MalwareTech

2 posts in the catalog

Each feed is checked for new posts. Every post is read, and those that belong here join the catalog. What Trove read and did not keep stays on file, not shown.

malwaretech.comarticle

Machine Speed is a lie: stop trying to fight AI with AI

Long-form critique arguing that autonomous, self-propagating attacks (Morris Worm, SQL Slammer, Emotet, WannaCry) are decades old and that vendor claims of AI-driven "machine speed" attacks are largely hype. It uses CrowdStrike's 2026 average breakout time (29 minutes), the UK AISI evaluation of Mythos Preview (3 of 10 full compromises on an undefended range, at high token cost), and the delay between SOC alert and remediation to argue AI SOCs are a band-aid. It recommends proactive hardening (Credential Guard, LAPS, segmentation, least privilege), automatic EDR isolation and credential rotation on high-fidelity alerts, and realistic assumed-breach exercises.

CrowdStrikeEDRWindows+2

Morris WormSQL SlammerEmotet+11

Blue Team & Detection, AI Security, Threat Intel· 2026-09-03T22:40:00+00:00

malwaretech.comwriteup

ComoDoS - Exploiting a Remote Kernel Vulnerability in Comodo Internet Security

A technical deep-dive by MalwareTech (Marcus Hutchins) into "ComoDoS," a remote kernel vulnerability in Comodo Internet Security's driver stack, walking through discovery and exploitation of a kernel-level flaw reachable remotely. The post details the vulnerable driver interaction and the exploitation chain used to achieve kernel code execution or a denial-of-service condition from a remote vector.

Comodo Internet Security

MalwareTech

Offensive Security, Malware & RE· 2026-06-03T10:13:00+00:00