I’d like to thank my coauthors, Andrei-Marius Muntea, Andrei Mermeze, Radu-Marian Portase, and Vlad Lazar, for their invaluable contributions to this research. TL;DR: Windows includes a file-system ...

Google released LiteRT.js, a JavaScript binding of LiteRT. LiteRT is Google’s on-device inference library, previously called TensorFlow Lite. LiteRT.js runs .tflite models directly inside the browser.

The File-Binding, Process-Binding and Silo-Binding techniques abuse Windows filesystem virtualization features to present trusted files to security products while malware executes undetected.