Purpleshift

Detecting attempts to hide payloads in extended file attributes

Vulnerability in Cypher query construction gives attackers broad capabilities

Breaking down an attack that makes a user run malicious code

How we accelerated the development of pentesting tools

Unlike traditional C2 agents, this virtual callback generates no binary payload

How to find out if your servers have been attacked

New malware uses MQTT and Matrix protocols to talk to C2

Schools and universities are hacked through stolen accounts and outdated software

A video conferencing relay host can redirect traffic to C2