Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Ofir Shen
You Had Me at Hi — Mirai-Based NoaBot Makes an Appearance | Akamai
We can see there are some other function calls before the function call to build the XMRig configuration. If it fails, the miner terminates, but otherwise it goes to the standard XMRig miner logic. (You can compare the decompilation above to the actual XMRig source code.) Why do we as researchers care about the XMRig configuration? Usually, it contains details about the mining pool it connects to, as well as the wallet address to receive mining payments.
Safeguarding Patient Health Data Means Balancing Access and Security
No patient wants to receive a healthcare data breach message, and no physician or payer wants to send one. Yet, in 2023, the number of such breaches has more than doubled compared with 2022, and it’s predicted that the number will continue to increase in 2024. The proliferation of digital health tools during the pandemic and the implementation of the 21st Century Cures Act give patients access to and ownership of their own health information for the first time.
Weaponizing DHCP DNS Spoofing — A Hands-On Guide | Akamai
Introduction In the first part of this blog series we introduced a new set of attacks against Active Directory domains that use Microsoft Dynamic Host Configuration Protocol (DHCP) servers. These attacks enable threat actors to spoof DNS records in Active Directory Integrated DNS (ADIDNS) zones by abusing the DHCP DNS Dynamic Updates feature. We explored the feature’s operation and highlighted misconfigurations that could be abused by attackers to spoof sensitive DNS records.
Novel Detection of Process Injection Using Network Anomalies
How much data is enough to draw conclusions? Let’s imagine you see a specific process running on seven machines, making all connections using HTTPS to a specific web server. Will you be able to conclude that the same process should never use any other form of communication? Probably not. To decide on how much data per process is enough to rely on, we take each process-and-port group pair, and count the number of networks we’ve seen it in.
Mute the Sound: Chaining Vulnerabilities to Achieve RCE on Outlook: Pt 2
Audio signal processing basics Before diving into the code, let's familiarize ourselves with some of the basics of audio signal processing. If you’re already familiar with these concepts, feel free to skip to the next section. When we hear sound, what we actually hear is vibration that propagates through a transmission medium. Sound is the reception of those vibration waves as picked up by our ears and perceived by our brain. An audio signal is a continuous waveform.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Ofir
Contact Ofir, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack