Reading Room

Reading Room

Date	Name	Category	Subcategories
19.3.21	Foreign Threats to the 2020 US Federal Elections	Report	BigBrother
19.3.21	Internet Crime Report 2020	Report	CyberCrime
19.3.21	T e c h n i c a l A n a l y s i s o f O p e r a t i o n Diànxùn	Operation	Operation
16.3.2021	Sex in the digital era: How secure are smart sex toys?	White Papers	White Papers
16.3.2021	A wild Kobalos appears: Tricksy Linux malware goes after HPCs	White Papers	White Papers
16.3.2021	Cybersecurity Trends 2021: Staying secure in uncertain times	White Papers	White Papers
16.3.2021	LATAM financial cybercrime: Competitors‑in‑crime sharing TTPs	White Papers	White Papers
16.3.2021	InvisiMole: The hidden part of the story	White Papers	White Papers
16.3.2021	Operation In(ter)ception: Targeted attacks against European aerospace and military companies	White Papers	White Papers
16.3.2021	From Agent.BTZ to ComRAT v4: A ten‑year journey	White Papers	White Papers
16.3.2021	KrØØk – CVE‑2019‑15126: Serious vulnerability deep inside your Wi‑Fi encryption	White Papers	White Papers
16.3.2021	ESET Deep Behavioral Inspection	White Papers	White Papers
16.3.2021	Cybersecurity Trends 2020: Technology is getting smarter – are we?	White Papers	White Papers
16.3.2021	ESET Advanced Machine Learning	White Papers	White Papers
16.3.2021	Operation Ghost: The Dukes aren’t back – they never left	White Papers	White Papers
16.3.2021	Connecting the dots: Exposing the arsenal and methods of the Winnti Group	White Papers	White Papers
16.3.2021	AT commands, TOR‑based communications: Meet Attor, a fantasy creature and also a spy platform	White Papers	White Papers
16.3.2021	A machine‑learning method to explore the UEFI landscape	White Papers	White Papers
16.3.2021	Machete just got sharper: Venezuelan government institutions under attack	White Papers	White Papers
16.3.2021	Okrum and Ketrican: An overview of recent Ke3chang group activity	White Papers	White Papers
16.3.2021	Turla LightNeuron: One email away from remote code execution	White Papers	White Papers
16.3.2021	Machine Learning era in cybersecurity: A step towards a safer world or the brink of chaos?	White Papers	White Papers
16.3.2021	Android banking malware: Sophisticated Trojans vs. Fake banking apps	White Papers	White Papers
16.3.21	Exploitation and Sanitization of Hidden Data in PDF Files	Papers	Multiple
16.3.21	State of Malware 2021	Report	Malware
12.3.21	Rowhammer.js: A Remote Software-Induced Fault Attack in JavaScript	Papers	Multiple
11.3.21	Prime+Probe 1, JavaScript 0: Overcoming Browser-based Side-Channel Defenses	Papers	Multiple
11.3.21	Practical Keystroke Timing Attacks in Sandboxed JavaScript	Papers	Multiple
6.3.21	SPEAR PHISHING TARGETING ICS SUPPLY CHAIN – ANALYSIS	Report	ICS
5.3.21	RANSOMWARE UNCOVERED 2020—2021	Report	Ransomware
2.3.21	Embracing a Zero Trust Security Model	Report	BigBrother
2.3.21	China-Linked Group RedEcho Targets the Indian Power Sector Amid Heightened Border Tensions	Report	BigBrother
2.3.21	A Global Perspective of the SideWinder APT	Report	APT
27.02.2021	Hey Alexa, is this Skill Safe?: Taking a Closer Look at the Alexa Skill Ecosystem	Papers	Multiple
27.02.2021	The State of Stalkerware in 2020	Report	Cyber
27.02.2021	RYUK RANSOMWARE	Report	Ransomware
26.02.2021	Lazarus targets defense industry with ThreatNeedle	Report	ICS
25.02.2021	ICS CYBERSECURITY YEAR IN REVIEW 2020	Report	ICS
25.02.2021	ICS CYBERSECURITY YEAR IN REVIEW 2020 EXECUTIVE SUMMARY	Report	ICS
25.02.2021	Characterizing CNAME Cloaking-Based Tracking on the Web	Papers	Multiple
25.02.2021	Click and Bait: Vietnamese Human Rights Defenders Targeted with Spyware Attacks	Papers	Multiple
25.02.2021	LazyScripter: From Empire to double RAT	Papers	Multiple
24.02.2021	Attacks bypassing the signature validation in PDF	Papers	Multiple
24.02.2021	Zoom on the Keystrokes: Exploiting Video Calls for Keystroke Inference Attacks	Papers	Multiple
24.02.2021	Shadow Attacks: Hiding and Replacing Content in Signed PDFs	Papers	Multiple
20.02.2021	The EMV Standard: Break, Fix, Verify	Papers	Multiple
20.02.2021	Card Brand Mixup Attack: Bypassing the PIN in non-Visa Cards by Using Them for Visa Transactions∗	Papers	Multiple
18.02.2021	SANDWORM INTRUSION SET CAMPAIGN TARGETING CENTREON SYSTEMS	Report	APT
18.02.2021	The Modern Hacker's Outreach - Paper	Papers	Multiple
17.02.2021	Encrypted Linux x86-64 Loadable Kernel Modules - Paper	Papers	Linux
16.02.2021	Firmware Analysis and Simulation - Paper	Papers	Multiple
16.02.2021	API Security Overview - Paper	Papers	Multiple
15.02.2021	Mobile App Security Overview - Paper	Papers	Multiple
14.02.2021	Exploit WordPress Plugin Vulnerabilities Using Static Source Code Analysis - Paper	Papers	PHP
13.02.2021	Secure Coding References - Paper	Papers	Multiple
12.02.2021	HeartBleed Attack - Paper	Papers	Multiple
11.02.2021	Object Prototype Pollution - Paper	Papers	Multiple
10.02.2021	Parallels Remote Application Server (RAS) 18 IP Disclosure - Paper	Papers	Windows
09.02.2021	A Hands-On Introduction to Insecure Deserialization - Paper	Papers	Python
08.02.2021	Understanding and Exploiting Zerologon - Paper	Papers	Windows
07.02.2021	Practical PHP Security - Paper	Papers	PHP
06.02.2021	Wireshark for Noobs - Paper	Papers	Multiple
05.02.2021	Ethical Hacking and Penetration Testing Guide - Paper (Turkish)	Papers	Multiple
04.02.2021	A hands-on approach to Linux Privilege Escalation - Paper	Papers	Linux
03.02.2021	Practical Insight Into Injections - Paper	Papers	Multiple
02.02.2021	Deep Insight into Social Engineering - Paper	Papers	Multiple
01.02.2021	Who is targeted by email-based phishing and malware?	Papers	Multiple
14.01.2021	DNS Cache Poisoning Attack Reloaded: Revolutions with Side Channels	Report	Attack
13.01.2021	PLATYPUS: Software-based Power Side-Channel Attacks on x86	Report	Attack
12.01.2021	Dissecting a Chinese APT Targeting South Eastern Asian Government Institutions	Report	APT
11.01.2021	A GLOBAL RESET Cyber Security Predictions 2021	Report	Cyber
10.01.2021	Advisory: APT29 targets COVID-19 vaccine development	Report	APT
09.01.2021	MOLERATS IN THE CLOUD	Report	CyberSpy
08.01.2021	RANSOMWARE IN ICS ENVIRONMENTS	Report	ICS
07.01.2021	NSA CYBERSECURITY 2020 YEAR IN REVIEW	Report	BigBrother
06.01.2021	TENABLE’S 2020 THREAT LANDSCAPE RETROSPECTIVE	Report	Cyber
05.01.2021	2019 GLOBAL THREAT REPORT ADVERSARY TRADECRAFT AND THE IMPORTANCE OF SPEED	Report	Cyber
04.01.2021	“Winnti”	Report	Malware
03.01.2021	“Lebanese Cedar” APT	Report	APT
02.01.2021	How China Detects and Blocks Shadowsocks	Report	BigBrother
01.01.2021	Securing the Pandemic-Disrupted Workplace	Report	Cyber
2020-10-17	Overlapping IP Fragments - Paper	Papers	Multiple
2020-10-17	Spraying owa & Abusing MSSQL - Paper	Papers	Windows
2020-10-17	iOS Swift Anti-Jailbreak Bypass with Frida - Paper	Papers	iOS
2020-10-17	Nos-Santos-Izquierdo Field - Paper	Papers	Multiple
2020-10-17	Abusing COM & DCOM objects - Paper	Papers	Multiple
2020-10-17	SMB Enumeration&Exploitation&Hardening - Paper	Papers	Multiple
2020-10-17	Bypass Certificate Pinning in modern Android application via custom Root CA - Paper	Papers	Multiple
2020-09-17	UEFI Secure Boot Customization	Papers	Boot
2020-09-16	Zerologon: Unauthenticated domain controller compromise by subverting Netlogon cryptography (CVE-2020-1472)	Papers	Vulnerebility
2020-09-13	CVE-2018-17145: Bitcoin Inventory Out-of-Memory Denial-of-Service Attack	Papers	Attack
2020-09-10	Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E)	Papers	Attack
2020-08-28	The EMV Standard: Break, Fix, Verify	Papers	Attack
2020-07-27	CVE 2020-6418 - Paper	Papers	Multiple
2020-07-26	I Got My EyeOn You - Security Vulnerabilities in D-Link's Baby Monitor - Paper	Papers	Hardware
2020-07-26	Assembly “wrapping”: a technique for anti-disassembly - Paper	Papers	Multiple
2020-07-14	I Got My EyeOn You_Security Vulnerabilities in D-Link Baby Monitor - Paper	Papers	Hardware
2020-07-14	APK Testing Report - Paper	Papers	Android
2020-07-06	Assembly wrapping: anti-disassembly technique - Paper	Papers	Multiple
2020-07-02	WhatsApp Remote Code Execution - Paper	Papers	Android
2020-06-27	Sony Playstation 2 (PS2): FreeDVDBoot - Hacking the PlayStation 2 through its DVD player	Papers	Hardware
2020-06-25	Exploit Command Injection Router via reverse firmware technique - Paper	Papers	Hardware
2020-06-18	Writing an Quick Packet Sniffer with Python & Scapy - Paper	Papers	Multiple
2020-06-16	English paper Abusing Windows Data Protection API	Papers	Windows
2020-06-15	Detect SQL Injection WordPress Plugin using regex	Papers	PHP
2020-06-15	Reverse Engineering Android Application - Paper	Papers	Android
2020-06-09	Exploiting Unrestricted File Upload via Plugin Uploader in WordPress - Paper	Papers	PHP
2020-06-09	Firmware Analysis	Papers	Hardware
2020-06-04	Sniffing VoIP calls using Raspberry pi - Paper	Papers	Multiple
2020-05-21	OAuth 2.0 Implementation and Security - Paper	Papers	Multiple
2020-05-21	Hunting Red Team Activities with Forensic Artifacts - Paper	Papers	Multiple
2020-05-12	Command Execution Using Silver Tickets - Paper	Papers	Windows
2020-05-01	Bypassing Root Detection Mechanism - Paper [Persian]	Papers	Android
2020-05-01	@luigi_auriemma: Security Vulnerabilities In Multiplayer Games From 2001 to 2012	Papers	Multiple
2020-04-15	Exploiting CAN-Bus using Instrument Cluster Simulator - Paper	Papers	Hardware
30.7.20	BootHole	Papers	Vulnerebility
5.7.20	DABANGG: Time for Fearless Flush based Cache Attacks	Papers	CPU
27.5.20	The “Silent Night” Zloader/Zb	Papers	Malware
22.5.2020	NXNSAttack: Recursive DNS Inefficiencies and Vulnerability	Papers	Attack
2020-05-20	BIAS attack	Papers	Vulnerebility
2020-05-14	Attacks on Smart Manufacturing Systems	Papers	ICS
2020-04-10	Azure Cloud Penetration Testing - Paper	Papers	Windows
2020-04-06	Active Directory DCSync - Paper	Papers	Windows
2020-04-03	From Zero Credentials to Full Domain Compromise - Paper	Papers	Windows
2020-03-30	Pentesting Zen Load Balancer - Paper	Papers	Multiple
2020-03-25	Solving Computer Forensic Case using Autopsy - Paper	Papers	Multiple
2020-03-18	Manually Exploiting Intel AMT Vulnerability CVE 2017-5689 [Paper]	Papers	Hardware
2020-03-09	Windows Account Penetration Testing - [Persian]	Papers	Windows
2020-03-06	Skippipe _ Skipping the watermark in digital content - Paper	Papers	Multiple
2020-03-05	Fuzzing VIM with AFL++ - Paper	Papers	Linux
2020-03-04	BlueTeam vs RedTeam: How to run encrypted elf binary in memory and go undetected	Papers	Linux
2020-03-02	Research on DevSecOps Approach - Paper	Papers	Multiple
2020-03-02	Deciphering the SWIFT DRIDEX relationship in Bank - Paper	Papers	Multiple
2020-02-24	The ShellShock Attack [Paper]	Papers	Linux
2020-02-24	Network Protocol Cheatsheet [Paper]	Papers	Multiple
2020-02-24	SCADA Modbus Vulns - [Turkish]	Papers	Hardware
2020-02-24	Java Deserialization - [Paper]	Papers	Java
2020-02-21	WordPress Security [Turkish]	Papers	PHP
2020-02-20	Penetration Testing Labs (Turkish)	Papers	Multiple
2020-02-20	Paper work on MQTT and CoAP Protocols	Papers	Multiple
2020-02-20	Android Pentest Tutorial Step by Step [Persian]	Papers	Android
2020-02-19	Paper on MQTT Protocol	Papers	Hardware
2020-02-19	Nmap Scanning - Getting started in windows OS	Papers	Windows
2020-02-17	Whitepaper about Pegasus attack on WhatsApp	Papers	Multiple
2020-02-17	[Whitepaper] WAF bypass via Bluecoat security appliance	Papers	Multiple
2020-02-17	[Paper] Windows Forensics	Papers	Windows
9.3.20	Take A Way: Exploring the Security Implications of AMD’s Cache Way Predicto	Papers	CPU
3.3.20	SurfingAttack	Papers	Attack
26.2.20	Kr00k Vulnerebility	Papers	Wifi
25.2.20	IMP4GT: IMPersonation Attacks in 4G NeTwork	Papers	4G
2020-02-14	HTTP_DoS_DDoS Usage_Guide Article (Turkish)	Papers	Multiple
2020-02-13	Packet Sniffer to Sniff Secret Credentials Only	Papers	Multiple
2020-02-10	Apache2 Web Server Hardening Article (Turkish)	Papers	Multiple
2020-01-30	Hunting Windows Process Injection by API Calls	Papers	Windows
2019	DLL SIDE-LOADING	Papers	Hacking
2019	Attacks on industrial enterprises using RMS and TeamViewer: new data	Papers	ICS
2019	Chinese State-Sponsored Actors Exploit Publicly Known Vulnerabilitie	Report	APT
2019	ESET_Threat_Report_Q3 2020	Report	Cyber
2019	Connected Medical Device Securit A Deep Dive into Healthcare Network	Report	Cyber
2019	Iranian Nation-State APT Groups 'Black Box' Leak	Report	APT
2019	NEW MALWARE SAMPLES IDENTIFIED IN POINT-OF-SALE COMPROMISES	Report	Malware
2019	From January 2019 to April 2020 The year in review	Report	Cyber
2019	MosaicRegressor: Lurking in the Shadows of UEFI	Report	Malware
2019	Threat landscape for industrial automation systems H1 2020	Report	ICS
2019	Compromised Personal Network Indicators and Mitigations	Report	Cyber
2019	2020 FERC, NERC and REs Report Cyber Planning for Response and Recovery Study (CYPRES)	Report	Cyber
2019	Kybernetické bezpečnosti České republiky za rok 2019	Report	BigBrother
2019	Digital Education: The cyberrisks of the online classroom	Report	Cyber
2019	More Evidence of APT Hackers-for-Hire Used for Industrial Espionage	Report	APT
2019	SELECT COMMITTEE ON INTELLIGENCE UNITED STATES SENATE ON RUSSIAN ACTIVE MEASURES CAMPAIGNS AND INTERFERENCE IN THE 2016 U.S. ELECTION VOLUME 5: COUNTERINTELLIGENCE THREATS AND VULNERABILITIES	Papers	BigBrother
2019	Incident Response Analyst Report 2019	Papers	Incidenty
2019	Iranian Chafer APT Targeted Air Transportation and Government in Kuwait and Saudi Arabia	Papers	APT
2019	2020-data-breach-investigations-report	Report	Incidenty
2019	Five Clear Steps to Enhance SecOps with MITRE ATT&CK	Report	Report
2019	2019 APPLICATION PROTECTION REPORT 2ND EDITION	Report	Report
2019	THE STATE OF RANSOMWARE 2020	Report	Report
2019	2019 TLS TELEMETRY REPORT	Report	Report
2019	M-TRENDS 2020 FIREEYE MANDIANT SERVICES \| SPECIAL REPORT	Report	Report
2019	M-TRENDS 2019	Report	Report
2019	M-TRENDS 2018	Report	Report
2019	M-TRENDS 2017	Report	Report
2019	M-TRENDS 2016	Report	Report
2019	M-TRENDS 2015	Report	Report
2019	M-TRENDS 2014	Report	Report
2019	M-TRENDS 2013	Report	Report
2019	M-TRENDS 2012	Report	Report
2019	M-TRENDS 2011	Report	Report
2019	M-TRENDS 2010	Report	Report
2019	2019 YEAR IN REVIEW ICS VULNERABILITIES	Report	ICS
2019	2019 YEAR IN REVIEW THE ICS L ANDSCAPE AND THREAT ACTIVIT Y GROUPS	Report	ICS
2019	2019 YEAR IN REVIEW LESSONS LEARNED FROM THE FRONT LINES OF ICS CYBERSECURITY	Report	ICS
2019	2019 Year End Report Vulnerability QuickView	Report	Vulnerebility
2019	2020 State of Malware Report	Report	Cyber
2019	2020 SONICWALL CYBER THREAT REPORT	Report	Cyber
2019	2019 INTERNET CRIME REPORT	Report	CyberCrime
2019	A LANDSCAPE OF MALWARE USED ON THE PORTUGUESE TOP LEVEL DOMA	Report	Malware
2019	2019 Website Threat Research Report	Report	Spam
2019	NIST PRIVACY FRAMEWORK	Report	Cyber
2019	The Global Risks Report 2020	Report	Cyber