RESEARCH
Trellix Advanced Research Center Patches 61,000 Vulnerable Open-Source Projects
January 23, 2023
Late last year, the Trellix Advanced Research Center team uncovered a vulnerability in Python’s tarfile module. As we dug in, we realized this was CVE-2007-4559 – a 15-year-old path traversal vulnerability with potential to allow an attacker to overwrite arbitrary files.
RECENT STORIES
GuLoader: The NSIS Vantage Point
By Nico Paulo Yturriaga · January 24, 2023
In this blog, we cover the multiple archive types used by threat actors to trick users into opening an email attachment. We also cover the progression of its distribution inside NSIS (Nullsoft Scriptable Install System) executable files by showing the obfuscation and string encryption updates through the year 2022.
Cyberattacks Targeting Ukraine Increase 20-fold at End of 2022 Fueled by Russia-linked Gamaredon Activity
By Daksh Kapur, Tomer Shloman, and John Fokker · January 24, 2023
In this blog, we outline our latest findings around cyberactivity targeting Ukraine. From malicious email and URLs to nation-state backed use of malware, cyberactivity continues to accompany kinetic military activity and social discontent.
An Era of Geopolitical Instability and Economic Uncertainty a Perfect Storm for Cyber Criminals
By Chris Hutchins and John Fokker · January 24, 2023
The return of war in Europe has also served as a wake-up call for those questioning the EU’s approach to security and defence and its ability to defend its interests, particularly in cyberspace. European political and military leadership are increasingly in lock-step on what the security threats are and where we need to deepen cooperation.
Trellix Advanced Research Center patches 61,000 vulnerable open-source projects
By Douglas McKee · January 23, 2023
Late last year, the Trellix Advanced Research Center team uncovered a vulnerability in Python’s tarfile module. As we dug in, we realized this was CVE-2007-4559 – a 15-year-old path traversal vulnerability with potential to allow an attacker to overwrite arbitrary files. We’re excited to share an update on this work.
The Bug Report — December 2022 Edition
By John Borrero Rodriguez · January 4, 2023
Let's say hello to this month's list of naughty bugs! We even have a mention by the NSA! Naughty naughty, Citrix!
RECENT NEWS
-
Jan 17, 2023
Trellix Endpoint Scores 100% Detection with Zero False Positives in Latest SE Labs Endpoint Security Test
-
Dec 7, 2022
Trellix Predicts Heightened Hacktivism and Geopolitical Cyberattacks in 2023
-
Nov 30, 2022
Trellix Expedites Delivery of XDR with AWS
-
Nov 16, 2022
Ransomware Activity Doubles in Transportation and Shipping Industry
-
Sep 28, 2022
Trellix Expands XDR Platform to Transform Security Operations
PROMOTIONS
Get the latest
We’re no strangers to cybersecurity. But we are a new company.
Stay up to date as we evolve.
Zero spam. Unsubscribe at any time.