I'd like to thank my co-author, Martin Zugec, for his valuable contributions to this report. This intrusion adds three dimensions to the public understanding of Chinese APT activity in contested ...

Microsoft is finally ripping out one of the weakest links in its identity stack, cutting off a legacy cipher that attackers have abused for years to walk straight into corporate networks. The move ...

Introduction Xloader is an information stealing malware family that evolved from Formbook and targets web browsers, email clients, and File Transfer Protocol (FTP) applications. Additionally, Xloader ...

Over the history of Active Directory, threat actors have continually identified new ways of exposing vulnerabilities in the Kerberos authentication protocol. To help reduce the risks associated with ...

Microsoft is continuing its push to modernize Windows security, and this time the focus is on strengthening Kerberos authentication across the platform. The company is preparing a major Kerberos ...

What is a Cryptographic Bill of Materials? A C-BOM (Cryptographic Bill of Materials) is an inventory of every cryptographic primitive used in a system similar to a software BOM but focused on ...

HTMLDOC is a program that reads HTML and Markdown source files or web pages and generates corresponding EPUB, HTML, PostScript, or PDF files with an optional table of contents. HTMLDOC was developed ...

TikTok’s fate in the United States has been in flux since Congress passed a law compelling its sale to U.S. owners, and after several deadline extensions by Trump’s White House, the long-awaited deal ...

About time: Microsoft introduced support for the RC4 stream cipher in Windows 2000 as the default authentication algorithm for the Active Directory services. The system has been insecure for even ...

Microsoft is officially moving to shut the door on RC4 - a legacy cryptographic cipher that has quietly persisted inside Windows authentication environments for decades - and forcing organizations to ...