VED-eBPF - Kernel Exploit And Rootkit Detection Using eBPF

VED Vault Exploit Defense-eBPF leverages eBPF extended Berkeley Packet Filter to implement runtime kernel security monitoring and exploit detection for Linux systems. Introduction eBPF is an in-kernel virtual machine that allows code execution in the kernel without modifying the kernel source...

Threat Outbreak Alert RuleID11474: Email Messages Distributing Malicious Software on September 9, 2014

Medium Alert ID: 35658 First Published: 2014 September 9 15:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11474 may contain the following files: Name |...