A SimpleHelp authentication flaw is being exploited to deploy Djinn Stealer, a cross-platform malware targeting cloud, ...

Training-free framework that converts SAM3 into a real-time multi-class open-vocabulary detector. Achieves 55.8 AP on COCO val2017 (80 classes) at 15.8 FPS (4 classes, 1008px) on a single RTX 4080.

Abstract: This research presents an AI-driven framework to detect polymorphic malware, which constantly changes its code to evade detection. Traditional methods struggle against such dynamic threats, ...

Abstract: WebAssembly (Wasm) provides a language-agnostic compilation target that delivers near-native performance for web applications, yet it also attracts adversaries who exploit Wasm to ...

A new Android banking trojan named Rokarolla is targeting 217 banking and cryptocurrency applications using an extensive set of 137 commands. The malware is distributed via malicious websites ...

Threat actors have been disguising malware as AI study guides and developer resources to trick professionals into running a multi-stage attack that ends in the AsyncRAT trojan. New analysis from ...

Attackers no longer need to ship malicious code to compromise a target - they can build it on the fly using artificial intelligence. Defenders must now inspect AI conversations and agent traffic, not ...

Important mental health history is often present in medical records but hard to find, especially when it is missing from the diagnosis codes that clinicians, researchers, and health systems use to ...

A Chinese espionage group tracked as UNC5221 has been accessing Microsoft 365 environments using the Brickstorm backdoor and previously undocumented malware named Plenet and AgentPSD. An investigation ...

A collection of memory forensics case studies performed using Volatility. This repository contains malware investigations, rootkit analysis, process analysis, network artifact analysis and findings ...