New Testing Framework Helps Evaluate Sandboxes

AMTSO has published a Sandbox Evaluation Framework to standardize testing of sandbox-based malware analysis and anti-evasion capabilities; the brief warns that attackers increasingly detect and evade sandboxes and cites recent sandbox-escape zero-days patched by Broadcom and Google that illustrate risks including hypervisor compromise and data exfiltration.