#antimalware — Public Fediverse posts

https://winbuzzer.com/2026/06/21/pypi-malware-wave-exposes-weak-ai-scanner-boundary-xcxwbn/

PyPI Malware Wave Exposes Weak AI Malware Scanner Boundary

#AI #PyPI #Malware #AISecurity #Cybersecurity #Javascript #AISafety #AntiMalware #SecurityResearch #CyberThreats

Tried to install Bitdefender GravityZone on EndeavourOS and the instructions to make it think it's on Debian don't work now so I tried a container with Distrobox but it doesn't have access to do systemd stuff so my only choices now are write a pkgbuild (as suggested on the Arch forums) or use a Debian VM or regular install and hook stuff up to it when I want to scan stuff.

#Bitdefender #Linux #antimalware #EndeavourOS #Arch #ArchLinux

"Linux has FOSS anti-malware" is a myth due to ClamAV not scanning files over 2 GB in size and just assuming if it's bigger than that, that it's fine, with the official explanation being something like "malware is usually smaller than that".

#Linux #ClamAV #antimalware

@MishaVelthuis : firstly, I am definitely not an AI expert.

W.r.t. source code analysis: in fact one does not need "source code" (e.g. higher level languages) to be able to spot bugs. More or less like you wrote, in the end every computer program contains sequences of instructions for the targeted CPU (including calls to, possibly documented, operating system and other libraries).

Reverse engineers love decompilers because assembler code is a lot harder to interpret *by humans* than higher level source code (it can be done, I did it approx. 30 - 40 years ago for various CPU architectures, but it is very time consuming and error-prone).

Malware typically consist of (highly) obfuscated code to fool decompilers and emulators. I've not studied it but probably the anti-malware industry is already using AI to help them analyse malware (and, feeding the rat race, quite likely malware makers are using AI to obfuscate their code).

Internet search terms such as "malware analysis llm" may possibly help you to find related articles.

Regardless, IMO not possessing the original source code should not pose a major hurdle for finding bugs in executable code.

#AI #ReverseEngineering #Malware #DeCompilers #IDA #DisAssemblers #Infosec #AntiMalware

In 2025, the top 5 known exploited vulnerability (#KEV) vendors as of https://cyble.com/blog/cisa-kev-2025-exploited-vulnerabilities-growth/ were:

Microsoft (39)
#Apple (9)
#Cisco (8)
#Fortinet (8)
#Google #Chromium (7)

If you like to minimize your #security risk here, avoiding those vendors could improve your overall exposure.

As you can see, this is particularly true for #Microsoft.

Mitigation using #AntiMalware or #EndPointProtection is not the answer as we've learned in the previous year where the "Most Frequently Exploited #Vulnerabilities" have been security products!
Source: https://services.google.com/fh/files/misc/m-trends-2025-en.pdf

If you have high requirements for #ITsecurity, you need to migrate your systems to #Linux which is also part of KEV but on a *much* better level!

#Windows #macOS #iOS #exploits

Office sandbox file security to disappear from enterprise Windows by late 2027, Microsoft confirms https://www.csoonline.com/article/4085172/office-sandbox-file-security-to-disappear-from-enterprise-windows-by-late-2027-microsoft-confirms-2.html #SecuritySoftware #AntiMalware #Compliance #Security

Ataque "Tap and Steal": Novo malware para Android usa NFC para roubar dados de cartões de pagamento
🔗 https://tugatech.com.pt/t73687-ataque-tap-and-steal-novo-malware-para-android-usa-nfc-para-roubar-dados-de-cartoes-de-pagamento

#android #antimalware #ataque #contactless #digital #fraude #google #malware #nfc #segurança #sem #servidores #tecnologia #telegram 

Hugging Face e VirusTotal da Google unem-se para combater malware em modelos de IA
🔗 https://tugatech.com.pt/t73318-hugging-face-e-virustotal-da-google-unem-se-para-combater-malware-em-modelos-de-ia

#antimalware #blog #digital #google #ia #IPS #llms #malware #online #riscos #segurança #tecnologia 

Битва за внимание: как российские и зарубежные ИБ-медиа делят аудиторию в эпоху киберугроз

Специализированные медиа в сфере информационной безопасности оказались в центре серьезных отраслевых изменений. Киберугрозы усложняются — в том числе за счет искусственного интеллекта — и тема становится всё актуальнее. Однако сам медиарынок развивается неравномерно. Меняются паттерны потребления информации, аудитория консолидируется, конкуренция между изданиями обостряется. На этом фоне профильные ИБ-ресурсы из узкоспециализированных площадок превратились в важные источники информации для широкой аудитории — от директоров по безопасности до рядовых пользователей. Чтобы понять, как распределяется внимание на этом рынке, мы сравнили ключевые метрики российских и западных изданий. В основе анализа — данные SimilarWeb (сентябрь 2025), рейтинг цитируемости "Медиалогии" и индекс ИКС от "Яндекса".

https://habr.com/ru/articles/957454/

#сми #сми_в_интернете #securitylab #xakepru #antimalware #информационная_безопасность #рейтинг_сми

XWorm está de volta: o perigoso malware foi atualizado e agora inclui ransomware
🔗 https://tugatech.com.pt/t72362-xworm-esta-de-volta-o-perigoso-malware-foi-atualizado-e-agora-inclui-ransomware

#antimalware #ataque #criptomoeda #criptomoedas #ddos #detetado #Discord #edr #engenhariasocial #ftp #javascript #malware #microsoft #phishing #plugins #ransomware #servidores #trojan #web 

AMD lança guia completo para resolver o irritante Erro 1603 na instalação de drivers
🔗 https://tugatech.com.pt/t71817-amd-lanca-guia-completo-para-resolver-o-irritante-erro-1603-na-instalacao-de-drivers

#AMD #antimalware #chipset #ia #microsoft #online #software #windows 

At my workplace, #Microsoft #Defender 365 aka the #antimalware from hell, has decided that https://duckdb.org is a malicious link.
Every time someone tries to post it on Teams, it is blocked.
I suggested that maybe we can trigger an integer overflow in the system after many alerts...

Monthly reminder that #Windows11 fucking sucks ass.

Trying to troubleshoot why a software didn't start and Windows Defender false-positive a DLL that now can't restore.

Great start for a monday.

#Windows #Microsoft #Troubleshooting #WindowsDefender #Malware #AntiMalware #AntiVirus #AV

A spoof antivirus makes Windows Defender disable security scans – Source: www.csoonline.com https://ciso2ciso.com/a-spoof-antivirus-makes-windows-defender-disable-security-scans-source-www-csoonline-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #Windowssecurity #AntiMalware #CSOonline #CSOOnline

A spoof antivirus makes Windows Defender disable security scans https://www.csoonline.com/article/3989194/a-spoof-antivirus-makes-windows-defender-disable-security-scans.html #Vulnerabilities #WindowsSecurity #AntiMalware

Microsoft Boosts Exchange and SharePoint Security with Updated Antimalware Scan https://gbhackers.com/microsoft-boosts-exchange-and-sharepoint-security/ #CyberSecurityNews #cybersecurity #Antimalware #Microsoft #Malware

#dagelijksAI #dailyAI met #ithy
welke gratis #antimalware voor Windows heeft een eigen #firewall? #antivirus #gratis #ai:
https://ithy.com/article/ydecnxak9l

Scam Alert: FBI ‘Increasingly Seeing’ Malware Distributed In Document Converters – Source: www.techrepublic.com https://ciso2ciso.com/scam-alert-fbi-increasingly-seeing-malware-distributed-in-document-converters-source-www-techrepublic-com/ #rssfeedpostgeneratorecho #SecurityonTechRepublic #SecurityTechRepublic #CyberSecurityNews #Cybersecurity #Identitytheft #mp4converters #pdfconverters #AntiMalware #ransomware #Security #Software #Malware #fbi

The Risks of AI for Detecting Threats - A Bit of Security for March 17, 2025
What is the downside of relying on AI to detect threats? Listen to this -
https://youtu.be/_0AdSztIT9Y
#cybersecuritytips #attachsurface #antimalware #AIsecurity #threatdetection #BitofSec

Domanda per gli #informatici ovvero devo rinnovare l'abbonamento all'antimalware (a pagamento) e volevo qualche dritta da chi è del settore.

Io sto usando F-Secure e mi trovo bene, però devo rinnovare per 1 dispositivo invece che per 3 come prima e non sono certo che si possa fare, per cui se dovessi cambiare, che consigliate?

#MastoAiuto #Antimalware @filippodb @ildisinformatico

Antimalware companies could make a lot of money if they would stop being cowards and start doing desktop Linux antimalware again for home users that don't want to go to Windows 11. ClamAV with fangfrisch definitions is ok but it can't scan big files because it's intended for mail servers.

#antimalware #ClamAV #Linux #Windows11

Does anyone have a good unbiased review / ranking of “best home endpoint security”/ anti malware?

All the online reviews seem a bit tainted and get influenced by “functionality” suite. I’m not looking for a VPN, password manager and online storage.

I just want anti malware.

#CyberSecurity #infosec #antimalware #av

@boblord you inspire me to request a long overdue edit to an intranet page that refers new users to external <https://www.trustedantiviruscompare.com/best-free-antivirus>, where Editors Choice TotalAV is uppermost, and no other product or service has the "100% Free" badge.

A poll, four choices: which one aspect is the worst?

#security #antivirus #protection #antimalware

🔐 Cybersecurity Essentials: In this diagram, we help you understand the key cybersecurity approaches needed for resilience.

At RELIANOID, we support organizations by monitoring and securing all these layers in a dynamic threat landscape. 🛡️

#Cybersecurity #DefensiveSecurity #OffensiveSecurity #HybridApproach #Firewall #Antimalware #AccessControl #DataLossPrevention #PenetrationTesting #RedTeaming #DisasterRecovery #ThreatIntelligence #RELIANOID #DataProtection

Kaspersky’s US customers receive ‘UltraAV’ swap, raising red flags https://www.csoonline.com/article/3538795/kasperskys-us-customers-receive-ultraav-swap-raising-red-flags.html #SecuritySoftware #AntiMalware

#CISA boss: Makers of insecure #software are the real cyber villains
https://www.theregister.com/2024/09/20/cisa_sloppy_vendors_cybercrime_villains/

"Even calling #security holes "software #vulnerabilities" is too lenient, she added. This phrase "really diffuses responsibility. We should call them 'product defects'"

... yes! It's about time that we do not spin security issues so that only the bad guys who exploit the insecure solutions are the main problem.

#cybersecurity #spin #infrastructure #antimalware #snakeoil