Tal Liberman

#AtomBombing #ProcessDoppelgänging

[Tal Liberman @Tal_Liberman]

#RCE #instagram exploits a bug in jpeg parsing
https://t.co/rIWlotrkP5

[Ilfak Guilfanov @ilfak]

To undo or not to undo? Don't worry, redo will be available too!

[Tal Liberman @Tal_Liberman]

@zeekzack @subTee There are a few more differences (no VirtualAllocEx, ROP), but yes, that is the main differentiator.

[Tal Liberman @Tal_Liberman]

@zeekzack @subTee This is APC injection. AtomBombing would pass the code through the global atom table, without calling WriteProcessMemory.

[Tal Liberman @Tal_Liberman]

@trufae @arkc #radare2

[Tal Liberman @Tal_Liberman]

@zeekzack @subTee Casey's right, it shouldn't be a problem.

[enSilo | Breaking Malware @breakingmalware]

Splitting atoms in XNU https://t.co/PF4bWvKMwa

[Dor Azouri @bemikre]

#SirepRAT #RCE #Windows #IoT #Core https://t.co/OzPGLGTLwQ

[Tal Liberman @Tal_Liberman]

Simple way to send push notifications to your phone
https://t.co/6Ky9mxqx2B

[Tal Liberman @Tal_Liberman]

@domchell @n00py1 Makes sense 😃

[Tal Liberman @Tal_Liberman]

Windows Sandbox: isolated, temporary, desktop environment to run untrusted software without fear of impact to your PC.
https://t.co/nALNBAmpIM

[The Hacker News @TheHackersNews]

SNDBOX — Researchers Release a New Artificial Intelligence-Powered Online Automated #Malware Analysis Platform ...and It's Free!

https://t.co/9OBb0WXeB2

#SNDBOX offers Static, Dynamic (behavioral) and Network analysis for submitted executables in an easy-to-understand format.

[Udi Yavo @UdiYavo]

Great new finding and research on DarkGate malware by @_adi_z and @kerneronsec https://t.co/4LcvyBEw6E

[Tal Liberman @Tal_Liberman]

VirtualBox Guest to Host Vulnerability
100% reliable exploit code
https://t.co/42UQ8oX2dT

[Tal Liberman @Tal_Liberman]

@lior_bp Looks promising

[Tal Liberman @Tal_Liberman]

#IDA 7.2 introduces #Lumina server which holds metadata (function names, prototypes, comments, etc.) about well-known functions. Any user can send or receive metadata from Lumina.
#collaboration
https://t.co/5laH0kehEC

[Tal Liberman @Tal_Liberman]

Microsoft is porting Sysinternals utilities to Linux, starting with ProcDump https://t.co/W8UyX6ECT6

[Armis @ArmisSecurity]

.@TechCrunch covers #BLEEDINGBIT- two critical vulnerabilities impacting access points and corporate networks.
https://t.co/Dhll3yomnq

[Tal Liberman @Tal_Liberman]

Ping of Death - 2018 Edition
Heap buffer overflow vulnerability in Apple's XNU operating system kernel
https://t.co/PrIbGWWv3w