russia


Introduction Last month, iSightPartners revealed a Microsoft Office zero-day leveraged in a targeted attack by a Russian cyber espionage team. This vulnerability has been patched in Microsoft bulletin MS15-070. CVE-2015-2424 was assigned to this vulnerability. In this blog post, we will discuss the nature of the vulnerability to give some insights to other researchers for understanding and detecting this specific Word vulnerability. Multi-directory entries chaining We first extracted the embedded objects inside the exploit document... [Read More]
by RSS Wayne Chin Yick Low  |  Sep 01, 2015  |  Filed in: Security Research
[Read More]
by RSS Michael Perna  |  Oct 31, 2014  |  Filed in: Industry Trends & News
[Read More]
by RSS Michael Perna  |  Mar 15, 2014  |  Filed in: Industry Trends & News
[Read More]
by RSS Michael Perna  |  Mar 08, 2014  |  Filed in: Industry Trends & News
[Read More]
by RSS Michael Perna  |  Feb 08, 2014  |  Filed in: Industry Trends & News