (PDF) on segmentation that discussed the Purdue Enterprise Reference Architecture (image below).

Network Security 141

Network Security Architecture Authentication Firewall 141

Security Affairs

MARCH 8, 2024

million files, and 65,000 documents were classified by NCSC as data relevant to the Federal Administration. 278 Federal Administration’s files contained technical information, encompassing documentation on IT systems, software requirement documents, or architectural descriptions. ” continues the report.

Ransomware 139

Ransomware Data breaches Unstructured Data Architecture 139

Pen Test Partners

FEBRUARY 12, 2025

When it comes to compliance, the list of documentation and evidence pieces is broad. To help weve created a checklist of the key documents broken down per control to help you navigate PCI and ensure youve covered all bases. Update regularly : Review and update documents periodically to align with changing compliance requirements.

Penetration Testing 52

Penetration Testing Encryption Architecture Authentication 52

The Last Watchdog

MAY 19, 2022

Chances are strong that your corporate website uses a CMS, and perhaps you have a separate CMS for documents and other files shared by your employees, partners, and suppliers. Design your architecture in a way where the CMS back end (the behind-the-scenes content repository) is not directly coupled to the front end (the presentation system).

Data breaches 262

Data breaches Encryption Mobile Technology 262

SecureList

OCTOBER 15, 2024

SideWinder’s most recent campaign schema Infection vectors The SideWinder attack chain typically starts with a spear-phishing email with an attachment, usually a Microsoft OOXML document (DOCX or XLSX) or a ZIP archive, which in turn contains a malicious LNK file. Some infection routines do not check the architecture.

Malware 143

Malware Encryption Architecture Phishing 143

The Last Watchdog

JUNE 3, 2022

Digital content creation is flourishing with intellectual property, financial records, marketing plans and legal documents circulating within a deeply interconnected digital ecosystem. It’s documents, PDFs, CSV files, Excel files, images, lots of unstructured data; we track 150 different file types. Srinivasan.

Unstructured Data 272

Unstructured Data Malware Digital transformation Authentication 272

Security Affairs

JULY 17, 2020

The Cyble research team analyzed the data leaked by the Nefilim ransomware operators consisting of various sensitive and corporate operational documents of Aero Technique Espace (ATE), a well-established French aircraft painting company that had been acquired by Air works. ” reads the post published by Cyble.

Business Services 144

Business Services Ransomware Mobile Advertising 144

Hacker's King

NOVEMBER 2, 2024

HomePwn has a modular architecture in which any user can expand the knowledge base about different technologies. Now simply follow the usage instructions as mentioned in the documentation PDF file given above. With a strong library of modules, you can use this tool to load new features and use them on a vast variety of devices.

Penetration Testing 52

Penetration Testing IoT Technology DNS 52

Malwarebytes

JULY 29, 2021

On July 21, 2021, we identified a suspicious document named “????????.docx” We could not determine who might be behind this attack based on the techniques alone, but a decoy document displayed to victims may give some clues. The second template is embedded in Document.xml.rels and is loaded into the document.

Architecture 145

Architecture Social Engineering Cyber Attacks Engineering 145

Security Affairs

AUGUST 17, 2020

Threat actors used a decoy document titled “Pyongyang e-mail lists – April 2017” and it contained the email addresses and phone numbers of individuals working at organizations such as the United Nations, UNICEF and embassies linked to North Korea. The KONNI malware also employed in at least two campaigns in 2017.

Phishing 139

Phishing Malware Advertising Architecture 139

Adam Shostack

MARCH 5, 2020

Amazon has released a set of documents, “ Updates to Device Security Requirements for Alexa Built-in Products.” More precisely, since I don’t have an Amazon developer account, I’m going to look at the blog post, and infer some stuff about the underlying documentation.).

IoT 176

IoT Engineering Software Architecture 176

Security Affairs

APRIL 27, 2020

In March 2016, the Verizon breach digest reported a number of cyber attacks including one against an unnamed water utility, described in the document as the Kemuri Water Company (KWC). The operator behind the water utility hired Verizon to assess its systems, during the investigation the experts discovered evidence of cyber attacks.

Energy and Utilities 145

Energy and Utilities Government Cyber Attacks Architecture 145

SecureList

JANUARY 6, 2025

rar" "<<ip in the network>>c$Users<<user name>>Documents" "<<ip in the network>>c$Users<<user name>>Desktop" rar.exe a -v100M idata001.rar This memory-resident architecture enhances its stealth capabilities, helping it evade detection by traditional endpoint security solutions.

Malware 141

Malware Architecture Passwords Accountability 141

Security Affairs

SEPTEMBER 29, 2022

Researchers from Black Lotus Labs at Lumen Technologies, recently uncovered a multifunctional Go-based malware that was developed to target devices based on multiple architectures, including Windows and Linux. The Chaos malware includes capabilities previously documented in the original Kaiji Linux botnet. ” concludes the report.

Malware 125

Malware DDOS Architecture Financial Services 125

Penetration Testing

SEPTEMBER 18, 2024

The Internet Research Task Force (IRTF) has released a new document, RFC 9620, aimed at drawing the attention of protocol and architecture developers to critical human rights issues. The document... The post RFC 9620: A Call for Human Rights in Internet Protocols appeared first on Cybersecurity News.

Internet 73

Internet Internet Architecture Cybersecurity 73

Google Security

FEBRUARY 23, 2022

Posted by Ard Biesheuvel, Google Open Source Security Team Linux kernel support for the 32-bit ARM architecture was contributed in the late 90s, when there was little corporate involvement in Linux development, and most contributors were students or hobbyists, tinkering with development boards, often without much in the way of documentation.

Risk 142

Risk Architecture Wireless Software 142

Security Affairs

FEBRUARY 10, 2024

The malware impersonates a Visual Studio update and was designed to support Intel and Arm architectures. Researchers from Bitdefender discovered a new macOS backdoor, dubbed RustDoor, which appears to be linked to ransomware operations Black Basta and Alphv/BlackCat. RustDoor is written in Rust language and supports multiple features.

Ransomware 139

Ransomware Architecture Malware Passwords 139

Cisco Security

JUNE 18, 2021

We have been able to bring together the Cisco Secure portfolio, 3rd party tools and data sources, and a robust platform architecture into which these technologies can be plugged, in a way that saves organizations time and money and increases their security, using just the free SecureX architecture and the tools and people they already have.

Architecture 126

Architecture Technology 126

Adam Shostack

JANUARY 2, 2025

Teams have found this quite helpful in documenting their threat models. You'll need: The requirements for what you're building An architecture (data flow) diagram which shows your trust boundaries (where ownership or access rights to the data change in the flow) A neuro diverse group of people who know what they're building.

Architecture 130

Architecture Engineering Security Awareness 130

Hacker's King

FEBRUARY 9, 2025

Modular Architecture: SploitScan is highly flexible. To make it user-friendly for both beginners and experts, clear commands and comprehensive documentation are incorporated in this tool. Check the documentation for detailed instructions. SploitScan keeps things simple with a user-friendly CLI.

Penetration Testing 52

Penetration Testing Architecture Cybercrime Security Defenses 52