Abstract: Data is received that comprises or characterizes an executable and dynamic linked library (DLL). Features are then extracted from the executable and DLL. The extracted features are input into at least one machine learning model to generate a suspiciousness score. The machine learning model can be trained to determine whether the executable file comprises ransomware. An execution chain of trust score for the executable and DLL can later be determined based on the extracted features and the suspiciousness score. This execution chain of trust score for the executable and DLL characterizes one or more associated parent processes. This suspiciousness score and the execution chain of trust score can be used to determine whether or not to initiate one or more ransomware countermeasures. Related apparatus, systems, techniques and articles are also described.

Abstract: The present disclosure provides new and innovative systems and methods for automating functional safety scoring in applications. An example method includes a computing device having a processor detecting a requirement to generate a functional safety score for at least a portion of a program. The functional safety score may be based on a functional safety standard (e.g., the ISO 26262 standard). The method may further include determining one or more provisions of the functional safety standard; and identifying one or more signatures for each of the one or more provisions. For each provision, the processor may query the portion of the program for the corresponding one or more signatures. For each provision, the processor may determine a subscore based on the query for the corresponding one or more signatures, resulting in a set of subscores. Based on the set of subscores, the processor may generate the functional safety score.

Abstract: A method and system provide an end-to-side anastomosis graft via percutaneous access for cardiac and vascular surgeries. The system includes a vascular graft configured for stable placement within a vessel, a sheath for long-term maintenance and use of the graft, and a closure device configured for secure ligation and transection of the graft when no longer in use. The system facilitates the use of extracorporeal life support devices and other cardiac interventions, reducing the need for open surgical exposure and allowing use by non-surgeons, such as interventional cardiologists.

Abstract: A program identity of an unknown binary is inferred in response to a trigger (e.g., a request to access or execute the unknown binary, etc.). One or more authentication factors are then executed to authenticate the inferred program identity of the unknown binary as being one of a plurality of different programs. The program can be selectively provided with access to system resources and/or sensitive operations can be limited based on a program nature of the authenticated program identity. In some variations, the authentication factors cause a modified authentication workflow in which a human user provides input as to whether or not to authenticate the inferred program identity.

Abstract: An injected module (IM) is deployed in a process space executing on a computing device. The IM is then executed to inspect resources of the computing device and determine, based on the inspection of the resources, at least one hook to install in response to a ransomware attack. The process space then install the hook(s) to intercept calls within the process space. The hook(s) captures parameters characterizing techniques used in the ransomware attack. The process space reports at least a portion of the reported parameters to an anti-ransomware monitoring platform. An agent executed on the computing device can receive a decryption package from the anti-ransomware monitoring platform. This decryption package being responsive to the reported captured parameters. The agent can then decrypt one or more files in a computing environment associated with the computing device using the decryption package. Related apparatus, systems, techniques and articles are also described.

Abstract: An injected module (IM) is deployed in a process space executing on a computing device. The IM is then executed to inspect resources of the computing device and determine, based on the inspection of the resources, at least one hook to install in response to a ransomware attack. The process space then install the hook(s) to intercept calls within the process space. The hook(s) captures parameters characterizing techniques used in the ransomware attack. The process space reports at least a portion of the reported parameters to an anti-ransomware monitoring platform. An agent executed on the computing device can receive a decryption package from the anti-ransomware monitoring platform. This decryption package being responsive to the reported captured parameters. The agent can then decrypt one or more files in a computing environment associated with the computing device using the decryption package. Related apparatus, systems, techniques and articles are also described.

Abstract: A multi-purpose driver can include a tool and an extension arm. The tool can have a body, a handle, a ratchet with a first hex socket near a first end of the body, a second hex socket near a second, opposite end of the body, and a third hex socket on a first end of the handle that is perpendicular to the first hex socket. The extension arm can have an elongate arm and a hex shaft. The first end of the handle can be on an opposite end of the tool than the first end of the body. The first, second, and third hex sockets can receive the hex shaft of the extension arm, the first and second hex sockets can be on the same face of the body, and at least the second and third hex sockets can have a solid interior bottom.

Abstract: Ransomware attacks on computing devices can be thwarted by monitoring runtime execution data associated with processes on a device through an agent. When the agent determines, based on this data, that a process is likely associated with ransomware or other malicious activity—such as by detecting system-call events indicative of file-system encryption or authentication anomalies—it can suspend the process by issuing a kernel-mode thread suspension request that atomically halts all threads. Information about the process can be packaged and later utilized to thwart current and future malicious activity.

Abstract: An implantable device for sacroiliac (“SI”) joint fusion and an associated method employ an SI joint fusion portion and an anchor portion of smaller diameter than the SI joint fusion portion and that extends distally from a distal end of the SI joint fusion portion. The SI joint fusion portion is externally threaded and is configured to, when surgically implanted, extend across the SI joint. The anchor portion in turn extends distally from the SI joint fusion portion and is configured for implanting entirely within the patient's ilium adjacent the SI joint. In certain configurations, the joint fusion portion is configured to enable fixation of spinal equipment at a proximal end of the joint fusion portion.

Abstract: A system and method for applying a laser treatment to an electronic device is shown and described. The method for applying a laser treatment to an electronic device includes determining the electronic device type. Determining the laser treatment type based on the device type. The laser treatment type is comprised of the laser's power, the laser distance from the electronic device, the lasers wavelength and the pattern of laser application along the electronic device. Positioning the device for proper laser application. Applying a first laser treatment to the electronic device. Removing the electronic device.

Abstract: A program identity of an unknown binary is inferred in response to a trigger (e.g., a request to access or execute the unknown binary, etc.). One or more authentication factors are then executed to authenticate the inferred program identity of the unknown binary as being one of a plurality of different programs. The program can be selectively provided with access to system resources and/or sensitive operations can be limited based on a program nature of the authenticated program identity. In some variations, the authentication factors cause a modified authentication workflow in which a human user provides input as to whether or not to authenticate the inferred program identity.

Abstract: Information characterizing a security event is received from an agent executing on an endpoint computing device. The received information identifies a plurality of files encrypted as part of a ransomware attack and key material used when encrypting each of the files. Based on the received information, a surveyor package is generated which includes decryptor logic to decrypt at least a portion of the files. The surveyor package is deployed to the agent so that it can be unpacked and executed to decrypt at least a portion of the files. Once these files are decrypted, then can be transported to a safe computing environment Related apparatus, systems, techniques and articles are also described.

Abstract: A passive retaining lock system for hand tools includes a pin mount member mounted on a hand tool that is releasably and lockably retained in a pin retainer assembly. The pin retainer assembly includes a pin retainer having a slot configured to slidably receive a first dimension of a pin post of the pin mount member, and a pin slot base opening dimensioned to have a second dimension that is larger than the first dimension to allow a rotation of the pin post after passing through and along the pin slot entry while preventing a passage back through the pin slot entry. A pin boss extends from an end of the pin post and has an outer dimension that is a third dimension that is larger than the second dimension and accordingly prohibits the pin post and pin mount member from separating from the pin retainer assembly.

Abstract: Security in a computing environment is enhanced by analyzing telemetry data from an agent on a device, along with user integrity information, to detect events that suggest compromised credentials. When such an event is detected, a risk level is assigned based on the analysis. This risk level is then correlated with a corresponding authentication difficulty level, which specifies the types and strengths of authentication mechanisms to be used. The selected authentication difficulty level is applied across multiple devices within the environment, enabling adaptive and dynamic protection against unauthorized access due to compromised credentials.

Abstract: An automated cleaning system for a mobile device includes a conveyor to move the mobile device through the cleaning system; a first wiper to wipe an automatically dispensed cleaning solution from a first major surface of the mobile device; a first mobile device flipper to flip the mobile device 180 degrees; a side cleaner to clean four sides of the mobile device; a second wiper to wipe an automatically dispensed cleaning solution from a second major surface of the mobile device; and a smudge remover to remove smudges from the first major surface or the second major surface of the mobile device.

Abstract: Applications and processes executing on an endpoint are monitored to identify behavior indicative of malicious activity such as a ransomware attack. Messages generated from this monitoring as well as messages derived from external sources are stored in a queue for routing. A router selects some messages from the queue based on a routing policy and sends them to a cloud-based platform that can initiate various actions based on received messages. The router also sends some messages from the queue to a module that analyzes the messages and reduces their size by aggregating, correlating, and detecting relevant information. The module puts the modified messages back into the queue for further routing by the router according to the policy. Related apparatus, systems, techniques and articles are also described.