#antimalware — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #antimalware, aggregated by home.social.
-
@MishaVelthuis : firstly, I am definitely not an AI expert.
W.r.t. source code analysis: in fact one does not need "source code" (e.g. higher level languages) to be able to spot bugs. More or less like you wrote, in the end every computer program contains sequences of instructions for the targeted CPU (including calls to, possibly documented, operating system and other libraries).
Reverse engineers love decompilers because assembler code is a lot harder to interpret *by humans* than higher level source code (it can be done, I did it approx. 30 - 40 years ago for various CPU architectures, but it is very time consuming and error-prone).
Malware typically consist of (highly) obfuscated code to fool decompilers and emulators. I've not studied it but probably the anti-malware industry is already using AI to help them analyse malware (and, feeding the rat race, quite likely malware makers are using AI to obfuscate their code).
Internet search terms such as "malware analysis llm" may possibly help you to find related articles.
Regardless, IMO not possessing the original source code should not pose a major hurdle for finding bugs in executable code.
#AI #ReverseEngineering #Malware #DeCompilers #IDA #DisAssemblers #Infosec #AntiMalware
-
@MishaVelthuis : firstly, I am definitely not an AI expert.
W.r.t. source code analysis: in fact one does not need "source code" (e.g. higher level languages) to be able to spot bugs. More or less like you wrote, in the end every computer program contains sequences of instructions for the targeted CPU (including calls to, possibly documented, operating system and other libraries).
Reverse engineers love decompilers because assembler code is a lot harder to interpret *by humans* than higher level source code (it can be done, I did it approx. 30 - 40 years ago for various CPU architectures, but it is very time consuming and error-prone).
Malware typically consist of (highly) obfuscated code to fool decompilers and emulators. I've not studied it but probably the anti-malware industry is already using AI to help them analyse malware (and, feeding the rat race, quite likely malware makers are using AI to obfuscate their code).
Internet search terms such as "malware analysis llm" may possibly help you to find related articles.
Regardless, IMO not possessing the original source code should not pose a major hurdle for finding bugs in executable code.
#AI #ReverseEngineering #Malware #DeCompilers #IDA #DisAssemblers #Infosec #AntiMalware
-
@MishaVelthuis : firstly, I am definitely not an AI expert.
W.r.t. source code analysis: in fact one does not need "source code" (e.g. higher level languages) to be able to spot bugs. More or less like you wrote, in the end every computer program contains sequences of instructions for the targeted CPU (including calls to, possibly documented, operating system and other libraries).
Reverse engineers love decompilers because assembler code is a lot harder to interpret *by humans* than higher level source code (it can be done, I did it approx. 30 - 40 years ago for various CPU architectures, but it is very time consuming and error-prone).
Malware typically consist of (highly) obfuscated code to fool decompilers and emulators. I've not studied it but probably the anti-malware industry is already using AI to help them analyse malware (and, feeding the rat race, quite likely malware makers are using AI to obfuscate their code).
Internet search terms such as "malware analysis llm" may possibly help you to find related articles.
Regardless, IMO not possessing the original source code should not pose a major hurdle for finding bugs in executable code.
#AI #ReverseEngineering #Malware #DeCompilers #IDA #DisAssemblers #Infosec #AntiMalware
-
@MishaVelthuis : firstly, I am definitely not an AI expert.
W.r.t. source code analysis: in fact one does not need "source code" (e.g. higher level languages) to be able to spot bugs. More or less like you wrote, in the end every computer program contains sequences of instructions for the targeted CPU (including calls to, possibly documented, operating system and other libraries).
Reverse engineers love decompilers because assembler code is a lot harder to interpret *by humans* than higher level source code (it can be done, I did it approx. 30 - 40 years ago for various CPU architectures, but it is very time consuming and error-prone).
Malware typically consist of (highly) obfuscated code to fool decompilers and emulators. I've not studied it but probably the anti-malware industry is already using AI to help them analyse malware (and, feeding the rat race, quite likely malware makers are using AI to obfuscate their code).
Internet search terms such as "malware analysis llm" may possibly help you to find related articles.
Regardless, IMO not possessing the original source code should not pose a major hurdle for finding bugs in executable code.
#AI #ReverseEngineering #Malware #DeCompilers #IDA #DisAssemblers #Infosec #AntiMalware
-
In 2025, the top 5 known exploited vulnerability (#KEV) vendors as of https://cyble.com/blog/cisa-kev-2025-exploited-vulnerabilities-growth/ were:
Microsoft (39)
#Apple (9)
#Cisco (8)
#Fortinet (8)
#Google #Chromium (7)If you like to minimize your #security risk here, avoiding those vendors could improve your overall exposure.
As you can see, this is particularly true for #Microsoft.
Mitigation using #AntiMalware or #EndPointProtection is not the answer as we've learned in the previous year where the "Most Frequently Exploited #Vulnerabilities" have been security products!
Source: https://services.google.com/fh/files/misc/m-trends-2025-en.pdfIf you have high requirements for #ITsecurity, you need to migrate your systems to #Linux which is also part of KEV but on a *much* better level!
-
In 2025, the top 5 known exploited vulnerability (#KEV) vendors as of https://cyble.com/blog/cisa-kev-2025-exploited-vulnerabilities-growth/ were:
Microsoft (39)
#Apple (9)
#Cisco (8)
#Fortinet (8)
#Google #Chromium (7)If you like to minimize your #security risk here, avoiding those vendors could improve your overall exposure.
As you can see, this is particularly true for #Microsoft.
Mitigation using #AntiMalware or #EndPointProtection is not the answer as we've learned in the previous year where the "Most Frequently Exploited #Vulnerabilities" have been security products!
Source: https://services.google.com/fh/files/misc/m-trends-2025-en.pdfIf you have high requirements for #ITsecurity, you need to migrate your systems to #Linux which is also part of KEV but on a *much* better level!
-
In 2025, the top 5 known exploited vulnerability (#KEV) vendors as of https://cyble.com/blog/cisa-kev-2025-exploited-vulnerabilities-growth/ were:
Microsoft (39)
#Apple (9)
#Cisco (8)
#Fortinet (8)
#Google #Chromium (7)If you like to minimize your #security risk here, avoiding those vendors could improve your overall exposure.
As you can see, this is particularly true for #Microsoft.
Mitigation using #AntiMalware or #EndPointProtection is not the answer as we've learned in the previous year where the "Most Frequently Exploited #Vulnerabilities" have been security products!
Source: https://services.google.com/fh/files/misc/m-trends-2025-en.pdfIf you have high requirements for #ITsecurity, you need to migrate your systems to #Linux which is also part of KEV but on a *much* better level!
-
In 2025, the top 5 known exploited vulnerability (#KEV) vendors as of https://cyble.com/blog/cisa-kev-2025-exploited-vulnerabilities-growth/ were:
Microsoft (39)
#Apple (9)
#Cisco (8)
#Fortinet (8)
#Google #Chromium (7)If you like to minimize your #security risk here, avoiding those vendors could improve your overall exposure.
As you can see, this is particularly true for #Microsoft.
Mitigation using #AntiMalware or #EndPointProtection is not the answer as we've learned in the previous year where the "Most Frequently Exploited #Vulnerabilities" have been security products!
Source: https://services.google.com/fh/files/misc/m-trends-2025-en.pdfIf you have high requirements for #ITsecurity, you need to migrate your systems to #Linux which is also part of KEV but on a *much* better level!
-
In 2025, the top 5 known exploited vulnerability (#KEV) vendors as of https://cyble.com/blog/cisa-kev-2025-exploited-vulnerabilities-growth/ were:
Microsoft (39)
#Apple (9)
#Cisco (8)
#Fortinet (8)
#Google #Chromium (7)If you like to minimize your #security risk here, avoiding those vendors could improve your overall exposure.
As you can see, this is particularly true for #Microsoft.
Mitigation using #AntiMalware or #EndPointProtection is not the answer as we've learned in the previous year where the "Most Frequently Exploited #Vulnerabilities" have been security products!
Source: https://services.google.com/fh/files/misc/m-trends-2025-en.pdfIf you have high requirements for #ITsecurity, you need to migrate your systems to #Linux which is also part of KEV but on a *much* better level!
-
CW: Kaspersky
While I don't trust Kaspersky due to Russia, them doing antimalware for Linux is a good sign that maybe other software will start popping up again so there's more options than ClamAV and Bitdefender GravityZone for "servers" (they consider all Linux installs servers last I checked).
-
CW: Kaspersky
While I don't trust Kaspersky due to Russia, them doing antimalware for Linux is a good sign that maybe other software will start popping up again so there's more options than ClamAV and Bitdefender GravityZone for "servers" (they consider all Linux installs servers last I checked).
-
CW: Kaspersky
While I don't trust Kaspersky due to Russia, them doing antimalware for Linux is a good sign that maybe other software will start popping up again so there's more options than ClamAV and Bitdefender GravityZone for "servers" (they consider all Linux installs servers last I checked).
-
CW: Kaspersky
While I don't trust Kaspersky due to Russia, them doing antimalware for Linux is a good sign that maybe other software will start popping up again so there's more options than ClamAV and Bitdefender GravityZone for "servers" (they consider all Linux installs servers last I checked).
-
#python #AI #antimalware
#MachineLearning #DataScience #Cybersecurity #malware #SEG #MalSpam #cyberwarfare #VulnerabilityManagement #PatchManagement
#cybersecurityawareness
#security #infosec
t-SNE binary clusters
Best classifiers KNN, Decision Trees -
Wait what??? Seriously???
Cybersecurity company Avast profits from violating users privacy.
They got caught and yet CEO Ondrej Vleck wants people to feel bad they have to shutdown their Jumpshot subsidiary?
#avast #jumpshot #cybersecurity #antivirus #antimalware #privacy #malware #protection
-
XWorm está de volta: o perigoso malware foi atualizado e agora inclui ransomware
🔗 https://tugatech.com.pt/t72362-xworm-esta-de-volta-o-perigoso-malware-foi-atualizado-e-agora-inclui-ransomware#antimalware #ataque #criptomoeda #criptomoedas #ddos #detetado #Discord #edr #engenhariasocial #ftp #javascript #malware #microsoft #phishing #plugins #ransomware #servidores #trojan #web
-
The Risks of AI for Detecting Threats - A Bit of Security for March 17, 2025
What is the downside of relying on AI to detect threats? Listen to this -
https://youtu.be/_0AdSztIT9Y
#cybersecuritytips #attachsurface #antimalware #AIsecurity #threatdetection #BitofSec -
Monthly reminder that #Windows11 fucking sucks ass.
Trying to troubleshoot why a software didn't start and Windows Defender false-positive a DLL that now can't restore.
Great start for a monday.
#Windows #Microsoft #Troubleshooting #WindowsDefender #Malware #AntiMalware #AntiVirus #AV
-
Office sandbox file security to disappear from enterprise Windows by late 2027, Microsoft confirms https://www.csoonline.com/article/4085172/office-sandbox-file-security-to-disappear-from-enterprise-windows-by-late-2027-microsoft-confirms-2.html #SecuritySoftware #AntiMalware #Compliance #Security
-
Ataque "Tap and Steal": Novo malware para Android usa NFC para roubar dados de cartões de pagamento
🔗 https://tugatech.com.pt/t73687-ataque-tap-and-steal-novo-malware-para-android-usa-nfc-para-roubar-dados-de-cartoes-de-pagamento#android #antimalware #ataque #contactless #digital #fraude #google #malware #nfc #segurança #sem #servidores #tecnologia #telegram
-
Hugging Face e VirusTotal da Google unem-se para combater malware em modelos de IA
🔗 https://tugatech.com.pt/t73318-hugging-face-e-virustotal-da-google-unem-se-para-combater-malware-em-modelos-de-ia#antimalware #blog #digital #google #ia #IPS #llms #malware #online #riscos #segurança #tecnologia
-
Битва за внимание: как российские и зарубежные ИБ-медиа делят аудиторию в эпоху киберугроз
Специализированные медиа в сфере информационной безопасности оказались в центре серьезных отраслевых изменений. Киберугрозы усложняются — в том числе за счет искусственного интеллекта — и тема становится всё актуальнее. Однако сам медиарынок развивается неравномерно. Меняются паттерны потребления информации, аудитория консолидируется, конкуренция между изданиями обостряется. На этом фоне профильные ИБ-ресурсы из узкоспециализированных площадок превратились в важные источники информации для широкой аудитории — от директоров по безопасности до рядовых пользователей. Чтобы понять, как распределяется внимание на этом рынке, мы сравнили ключевые метрики российских и западных изданий. В основе анализа — данные SimilarWeb (сентябрь 2025), рейтинг цитируемости "Медиалогии" и индекс ИКС от "Яндекса".
https://habr.com/ru/articles/957454/
#сми #сми_в_интернете #securitylab #xakepru #antimalware #информационная_безопасность #рейтинг_сми
-
AMD lança guia completo para resolver o irritante Erro 1603 na instalação de drivers
🔗 https://tugatech.com.pt/t71817-amd-lanca-guia-completo-para-resolver-o-irritante-erro-1603-na-instalacao-de-drivers#AMD #antimalware #chipset #ia #microsoft #online #software #windows
-
At my workplace, #Microsoft #Defender 365 aka the #antimalware from hell, has decided that https://duckdb.org is a malicious link.
Every time someone tries to post it on Teams, it is blocked.
I suggested that maybe we can trigger an integer overflow in the system after many alerts... -
A spoof antivirus makes Windows Defender disable security scans – Source: www.csoonline.com https://ciso2ciso.com/a-spoof-antivirus-makes-windows-defender-disable-security-scans-source-www-csoonline-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #Windowssecurity #AntiMalware #CSOonline #CSOOnline
-
A spoof antivirus makes Windows Defender disable security scans https://www.csoonline.com/article/3989194/a-spoof-antivirus-makes-windows-defender-disable-security-scans.html #Vulnerabilities #WindowsSecurity #AntiMalware
-
Microsoft Boosts Exchange and SharePoint Security with Updated Antimalware Scan https://gbhackers.com/microsoft-boosts-exchange-and-sharepoint-security/ #CyberSecurityNews #cybersecurity #Antimalware #Microsoft #Malware
-
#dagelijksAI #dailyAI met #ithy
welke gratis #antimalware voor Windows heeft een eigen #firewall? #antivirus #gratis #ai:
https://ithy.com/article/ydecnxak9l -
Scam Alert: FBI ‘Increasingly Seeing’ Malware Distributed In Document Converters – Source: www.techrepublic.com https://ciso2ciso.com/scam-alert-fbi-increasingly-seeing-malware-distributed-in-document-converters-source-www-techrepublic-com/ #rssfeedpostgeneratorecho #SecurityonTechRepublic #SecurityTechRepublic #CyberSecurityNews #Cybersecurity #Identitytheft #mp4converters #pdfconverters #AntiMalware #ransomware #Security #Software #Malware #fbi
-
Domanda per gli #informatici ovvero devo rinnovare l'abbonamento all'antimalware (a pagamento) e volevo qualche dritta da chi è del settore.
Io sto usando F-Secure e mi trovo bene, però devo rinnovare per 1 dispositivo invece che per 3 come prima e non sono certo che si possa fare, per cui se dovessi cambiare, che consigliate?
-
Antimalware companies could make a lot of money if they would stop being cowards and start doing desktop Linux antimalware again for home users that don't want to go to Windows 11. ClamAV with fangfrisch definitions is ok but it can't scan big files because it's intended for mail servers.
-
Does anyone have a good unbiased review / ranking of “best home endpoint security”/ anti malware?
All the online reviews seem a bit tainted and get influenced by “functionality” suite. I’m not looking for a VPN, password manager and online storage.
I just want anti malware.
-
@boblord you inspire me to request a long overdue edit to an intranet page that refers new users to external <https://www.trustedantiviruscompare.com/best-free-antivirus>, where Editors Choice TotalAV is uppermost, and no other product or service has the "100% Free" badge.
A poll, four choices: which one aspect is the worst?
-
🔐 Cybersecurity Essentials: In this diagram, we help you understand the key cybersecurity approaches needed for resilience.
At RELIANOID, we support organizations by monitoring and securing all these layers in a dynamic threat landscape. 🛡️
#Cybersecurity #DefensiveSecurity #OffensiveSecurity #HybridApproach #Firewall #Antimalware #AccessControl #DataLossPrevention #PenetrationTesting #RedTeaming #DisasterRecovery #ThreatIntelligence #RELIANOID #DataProtection
-
Kaspersky’s US customers receive ‘UltraAV’ swap, raising red flags https://www.csoonline.com/article/3538795/kasperskys-us-customers-receive-ultraav-swap-raising-red-flags.html #SecuritySoftware #AntiMalware
-
#CISA boss: Makers of insecure #software are the real cyber villains
https://www.theregister.com/2024/09/20/cisa_sloppy_vendors_cybercrime_villains/"Even calling #security holes "software #vulnerabilities" is too lenient, she added. This phrase "really diffuses responsibility. We should call them 'product defects'"
... yes! It's about time that we do not spin security issues so that only the bad guys who exploit the insecure solutions are the main problem.
-
Remember how #Microsoft complained after the #CrowdStrike fiasco how they've been forced by the EU to open up for 3rd party anti-malware to use advanced interfaces?
Well, guess what MS now did with their #Office applications on #macOS? Right: they bypassed the operating system’s permission model. 😈
-
Una "Idea loca" del año 2018-19 es ahora un servicio de seguridad que está disponible en "Tu Latch". Os lo cuento en -> Tu Latch "Navegación Segura". Codename: "Second Factor Web Browsing (2FWB)" https://www.elladodelmal.com/2024/07/tu-latch-navegacion-segura-codename.html #antiphishing #antimalware #hardening #Protección #Latch
-
While Linux is generally more secure than other operating systems, it is not immune to threats. This lesson covers essential security practices, including the role of antivirus and antimalware solutions.
#linux #LinuxSecurity #CyberSecurity #Antivirus #Antimalware #LinuxServerProtection #LinuxDesktop #CyberProtection #TechSavvy #FirewallConfiguration #IntrusionDetection #RealTimeScanning #SSHKeys #StrongPasswords #RegularUpdates #LinuxSafety #SecureLinux
https://linuxexpert.org/how-to-protect-a-linux-server-or-desktop/ -
Quick vent about the #CrowdStrike #Falcon thing.
My day job is to maintain a commercially available #Linux OS. Among my responsibilities are package management and security, including escalation of customer support tickets.
#Antimalware tools on Linux are a mixed bag. Many of them instrument the OS kernel by intercepting code to do their analysis functions. These tools regularly run into conflicts with work that we do, and customers come to us complaining when it happens.
Occasionally something like what happened today occurs, bringing servers down and requiring recovery actions. Fortunately Linux provides much more robust tools for recovering from situations like this than Windows, but it's still a pain in the ass.
What I've learned from all of those interactions is that the IT industry has become lazy where it comes to security. Companies don't hire enough #infosec people to keep systems secure; they just put blind faith in third-party products. And it shows.
I regularly see customers come to us with systems that have not been patched in five or more years (last month, I saw one that hasn't been patched in 12). These tickets are usually from system administrators who know very little about security, and rely on the tools to take care of that for them.
I don't want to give any of you nightmares, but let's just say that if you don't already work in that part of the industry, you don't want to see behind the curtain.
Do better, IT industry. Stop playing "set it and forget it," and start being active custodians. The world depends on it now.
(p.s. I don't begrudge tools like this existing. They can be useful! But watch the tools carefully, and holy hell DO NOT TRUST THEM AS YOUR ONLY LINE OF DEFENSE. If you don't have *people* watching over your system security, it's only a matter of time before you're screwed.) -
When #antimalware products are the #malware:
FTC to ban #Avast from selling browsing data for advertising purposes
https://www.bleepingcomputer.com/news/security/ftc-to-ban-avast-from-selling-browsing-data-for-advertising-purposes/Edit: just to be clear: most anti-malware products deployed major security issues like open backdoors on many Millions of computers in the past. It's a #snakeoil business where users pay for a false feeling of security and tend to take higher risks. Almost all companies that got #ransomware had anti-malware in place.
-
Scam Alert: FBI ‘Increasingly Seeing’ Malware Distributed In Document Converters – Source: www.techrepublic.com https://ciso2ciso.com/scam-alert-fbi-increasingly-seeing-malware-distributed-in-document-converters-source-www-techrepublic-com/ #rssfeedpostgeneratorecho #SecurityonTechRepublic #SecurityTechRepublic #CyberSecurityNews #Cybersecurity #Identitytheft #mp4converters #pdfconverters #AntiMalware #ransomware #Security #Software #Malware #fbi
-
Scam Alert: FBI ‘Increasingly Seeing’ Malware Distributed In Document Converters – Source: www.techrepublic.com https://ciso2ciso.com/scam-alert-fbi-increasingly-seeing-malware-distributed-in-document-converters-source-www-techrepublic-com/ #rssfeedpostgeneratorecho #SecurityonTechRepublic #SecurityTechRepublic #CyberSecurityNews #Cybersecurity #Identitytheft #mp4converters #pdfconverters #AntiMalware #ransomware #Security #Software #Malware #fbi
-
Scam Alert: FBI ‘Increasingly Seeing’ Malware Distributed In Document Converters – Source: www.techrepublic.com https://ciso2ciso.com/scam-alert-fbi-increasingly-seeing-malware-distributed-in-document-converters-source-www-techrepublic-com/ #rssfeedpostgeneratorecho #SecurityonTechRepublic #SecurityTechRepublic #CyberSecurityNews #Cybersecurity #Identitytheft #mp4converters #pdfconverters #AntiMalware #ransomware #Security #Software #Malware #fbi
-
While Linux is generally more secure than other operating systems, it is not immune to threats. This lesson covers essential security practices, including the role of antivirus and antimalware solutions.
#linux #LinuxSecurity #CyberSecurity #Antivirus #Antimalware #LinuxServerProtection #LinuxDesktop #CyberProtection #TechSavvy #FirewallConfiguration #IntrusionDetection #RealTimeScanning #SSHKeys #StrongPasswords #RegularUpdates #LinuxSafety #SecureLinux
https://linuxexpert.org/how-to-protect-a-linux-server-or-desktop/ -
While Linux is generally more secure than other operating systems, it is not immune to threats. This lesson covers essential security practices, including the role of antivirus and antimalware solutions.
#linux #LinuxSecurity #CyberSecurity #Antivirus #Antimalware #LinuxServerProtection #LinuxDesktop #CyberProtection #TechSavvy #FirewallConfiguration #IntrusionDetection #RealTimeScanning #SSHKeys #StrongPasswords #RegularUpdates #LinuxSafety #SecureLinux
https://linuxexpert.org/how-to-protect-a-linux-server-or-desktop/ -
While Linux is generally more secure than other operating systems, it is not immune to threats. This lesson covers essential security practices, including the role of antivirus and antimalware solutions.
#linux #LinuxSecurity #CyberSecurity #Antivirus #Antimalware #LinuxServerProtection #LinuxDesktop #CyberProtection #TechSavvy #FirewallConfiguration #IntrusionDetection #RealTimeScanning #SSHKeys #StrongPasswords #RegularUpdates #LinuxSafety #SecureLinux
https://linuxexpert.org/how-to-protect-a-linux-server-or-desktop/ -
While Linux is generally more secure than other operating systems, it is not immune to threats. This lesson covers essential security practices, including the role of antivirus and antimalware solutions.
#linux #LinuxSecurity #CyberSecurity #Antivirus #Antimalware #LinuxServerProtection #LinuxDesktop #CyberProtection #TechSavvy #FirewallConfiguration #IntrusionDetection #RealTimeScanning #SSHKeys #StrongPasswords #RegularUpdates #LinuxSafety #SecureLinux
https://linuxexpert.org/how-to-protect-a-linux-server-or-desktop/ -
The Risks of AI for Detecting Threats - A Bit of Security for March 17, 2025
What is the downside of relying on AI to detect threats? Listen to this -
https://youtu.be/_0AdSztIT9Y
#cybersecuritytips #attachsurface #antimalware #AIsecurity #threatdetection #BitofSec -
The Risks of AI for Detecting Threats - A Bit of Security for March 17, 2025
What is the downside of relying on AI to detect threats? Listen to this -
https://youtu.be/_0AdSztIT9Y
#cybersecuritytips #attachsurface #antimalware #AIsecurity #threatdetection #BitofSec