Skip to content
HomeInsights

Insights

Ideas for building
better software.

Engineering perspectives on architecture, product development, AI, and the everyday decisions behind useful software.

From the engineering desk

Browse practical articles or follow the latest technology updates.

Subscribe via RSS →

Curated links from external sources — not 360Softy original articles.

External
The Hacker News

Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware

The China-linked cybercrime group behind the use of income tax-related phishing lures targeting Indian taxpayers, tax professionals, and corporate finance teams has been observed using a sophisticated crypter service called Cruciferra. According to a new analysis by Proofpoint, Cruciferra has been utilized by various unrelated cybercriminal threat clusters to deliver a wide array of remote

The Hacker NewsRead original
ExternalCybersecurity
SecurityWeek

Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentials

A threat actor has been using the compromised appliances to target the Microsoft 365 accounts of traveling corporate employees. The post Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentials appeared first on SecurityWeek.

Malware & ThreatsMobile & WirelessMicrosoft 365
SecurityWeekRead original
ExternalObservability
Grafana Blog

Explore what's next in agentic operations: Introducing AI Week

Observability has traditionally been tacked on after your code hits production, but with agentic operations on the rise, that's no longer sustainable. Agents have dramatically increased the rate of change as they write more code, ship more changes, and operate more systems—all at a speed that compounds scale and complexity. As a result, observability needs to be factored in before deployment, with instrumentation written alongside the code, agents evaluated before they ship, and plans informed b

Grafana BlogRead original
ExternalCybersecurity
SANS Internet Storm Center

Java Spring Boot "heapdump" scans, (Mon, Jul 27th)

Spring Boot exposes the endpoint "/actuator/heapdump" to collect debug information. By default, the endpoint will return a file heapdump.hprof, which includes a binary heapdump that can be used to analyze the current state of the application. Non-Java readers may be familiar with a similar concept, core dumps, which are produced by binaries to expose a memory image at the time the software crashes. "heapdumps" are the Java analog to "core-dumps". The heapdump often includes secrets used by the a

SANS Internet Storm CenterRead original

Let’s start with a conversation

Tell us what you’re working on.

An idea, a challenge, or a system that needs to work better. We’ll help you understand the next step.