Výsledky hledání | VIRY.CZ RADAR

28. 8. 2026 1

From 88 lines to 1: Detecting DLL hijacking with Elastic Defend

Elastic Defend 9.5.0 detects dynamic link library (DLL) search-order hijacking [1] in a single field. Writing that rule before 9.5.0 took about 88 lines, covering approximately 2,600 named libraries, 10 excluded Windows system paths, signature checks, and a drop-to-load time window. It now takes one: dll.Ext.defense_evasions: "DLL Hijack: Masquerading".DLL search-order hijacking, which Defend labels Masquerading, runs attacker code inside a legitimate process by abusing the order that Windows…

Elastic US

tg: rozbor tg: novinka v produktu tg: propagace tp: malware

Elastic Security · 28. 8. 02:00

31. 7. 2026 2

What's new in Elastic Defend: 800+ vulnerable driver rules, automated troubleshooting, and ARM support

We know you’re tired of hearing how every vendor is going to finally help you solve alert fatigue. Well, one way we’re improving alert fatigue is from a slightly different angle, better prevention at the endpoint. Because stopping more at the endpoint means fewer alerts ever raised. We have three endpoint enhancements, all contributing to better endpoint prevention: To be even more proactive about Bring Your Own Vulnerable Driver (BYOVD) attacks, we’re continuously monitoring public vulnerable…

Elastic US

tg: novinka v produktu tg: propagace tp: malware

Elastic Security · 31. 7. 02:00

What's new in Elastic Defend: 800+ vulnerable driver rules, automated troubleshooting, and ARM support

We know you’re tired of hearing how every vendor is going to finally help you solve alert fatigue. Well, one way we’re improving alert fatigue is from a slightly different angle, better prevention at the endpoint. Because stopping more at the endpoint means fewer alerts ever raised. We have three endpoint enhancements, all contributing to better endpoint prevention: To be even more proactive about Bring Your Own Vulnerable Driver (BYOVD) attacks, we’re continuously monitoring public vulnerable…

Elastic US

tg: novinka v produktu tg: propagace tp: malware

Elastic Security · 31. 7. 02:00

14. 7. 2026 1

How Aikido Intel detects malware and vulnerabilities first

Aikido Intel is a real-time feed that catches malware and undisclosed vulnerabilities across open-source ecosystems, often within 8 minutes of release. Category: Product & Company Updates

BE

tg: novinka v produktu tg: propagace tp: malware tp: dodavatelský řetězec

Aikido Security · 14. 7. 00:12

26. 6. 2026 1

Packagist is now protected by Aikido Intel and other updates to the PHP registry

Aikido's malware feed now blocks bad package versions in Composer by default. A look at how Packagist is closing whole classes of supply chain attacks. Category: Product & Company Updates

Packagist Composer BE

tg: novinka v produktu tg: propagace tp: malware tp: dodavatelský řetězec

Aikido Security · 26. 6. 09:52

23. 6. 2026 1

Aikido x Drydock | A way for maintainers to catch malware before it ships

Aikido partners with Drydock to bring pre-publish package review to npm and PyPI. See exactly what's inside a release before it ships, malware caught before download number one. Category: Product & Company Updates

npm PyPI BE

tg: novinka v produktu tg: propagace tp: malware tp: dodavatelský řetězec

Aikido Security · 23. 6. 14:47

27. 4. 2026 1

Unified EDR + ITDR: Closing the Identity Gap Before Attacks Spread

See how Huntress EDR/ITDR Correlations stop infostealer-driven attacks before stolen credentials can be reused, linking endpoint compromise to cloud identities for one coordinated response.

US

tg: novinka v produktu tg: propagace tp: malware tp: identita

Huntress · 27. 4. 15:00

7. 4. 2026 1

Introducing C2 Detection: Know When Your Edge Devices Are Calling Home to Attackers

We're launching C2 Detection — a new GreyNoise intelligence module that gives you two distinct, high-confidence signals that a device in your environment has been compromised.

GreyNoise US

tg: novinka v produktu tg: propagace tp: malware

GreyNoise Labs · 7. 4. 02:00