SMB is a protocol that allows devices to perform a number of functions on each other via a (usually local) network. SMB exists for so long and supports so much backward compatibility that it contains an almost absurd amount of rudimentary functions, but its modern use of the kernel is simpler than it seems. Its huge size, rare documentation and a wide range of applications can make it one of the most frightening protocols for junior analysts.

The end of the year is the time for summing up the results and discussing the upcoming trends. The security forecasts for 2018 demonstrate many problems that can be used. The world seems less stable, and the software library is another violation of international data. In the last time, many companies have thought about security. Kelly Shortridge concluded that “Reality is just automation.”

A group of researchers discovered several multi-stage attacks that use bait associated with crypto-currency to infect victims with complex backdoors and scan malware.

CVE-2017-11826 is a memory corruption vulnerability that allows a remote attacker to execute arbitrary code by tricking a victim into opening a specially crafted file. The problem affects all supported versions of MS Office.