In-memory attacks are on the rise and attracting increasing attention. In this post, we will describe two in-memory attack techniques and show how these can be detected using Sysmon and Azure Security Center.
The Windows Defender team recently updated the malware encyclopedia with a new ransomware threat, Ransom:Win32/Tibbar (also known as Bad Rabbit).
Microsoft Malware Protection Center (MMPC) published a blog post yesterday detailing a new ransomware infection that appears to have begun in Ukraine and spread from there to other places in Europe and beyond.
