{"id":10831,"date":"2018-08-15T14:35:56","date_gmt":"2018-08-15T14:35:56","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/29227\/Foreshadow-And-Intel-SGX-Software-Attestation-The-Whole-Trust-Model-Collapses.html"},"modified":"2018-08-15T14:35:56","modified_gmt":"2018-08-15T14:35:56","slug":"foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/","title":{"rendered":"Foreshadow And Intel SGX Software Attestation: The Whole Trust Model Collapses"},"content":{"rendered":"

Interview<\/strong> In the wake of yet another collection of Intel bugs<\/a>, The Register<\/em> had the chance to speak to Foreshadow co-discoverer and University of Adelaide and Data61 researcher Dr Yuval Yarom<\/a> about its impact.<\/p>\n

\n

The main promise of SGX is that you can write code, and ship it to someone you do not fully trust. That person will run the code inside SGX on their machine, and you can see [it]…<\/p>\n<\/blockquote>\n

Dr Yarom explained that one of the big impacts of Foreshadow<\/a> is that it destroys an important trust model \u2013 SGX attestations, which guarantee that the code you publish is the code someone else is running.<\/p>\n

Think of it as tamper-evident packaging for software: having published your software, the SGX remote attestation will fail if someone changes it. If things are working properly, you only know a remote machine has signed the software \u2013 not whose machine it was.<\/p>\n

If a Foreshadow (CVE-2018-3615<\/a>) exploit were successful, it could break both the attestation and the privacy model.<\/p>\n

\"Spooky<\/p>\n

Three more data-leaking security holes found in Intel chips as designers swap security for speed<\/h2>\n

READ MORE<\/span><\/a><\/div>\n

Dr Yarom told us: \u201cThe main promise of SGX is that you can write code, and ship it to someone you do not fully trust. That person will run the code inside SGX on their machine, and you can see that whatever they run there is protected, because you know\u2026 they haven’t modified your code, they haven’t accessed the data that your code used.\u201d<\/p>\n

Someone writing a video player, he said, could use this as a rights protection mechanism: the player doesn’t allow copying, and the publisher knows it’s behaving correctly, because they’re receiving the signed SGX attestation saying so.<\/p>\n

\u201cAs part of our attack, what we managed to do is get the attestation keys.<\/p>\n

\u201cWe can take your code, analyse it to see what it does, know how it should behave, change that behaviour \u2013 but we can fake the attestation,\u201d he said \u2013 the code they run as attackers doesn’t match the publisher’s code, but the “tampered” code passes all the validity checks.<\/p>\n

In the video player example, the attacker can change the code so it creates a copy of content, but still \u201callow it to attest to vendor of the software that it is still running, protected.\u201d<\/p>\n

“The whole trust model collapses,” Dr Yarom told us.<\/p>\n

In a press release from CSIRO\/Data61, Dr Yarom said: “Intel will need to revoke the encryption keys used for authentication in millions of computers worldwide to mitigate the impact of Foreshadow.”<\/p>\n

As we observed reporting the vulnerability exploited by Foreshadow<\/a> (and the other two vulnerabilities* that Intel discovered while investigating fixes), Intel created the exposure by prioritising performance over security, and Dr Yarom agreed.<\/p>\n

\u201cIt’s clear that Intel’s recent design decisions focussed on how to optimise processors … so that typical programs execute faster.<\/p>\n

“What we now see is that these optimisations, particularly when we don’t understand them, come at the cost of information about what the program is doing.\u201d<\/p>\n

He added that such decision-making isn’t confined to Intel.<\/p>\n

Dr Yarom said Intel’s black-box approach to processors is the reason Data61 is putting its weight behind the RISC Foundation’s open hardware efforts<\/a>.<\/p>\n

“It’s about getting to know what’s inside a processor, and getting to be able to make a guarantee of the behaviour of the processor.<\/p>\n

“We need to make sure that these sorts of attacks aren’t feasible, and for that we need the ability to reason about the behaviour of the processor,” he said.<\/p>\n

\n

We need to make sure that these sorts of attacks aren’t feasible, and for that we need the ability to reason about the behaviour of the processor<\/p>\n<\/blockquote>\n

Dr Yarom was part of one of two teams who independently discovered Foreshadow, working with Marina Minkin and Mark Silberstein of Technion; Ofir Weisse, Daniel Genkin, Baris Kasikci, and Thomas Wenisch of the University of Michigan.<\/p>\n

A team from the imec-DistriNet research group at the KU Leuven \u2013 Jo Van Bulck, Frank Piessens, and Raoul Strackx \u2013 made the same discovery independently.<\/p>\n

Dr Yarom explained that after Meltdown and Spectre landed in January<\/a>, it was clear to researchers that SGX was a logical next vector to attack.<\/p>\n

“Marina [Minkin] had worked with SGX, we talked about it a bit, and she mentioned a scenario which in SGX caused an access violation exception, instead of falling into ‘abort page semantics’. Because Meltdown is related to access violation exceptions we decided to give it a try.”<\/p>\n

Once you know where to look for a vulnerability, he said, “most of the hard part is done”. \u00ae<\/p>\n

* The researchers have called two related vulns \u2013 CVE-2018-3620<\/a> and CVE-2018-3646<\/a> \u2013 “Foreshadow-NG” (next generation). Intel refers to the three flaws collectively as “L1 terminal fault<\/a>“.<\/p>\n

Yarom and the rest of the team are presenting “Foreshadow: Extracting the Keys to the Intel SGX Kingdom with Transient Out-of-Order Execution” on 16 August at the Usenix Security conference.<\/a><\/p>\n

Sponsored:<\/span> Following Bottomline\u2019s journey to the Hybrid Cloud<\/a><\/p>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":10832,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[60],"tags":[2967],"class_list":["post-10831","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-packet-storm","tag-headlineflawcryptographyintel"],"yoast_head":"\nForeshadow And Intel SGX Software Attestation: The Whole Trust Model Collapses 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Foreshadow And Intel SGX Software Attestation: The Whole Trust Model Collapses 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2018-08-15T14:35:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/08\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"174\" \/>\n\t<meta property=\"og:image:height\" content=\"115\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Foreshadow And Intel SGX Software Attestation: The Whole Trust Model Collapses\",\"datePublished\":\"2018-08-15T14:35:56+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/\"},\"wordCount\":857,\"publisher\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/08\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses.jpg\",\"keywords\":[\"headline,flaw,cryptography,intel\"],\"articleSection\":[\"Packet Storm\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/\",\"url\":\"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/\",\"name\":\"Foreshadow And Intel SGX Software Attestation: The Whole Trust Model Collapses 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/08\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses.jpg\",\"datePublished\":\"2018-08-15T14:35:56+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/#primaryimage\",\"url\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/08\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses.jpg\",\"contentUrl\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/08\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses.jpg\",\"width\":174,\"height\":115},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.threatshub.org\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"headline,flaw,cryptography,intel\",\"item\":\"https:\/\/www.threatshub.org\/blog\/tag\/headlineflawcryptographyintel\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Foreshadow And Intel SGX Software Attestation: The Whole Trust Model Collapses\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#website\",\"url\":\"https:\/\/www.threatshub.org\/blog\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\/\/www.threatshub.org\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Foreshadow And Intel SGX Software Attestation: The Whole Trust Model Collapses 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/","og_locale":"en_US","og_type":"article","og_title":"Foreshadow And Intel SGX Software Attestation: The Whole Trust Model Collapses 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2018-08-15T14:35:56+00:00","og_image":[{"width":174,"height":115,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/08\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Foreshadow And Intel SGX Software Attestation: The Whole Trust Model Collapses","datePublished":"2018-08-15T14:35:56+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/"},"wordCount":857,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/08\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses.jpg","keywords":["headline,flaw,cryptography,intel"],"articleSection":["Packet Storm"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/","url":"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/","name":"Foreshadow And Intel SGX Software Attestation: The Whole Trust Model Collapses 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/08\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses.jpg","datePublished":"2018-08-15T14:35:56+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/08\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/08\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses.jpg","width":174,"height":115},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/foreshadow-and-intel-sgx-software-attestation-the-whole-trust-model-collapses\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"headline,flaw,cryptography,intel","item":"https:\/\/www.threatshub.org\/blog\/tag\/headlineflawcryptographyintel\/"},{"@type":"ListItem","position":3,"name":"Foreshadow And Intel SGX Software Attestation: The Whole Trust Model Collapses"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/10831","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=10831"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/10831\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/10832"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=10831"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=10831"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=10831"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}