To ensure NSA's ability to stay in front of our adversaries' tactics and techniques surrounding artificial intelligence (AI), the Agency launched the NSA Artificial Intelligence Security Center (AISC). The AISC will be a key part of NSA's cybersecurity mission…

Malware Function Annotation. We introduced a few different machine learning models that learn to annotate function names from PE malware disassembly.

The Center for Internet Security has released a document that contains mappings of the CIS Controls and Safeguards v8 to NIST CSF 2.0.

Malicious code planted in xz Utils has been circulating for more than a month.

Reverse Engineer @ FLARE/Google. Content creator on YouTube/Pluralsight - jstrosch

Keylogging server and client that uses DNS tunneling/exfiltration to transmit keystrokes through firewalls. - Geeoon/DNS-Tunnel-Keylogger

Splunk patches high-severity vulnerabilities in Enterprise, including an authentication token exposure issue.

This is a series of blog posts designed to give you a ground-up start to defending a specific technology from potential attackers.

CISA has revealed the first draft for an update of the Cyber Incident Reporting for Critical Infrastructure (CIRCIA) Act of 2022

In the ever-evolving landscape of cybersecurity, staying one step ahead of potential threats is crucial. As a security architect, your role…

xz-utils backdoor situation (CVE-2024-3094). GitHub Gist: instantly share code, notes, and snippets.

Please note: This is being updated in real-time. The intent is to make sense of lots of simultaneous discoveries

In the realm of cybersecurity, Advanced Persistent Threat (APT) groups continue to evolve and adapt, often employing innovative techniques…

Many individuals outside the realm of cybersecurity often underestimate the intricacies involved in a security professional’s role. Since its inception in 2012, the CISO MindMap has served as a valuable educational resource, offering insights into CISO responsibilities…