Geek-Guy.com

Tag: analysis

Making Vulnerable Drivers Exploitable Without Hardware – The BYOVD Perspective

1 Introduction This article provides a technical analysis of how many Windows kernel mode drivers can be interacted with from user mode without the hardware they were developed for. This work was motivated by driver-oriented vulnerability research and the need to evaluate the exploitability of individual findings, which frequently affect code whose reachability is hardware-gated.…

Webworm APT targets European government organizations with new backdoors

ESET has released an analysis of the 2025 activity of Webworm, a China-aligned APT group tracked as Space Pirates and UAT-8302. Active since at least 2022, the group initially focused on targets in Asia, but has recently expanded its operations into Europe. ESET observed Webworm targeting government organizations in Belgium, Italy, Poland, Serbia, and Spain…

Pre-Stuxnet Fast16 Malware Tampered with Nuclear Weapons Simulations

A new analysis of the Lua-based fast16 malware has confirmed that it was a cyber sabotage tool designed to tamper with nuclear weapons testing simulations. According to Broadcom-owned Symantec and Carbon Black teams, the pre-Stuxnet tool was engineered to corrupt uranium-compression simulations that are central to nuclear weapon design. “Fast16’s hook engine is selectively interested…

GigaOm names Nokia “Leader” and “Outperformer” in Data Center Switching for fifth straight year

Independent analysis highlights Nokia’s Data Center Fabric for innovation, performance and readiness for AI-scale infrastructure Nokia’s Data Center Fabric Solution earns top marks for AI capabilities, automation, and reliability Recognition highlights how Nokia is delivering secure and reliable solutions in data center networking where it has clear technology leadership

Snowflake Launches Project SnowWork, Bringing Outcome-Driven AI to Every Business User

COMPANY NEWS:  Designed to orchestrate planning, analysis, and execution, Project SnowWork is an autonomous enterprise AI platform that helps business users accelerate everyday work Launching in research preview to a limited set of customers, Project SnowWork handles complex, multi-step tasks and delivers real, data-driven outcomes to business users Project SnowWork brings Snowflake’s vision for the…

Veracode Fix for SCA automates open-source vulnerability fixes

Veracode has unveiled Veracode Fix for Software Composition Analysis (SCA), an AI-powered solution to address software supply chain risk. The enhanced automated remediation engine, the next evolution of Veracode’s Fix solution, enables organizations to detect and remediate open-source vulnerabilities easily, before code reaches production. Designed to integrate seamlessly into existing developer workflows, it delivers third-party…

Druva expands DruAI with autonomous agents for forensics and compliance

Druva announced a major expansion of DruAI, adding Deep Analysis Agents that automate complex multi-day forensic and compliance investigations. IT and security teams spend too much time not just fixing problems, but proving what happened and why across incident response, forensics, audits, and operational reviews. Much of that effort goes into manual correlation and report…

REMnux v8 brings AI integration to the Linux malware analysis toolkit

REMnux, a specialized Linux distribution for malware analysis, has released version 8 with a rebuilt platform based on Ubuntu 24.04 and a new capability aimed at connecting AI agents directly to its toolset. REMnux is designed for analyzing malicious software, phishing artifacts, suspicious documents, and related forensic data. The project includes more than 200 preconfigured…

CodeHunter expands behavioral intent analysis to secure the software supply chain

CodeHunter is expanding its behavioral intent technology beyond traditional malware analysis to address supply chain risk and security decision-making across the software development lifecycle (SDLC). According to a recent Gartner report, “software supply chains transcend organizational boundaries and consist of external entities in addition to internal systems.” Gartner also warns that “improper artifact integrity validation…