Security Intelligence Archives - Page 8 of 8 - ThreatsHub Cybersecurity News

Attack inception: Compromised supply chain within a supply chain poses new risks

July 26, 2018 TH Author coin miner, Cryptocurrency mining, Cybersecurity, in-browser cryptocurrency miner, Security Intelligence, Security Response, software supply chain, supply chain attack, Windows, Windows 10, Windows 10 in S mode, Windows 10 S, Windows Defender Antivirus, Windows Defender Application Control, Windows Defender ATP, Windows Defender AV

A new software supply chain attack unearthed by Windows Defender Advanced Threat Protection (Windows Defender ATP) emerged as an unusual multi-tier case. Unknown attackers compromised the shared infrastructure in place between the vendor of a PDF editor application and one of its software vendor partners, making the apps legitimate installer the unsuspecting carrier of a Read more READ MORE HERE…

Microsoft Secure

Taking apart a double zero-day sample discovered in joint hunt with ESET

July 2, 2018 TH Author Advanced hunting, CVE-2018-4990, CVE-2018-8120, Cybersecurity, elevation of privilege (EoP), Exploit, Reflective DLL loading, Security Intelligence, Security Response, Windows, Windows 10, Windows Defender ATP, zero-day exploit

In late March 2018, I analyzed an interesting PDF sample found by ESET senior malware researcherAnton Cherepanov. The sample was initially reported to Microsoft as a potential exploit for an unknown Windows kernel vulnerability. During my investigation in parallel with ESET researchers, I was surprised to discover two new zero-day exploits in the same PDF. Read more READ MORE HERE…

Microsoft Secure

Machine learning vs. social engineering

June 7, 2018 TH Author artificial intelligence, Cybersecurity, machine learning, Next-gen antivirus, non-PE threats, Phishing, phishing attacks, Security Intelligence, Security Response, Social Engineering, Windows, Windows 10, Windows 10 S, Windows Defender Antivirus, Windows Defender ATP, Windows Defender AV

Machine learning is a key driver in the constant evolution of security technologies at Microsoft. Machine learning allows Microsoft 365 to scale next-gen protection capabilities and enhance cloud-based, real-time blocking of new and unknown threats. Just in the last few months, machine learning has helped us to protect hundreds of thousands of customers against ransomware, Read more READ MORE HERE…