April 4th

Russian espionage continues apace.

0d in an AV solution used to drop web shells. Not infrequently the security of security products is poor. Not the first, and definitely not the last.

An interesting project. The entirety of eBPF is endlessly fascinating for security. It can be used for root kits, back doors, novel intrusion detection (and prevention) systems, plus whatever it is supposed to actually be used for.

A research project to demonstrate remote code injection over TCP with a malicious eBPF probe.

https://github.com/kris-nova/boopkit

Octal with an insightful point.

Potentially interesting: a collection of all things Enigma.