Posted by Martijn Grooten on Nov 23, 2017
We look back at the VB2016 presentation by Adrian Sanabria on the state of endpoint security, both now and in the future.
Posted by Martijn Grooten on Nov 22, 2017
At VB2017 in Madrid, Cisco Umbrella (OpenDNS) researchers Dhia Mahjoub and David Rodriguez presented a new approach to detecting infected machines using graphs to detect botnet traffic at scale. Today we publish both Dhia and David's paper and the recording of their presentation.
Posted by Martijn Grooten on Nov 21, 2017
Firefox developer Mozilla has announced that, as of version 59 of the browser, many kinds of data URIs, which provide a way to create "domainless web content", will not be rendered in the browser, thus making this trick - used in various phishing campaigns - a lot less attractive.
Posted by Martijn Grooten on Nov 16, 2017
Virus Bulletin ran a standalone test on FireEye's Endpoint Security solution.
Posted by Martijn Grooten on Nov 13, 2017
Jelena Milosevic, a nurse with a passion for IT security, is uniquely placed to witness poor security practices in the health care sector, and to fully understand the consequences. Today, we publish the recording of a presentation given by Jelena at VB2017 in Madrid, in which she shared her inside view of security in hospitals.
Posted by Martijn Grooten on Nov 9, 2017
Both bad news (all devices were pwnd) and good news (pwning is increasingly difficult) came from the most recent mobile Pwn2Own competition. But the practical security risks that come with using mobile phones have little to do with vulnerabilities.
Posted by Martijn Grooten on Nov 8, 2017
At VB2017 in Madrid, industry veteran and ESET Senior Research Fellow David Harley presented a paper on the state of security software testing. Today we publish David's paper in both HTML and PDF format.
Posted by Martijn Grooten on Nov 3, 2017
Trickbot, a banking trojan which appeared this year, seems to be a new, more modular, and more extensible malware descendant of the notorious Dyre botnet trojan. At VB2017, Symantec researcher Andrew Brandt presented a walkthrough of a typical Trickbot infection process, and its aftermath, as seen through the lens of a tool used to perform man-in-the-middle decryption. Today, we publish both Andrew's slides and the recording of his presentation.
Posted by Martijn Grooten on Nov 2, 2017
Today, we publish a short paper in which CERT Société Générale presents FAME, its open source malware analysis framework.
Read morePosted by Martijn Grooten on Oct 31, 2017
Ebury and Mayhem, two families of Linux server malware, about which VB published papers back in 2014, are still active and have received recent updates.
Read more