Introducing the New Cortex Shellcode AI Protection: A Precision AI-Driven Module
Discover Palo Alto Networks' new Cortex Shellcode AI Protection Module. Learn how Precision AI™ detects and prevents elusive shellcode attacks in real-time.
Palo Alto Networks
shellcode
Pythons and Unicorns and Hancitor…Oh My! Decoding Binaries Through Emulatio...
This blog post is a continuation of my previous post, VB Dropper and Shellcode for Hancitor Reveal New Techniques Behind Uptick, where we analyzed a new Visual Basic (VB) macro dro...
Exploitation Demystified, Part 3: Heap-Based Exploits
In my previous blog post in the Exploitation Demystified series, we learned how memory corruption exploits are implemented using stack-based overflow vulnerabilities. Let’s talk now about a main alternative pat...
Exploitation Demystified, Part 2: Overwrite and Redirect
In Part 1 of this series, we laid the foundation of memory corruption exploitation and presented the basic exploitation framework:
Exploitation Demystified: Why, What and How, Part 1
Exploits have been the major enabler of advanced persistent threats for over a decade now, but it is only in the recent years that the term has become widely used and acknowledged as a main attack vector.
UPS: Observations on CVE-2015-3113, Prior Zero-Days and the Pirpi Payload
A June 23 FireEye blog post titled “Operation Clandestine Wolf” discussed a cyber espionage group, known as APT3, that had been exploiting a zero-day...
Addressing CVE-2014-6332 SWF Exploit
Continuing a recent trend in which Internet Explorer vulnerabilities are exploited using Flash, samples of an SWF purportedly used in conjunction with CVE-2014-6332 have appeared in several places. The most famous examples of this trend are...
Subscribe to the Blog!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.