309 matches found
Trellix Endpoint Security HX 安全漏洞
Trellix Endpoint Security HX is a endpoint detection and response software developed by the American company Trellix. There is a security vulnerability in Trellix Endpoint Security HX, which stems from a flaw in the fekern.sys driver file, potentially leading to privilege escalation...
When SPNs Go Rogue: Detection and Remediation with Trellix NDR
When SPNs Go Rogue: Detection and Remediation with Trellix NDR By Maulik Maheta and Henry Bernabe · February 10, 2026 Executive summary Service Principal Names SPNs are essential for Kerberos authentication in Active Directory AD, but misconfigurations, such as assigning SPNs to standard user...
The Unfriending Truth: How to Spot a Facebook Phishing Scam Before It's Too Late
The Unfriending Truth: How to Spot a Facebook Phishing Scam Before It's Too Late By Mark Joseph Marti · January 12, 2026 Introduction As one of the world's largest social media platforms, with over 3 billion active users, Facebook is a frequent target for phishing scams. Hackers aim to hijack use...
The Fake Domain Controller You Didn’t See Coming: Detecting DCShadow Attacks Using Trellix NDR
The Fake Domain Controller You Didn’t See Coming: Detecting DCShadow Attacks Using Trellix NDR By Maulik Maheta and Chao Sun · December 17, 2025 Executive summary DCShadow is a covert post-exploitation technique that enables an attacker to impersonate a domain controller and make unauthorized,...
Silent Domain Hijack: Detecting DCSync with Trellix NDR
Silent Domain Hijack: Uncovering the DCSync Attack and Detecting with Trellix NDR By Maulik Maheta and Chao Sun · December 10, 2025 Executive summary DCSync is one of the most powerful and stealthy techniques an attacker can use once they have gained access to an Active Directory AD environment...
How Trellix Helix detects AS-REP Roasting in Active Directory
How Trellix Helix detects AS-REP Roasting in Active Directory By Adithya Chandra and Maulik Maheta · November 13, 2025 Executive Summary Adversaries use AS-REP Roasting to extract and crack password hashes from Active Directory AD accounts with Kerberos preauthentication disabled, a...
EUVD-2023-44309
Malicious code in bioql PyPI...
EUVD-2023-12962
Malicious code in bioql PyPI...
EUVD-2024-44425
Malicious code in bioql PyPI...
EUVD-2024-47081
Malicious code in bioql PyPI...
EUVD-2023-58374
Malicious code in bioql PyPI...
EUVD-2023-54658
Malicious code in bioql PyPI...
EUVD-2023-12963
Malicious code in bioql PyPI...
EUVD-2024-47160
Malicious code in bioql PyPI...
EUVD-2023-12960
Malicious code in bioql PyPI...
EUVD-2024-16005
Malicious code in bioql PyPI...
EUVD-2022-42727
Malicious code in bioql PyPI...
EUVD-2022-51679
Malicious code in bioql PyPI...