Discussions, questions and news about Malware Analysis from cybersecurity professionals on Cyberr.
0 members · 104 posts
samuel watua Soita — Full Stack Software Engineer
29 minutes. That's how little time defenders may have before an attacker starts moving laterally. Think about what your security team can realistically accomplish in 29 minutes. Investigate an alert. Identify the affected endpoint. Determine whether the account is compromised. C…
· 4 reactions · 1 comments
samuel watua Soita — Full Stack Software Engineer
Your EDR says “no malware detected.” Should you be relieved? Not necessarily. CrowdStrike's 2026 Global Threat Report found that 82% of detections in 2025 were malware-free. It also reported an 89% increase in attacks by AI-enabled adversaries. This tells us something important…
· 2 reactions · 0 comments
Mihai Camburov — Senior Offensive Security | Penetration Testing | Ethical Hacking | OSCP · CCIE Security | DefendSec Turning OSINT & penetration testing findings into real risk visibility.
Before You Run That PoC, Treat It Like Malware When a critical vulnerability is disclosed, security researchers and pentesters naturally want to validate exposure quickly. And that is exactly what makes fake Proof-of-Concept exploits effective. The recent PHP2Shell disclosure is…
· 5 reactions · 0 comments
Maxwell Bwire — Technical Support Technician
I’ve completed the Using the Metasploit Framework module on HTB Academy. During this module, I gained hands-on experience with Metasploit, including searching for exploits, configuring payloads, managing sessions, and using Meterpreter to investigate compromised systems. I also…
· 6 reactions · 0 comments
Mario Matkovski — Independent Threat Researcher | Ransomware Intelligence & OSINT
Beyond the Leak Site: What the Azazel Case Reveals About Ransomware Attribution Independent Threat Research | 12 October 2026 Introduction Ransomware data leak sites are a valuable source of threat intelligence. They provide visibility into victim claims, extortion activity, and…
· 5 reactions · 8 comments
Mike M — Technical Support Specialist
When Everyday Technology Becomes a Target Cybersecurity isn't just about stolen passwords or hacked computers. This week, cyberattacks disrupted grocery-store refrigeration systems, researchers uncovered malware installed on new Android phones, and attackers found a way to obtai…
· 4 reactions · 3 comments
SHERIF SALAH EL-DIN — Cyber Security Analyst
🔐 Splunk SIEM INTEGRATION Generate → Collect → Forward → Parse → Index → Normalize → Search → Alert ⚠️ Collection fails = Splunk is blind. ⚠️ Forwarding/parsing fails = Detection can fail. 🏗️ SPLUNK CORE 🔹 UF → Endpoint log collection 🔹 HF → Optional parsing/routing 🔹 Index…
· 4 reactions · 0 comments
samuel watua Soita — Full Stack Software Engineer
The attacker doesn't have to be smarter than your security team. They just need to be quieter. Most organizations invest heavily in prevention. Firewalls. EDR. MFA. SIEM. WAF. IDS/IPS. And rightly so. But security controls don't eliminate risk. They create signals. The real ques…
· 3 reactions · 1 comments
Marco Iacovitti — Chief Innovation Officer & Chief Information Security Officer
What cybersecurity IS? It's not attributable only to “security of IT” Cybersecurity is a "coordinated system" of layers that could be, rateher, are surely imperfect but absolutely complementary each other. Each layar has it's hole (passages) like a slice of "Swiss Chees". The su…
· 6 reactions · 1 comments
Schomer — Principal Security Solutions Architect & Founder
BREAKING: Ivanti & Windows Zero-Days Hit CISA KEV List. Here is the Cure. If your security team hasn't analyzed yesterday’s emergency additions to the CISA Known Exploited Vulnerabilities (KEV) catalog, you are exposed. Attackers are actively bypassing VPN authentication and wea…
· 4 reactions · 0 comments
samuel watua Soita — Full Stack Software Engineer
Cybersecurity is changing — and the attacker doesn't always need malware anymore. One of the most important shifts in the current threat landscape is the move from “break in” to “log in.” Attackers increasingly target: → Stolen credentials → Session tokens and cookies → MFA enro…
· 3 reactions · 0 comments
Quinton Plaatjies — SOC Engineer
AI Made Attackers Faster. How Fast Can You Respond? Generative AI has fundamentally changed the cybersecurity landscape. Tasks that once required specialized expertise, such as crafting phishing campaigns, writing malware variants, researching vulnerabilities, and identifying ta…
· 2 reactions · 0 comments
Quinton Plaatjies — SOC Engineer
SAP Patches Maximum-Severity Cloud SDK Flaw Exposing Application Credentials This headline refers to a critical security update released by SAP for a vulnerability in its Cloud SDK that could expose sensitive application credentials. What happened? SAP identified and patched a m…
· 2 reactions · 0 comments
Cynthia Orina — Cybersecurity Analyst
Why Everyone Should Turn On MFA A strong password is important, but a password alone is not enough. Multi-Factor Authentication (MFA) adds an extra layer of security by requiring two or more forms of verification before access is granted. For example: 🔑 Something you know: Pass…
· 4 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Machine-Speed Exploits Require Pre-Execution Layer Zero Trust We are watching the cyber-attack lifecycle shrink from days to minutes. Threat actors are no longer just writing malware; they are deploying agentic frameworks to automate the discovery of existing software flaws and…
· 4 reactions · 0 comments
samuel watua Soita — Full Stack Software Engineer
A cyberattack doesn't always begin with an alert. Sometimes, it begins with silence. An attacker gets access today. Nothing crashes. No ransomware appears. No obvious malware is detected. The business continues operating normally. Meanwhile, the attacker may be: → Mapping the en…
· 1 reactions · 0 comments
Quinton Plaatjies — SOC Engineer
Cisco Patches Exploited Email Gateway Zero-Day That Allows Root-Level Access The headline refers to a Cisco security update addressing a zero-day vulnerability in its Secure Email Gateway (ESA) product that was reportedly being actively exploited before a patch was available. Ke…
· 1 reactions · 0 comments
Zsolt Fabian — Managing Director
People are socially and naturally motivated to seek opportunities for joint action. Similarly companies and organizations seek economically motivated partnerships, joint ventures or other M&A activities to form strategic alliances. These are indispensable for accessing specializ…
· 3 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Hardening Layer Zero: Deterministic Gate Validation & Sub-Millisecond CWE-1000 Invariant Mapping on Restricted ARM64/Termux Sandbox While a significant portion of the security landscape relies on fragile, reactive signatures or heavy, high-overhead runtime agents that lose suppo…
· 3 reactions · 0 comments
Esla Kwanza — CyberOps Community Lead
HOTEL PAYMENT SYSTEMS: CONVENIENCE SHOULD NOT COME AT A SECURITY RISK Hotels process payments everywhere - reception, restaurants, bars, events and online bookings. Every channel needs the right security. A poorly secured payment environment can increase the risk of: • Card data…
· 1 reactions · 0 comments
Lara Borenovic — Building Cyberr
Looking to kickstart your career in cybersecurity? MIT Lincoln Laboratory is hiring for its Summer Research Program 2027! Join the Cyber System Assessments team and gain hands-on experience in reverse engineering, vulnerability research, and cyber system exploitation. MIT Lincol…
· 5 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Look at the emergence of the new x47.c botnet architecture currently evading standard endpoint monitoring. Instead of relying on static, hardcoded C2 instructions that legacy systems easily flag, this malware dynamically queries the xAI Grok API in real time to adaptively mutate…
· 3 reactions · 0 comments
Vitalii Bibikov — SOC Analyst, Blue team, Purple team, Incident Response, Inestigation
Done a small EDR evasion research lab, the name of the EDR I will not disclose, since I don't know whether it is a sensitive information or not, anyways, the research was driven by personal curiosity and has self educational intentions. Objective: Learn how an EDR works, underst…
· 3 reactions · 2 comments
Ben Nguyen — Data Scientist
AI is transforming IT from software engineering to cybersecurity. It’s becoming a powerful tool for detecting malware, ransomware, and anomalous activity. It boosts productivity, supports coding, and acts as an intelligent assistant that can flag incidents for investigation. But…
· 2 reactions · 0 comments
Frank Karani — Cybersecurity Specialist | #1 Rank Globally at CTFZone 2026 🏆 | #2 Rank East Africa at intervarsity 2026🏆 |Top 50 TCRA CyberChampions 2025/26 🇹🇿 | Top 1%globally 0xE [GUARDIAN] TryHackMe | Infrastructure Security & Penetration Testing | Student at IAA
🏆 RECORD-BREAKING WIN: We are officially in the GRAND FINALS! 🇹🇿 I am incredibly proud to share that my team, S3C_144, representing the Institute of Accountancy Arusha (IAA), has secured a spot in the Top 5 Finalists for the East Africa Intervarsity CTF 2026! Out of 220+ form…
· 3 reactions · 3 comments