Practical Malware Analysis - Lab Write-up

https://www.jaiminton.com/Tutorials/PracticalMalwareAnalysis/#

Cars Have Your Location. This Spy Firm Wants to Sell It to the U.S. Military https://www.vice.com/en/article/k7adn9/car-location-data-telematics-us-military-ulysses-group

PDF Download :

https://drive.google.com/file/d/114Dv09yOcQXNy1NfUiMKhURt8jhIjW9J/view?usp=sharing

@M33 THX

Chinese cyberspies go after telco providers, 5G secrets

https://therecord.media/chinese-cyberspies-go-after-telco-providers-5g-secrets/

Using Syscalls to Inject Shellcode on Windows

https://www.solomonsklash.io/syscalls-for-shellcode-injection.html

ME:（i said

I have already said on my twitter profile that we will see two worlds in the future! High-tech countries headed by the United States (democracy, the West) and countries with centralized high-tech internal cycles headed by China (Southeast Asia, Asia, Russia)

China plans for a world without American tech. A commentary from Ni Guangnan said it all, he called for a "China system" of computing as dominant as Wintel and for China to grow global reliance on its 5G tech as a countermeasure to US tech

https://www.nytimes.com/2021/03/10/business/china-us-tech-rivalry.html

-----------------------------------------------------

Inside Israel’s lucrative — and secretive —cybersurveillance industry

https://restofworld.org/2021/inside-israels-lucrative-and-secretive-cybersurveillance-talent-pipeline/?utm-source=sharing

"You Do (Not) Understand Kerberos" slides and (spanish) video available in my blog! (english video soon)

Hope you enjoyed!

https://attl4s.github.io

上海交通大学研究人员发表了七篇论文
#公安部研究了机器学习的应用软件的静态漏洞分析。50漏洞分析发现可以由防御者或被攻击者利用；漏洞使用后如何使用发现取决于用户。另一篇论文提出了一个机器可以区分Tor Web流量与其他流量的学习模型

信息内容分析技术国家工程实验室
—重点介绍 #使用AI修复软件漏洞，支持网络攻击和防御，并查找软件漏洞恶意软件开发过程中的利用。54件通过提出两个论点来得出结论。

杨，将他的研究描述为“数据驱动的AI智能网络威胁检测和“猎人”防御系统; #基于AI和大数据分析的检测加密流量中的恶性肿瘤；基于机器学习加密的流量（#SSL，#Tor，#VPN，#ShadowSocks）/专用互联网协议识别和调查；数据分析与机器基于学习的网络空间虚拟角色识别，匹配，和调查。

sigstore is a project with the goal of providing a public good / non-profit service to improve the open source software supply chain by easing the adoption of cryptographic software signing, backed by transparency log technologies.

https://sigstore.dev/what_is_sigstore/

Chinese universities connected to known APTs are conducting AI/ML cybersecurity research

-----------------------------------------------

https://therecord.media/chinese-universities-connected-to-known-apts-are-conducting-ai-ml-cybersecurity-research/

https://cset.georgetown.edu/wp-content/uploads/CSET-Academics-AI-and-APTs.pdf

Windows 7 x64 MS Paint EXE Interpereted as PCM Data !!!!!!!!!!

https://soundcloud.com/r2bl3nd/windows-7-x64-ms-paint-exe

Exchange servers under siege from at least 10 APT groups
https://www.welivesecurity.com/2021/03/10/exchange-servers-under-siege-10-apt-groups/

chinese-vpns-are-recording-world-data-on-a-massive-scale

https://www.strikesource.com/2021/03/09/chinese-vpns-are-recording-world-data-on-a-massive-scale/

‘Retaliation’ for Russia's SolarWinds Spying Isn't the Answer
It will be hard pointing to a specific line the Kremlin crossed that the US hasn't crossed as well.

https://www.wired.com/story/us-solarwinds-russia-retaliation-cyber-policy/

2018年，外交官警告在武汉实验室进行危险的冠状病毒实验。
没有人听
In 2018, Diplomats Warned of Risky Coronavirus Experiments in a Wuhan Lab. No One Listened.

https://www.politico.com/news/magazine/2021/03/08/josh-rogin-chaos-under-heaven-wuhan-lab-book-excerpt-474322

So here's the Google chrome/Microsoft edge LPE bug detail :

https://halove23.blogspot.com/2021/03/google-update-service-being-scum.html