Threat Post

Word Zero Day Attacks Use Complex Chain of Exploits

The exploit that attackers are using to target a zero day vulnerability in Microsoft Word relies on a complex series of pieces, including an ASLR bypass, ROP techniques and shellcode with several ...
Threat Post

Darkhotel Exploits Microsoft Zero-Day VBScript Flaw

The recently-patched flaw could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. Researchers have discovered that the Darkhotel APT is ...
Ars Technica

Google patches its fifth zero-day vulnerability of the year in Chrome

Google has updated its Chrome browser to patch a high-severity zero-day vulnerability that allows attackers to execute malicious code on end user devices. The fix marks the fifth time this year the ...
Dark Reading

Black Hat USA 2015: Exploit Dev Story

The Exploit Laboratory series has two advanced offerings to consider. Exploit Laboratory: Black Belt will cover advanced browser exploitation techniques, including DEP and ASLR bypass, ROP chaining ...
Dark Reading

Metasploit Adds iPhone Hacking Tools

The iPhone is now officially fresh meat: Metasploit creator HD Moore has added iPhone-hacking features to the wildly popular freebie penetration testing tool. (See Now Playing: Metasploit 3.0.) ...