An indispensable source of reference for anyone concerned with computer security, the Bulletin is the forum through which leading security researchers publish the latest security research and information in a bid to share knowledge with the security community. Publications cover the latest threats, new developments and techniques in the security landscape, opinions from respected members of the industry, and more. The Bulletin archives offer informative articles going back to 1989. Our editorial team is happy to hear from anyone interested in submitting a paper for publication.
Aditya Sood and colleagues present an analysis of ICE IX bot, a descendent of the Zeus bot which demonstrates how one bot can give rise to another.
Read moreThere are multiple ways to hide the decoder, such as by forcing Windows to apply a relocation delta, or by using obscure instruction side effects. Now, W32/Tussie shows us a way to hide the encoded data. Peter Ferrie has the details.
Read moreNeo Tan (Fortinet)
Kyle Yang (Fortinet)
Recently, we have seen a new trend in ZAccess: less is more. In around March 2012, the aggressive self-defence technique had disappeared from some variants, and in June 2012, the whole rootkit was removed, making it a completely user-mode piece of…
Read more‘[In] the digital realm ... we tread very carefully and avoid reporting [incidents] for fear of divulging sensitive data, i.e. the IP address.' Wout de Natris.
Read moreResearchers find that an alarming number of iOS apps access data without the user’s permission.
Read moreAlthough the PDF language was not designed to allow arbitrary code execution, implementation and design flaws in popular reader applications make it possible for criminals to infect machines via PDF documents. Didier Stevens explains how this is…
Read moreBy packing their malicious executables, malware authors can be sure that when they are opened in a disassembler they will not show the correct sequence of instructions, thus making malware analysis a more lengthy and difficult process. Continuing on…
Read moreUS Justice Dept. releases details of two-year operation involving undercover carding forum.
Read moreFTC says data breaches occurred as a result of group failing to maintain reasonable security on its networks.
Read more