Bra podcast
Sveriges mest populära poddar
- Affärsnyheter
- Alternativ hälsa
- Amerikansk fotboll
- Andlighet
- Animering och manga
- Astronomi
- Barn och familj
- Basket
- Berättelser för barn
- Böcker
- Buddhism
- Dagliga nyheter
- Dans och teater
- Design
- Djur
- Dokumentär
- Drama
- Efterprogram
- Entreprenörskap
- Fantasysporter
- Filmhistoria
- Filmintervjuer
- Filmrecensioner
- Filosofi
- Flyg
- Föräldraskap
- Fordon
- Fotboll
- Fritid
- Fysik
- Geovetenskap
- Golf
- Hälsa och motion
- Hantverk
- Hinduism
- Historia
- Hobbies
- Hockey
- Hus och trädgård
- Ideell
- Improvisering
- Investering
- Islam
- Judendom
- Karriär
- Kemi
- Komedi
- Komedifiktion
- Komediintervjuer
- Konst
- Kristendom
- Kurser
- Ledarskap
- Life Science
- Löpning
- Marknadsföring
- Mat
- Matematik
- Medicin
- Mental hälsa
- Mode och skönhet
- Motion
- Musik
- Musikhistoria
- Musikintervjuer
- Musikkommentarer
- Näringslära
- Näringsliv
- Natur
- Naturvetenskap
- Nyheter
- Nyhetskommentarer
- Personliga dagböcker
- Platser och resor
- Poddar
- Politik
- Relationer
- Religion
- Religion och spiritualitet
- Rugby
- Så gör man
- Sällskapsspel
- Samhälle och kultur
- Samhällsvetenskap
- Science fiction
- Sexualitet
- Simning
- Självhjälp
- Skönlitteratur
- Spel
- Sport
- Sportnyheter
- Språkkurs
- Stat och kommun
- Ståupp
- Tekniknyheter
- Teknologi
- Tennis
- TV och film
- TV-recensioner
- Underhållningsnyheter
- Utbildning
- Utbildning för barn
- Verkliga brott
- Vetenskap
- Vildmarken
- Visuell konst
Start / Out of the Woods: The Threat Hunting Podcast
Out of the Woods: The Threat Hunting Podcast
Intel 471's podcast with a twist! Join us for the first fully interactive threat hunting podcast where you can hang out with threat hunters from all over the world! Join a rag-tag bunch of threat hun...
110 avsnitt • Längd: 50 min • Månadsvis
Om podden
Intel 471’s podcast with a twist! Join us for the first fully interactive threat hunting podcast where you can hang out with threat hunters from all over the world!
Join a rag-tag bunch of threat hunters as they come out of the woods to explore some of the most burning issues related to cyber security. The Out of the Woods podcast is a casual talk covering the topics of threat hunting, security research, and threat intelligence, and some ranting and raving along the way, all over a cocktail or two!
The Out of the Woods cyber security podcast is filmed in front of a live studio audience, and by that we mean YOU! We’re inviting folks to join us once a month for a LIVE evening of great technical discussions, where you can ask questions and give your opinion in real time on a variety of discussions about threat hunting, security research, blue teaming, and wherever else the evening takes us!
The podcast Out of the Woods: The Threat Hunting Podcast is created by Out of the Woods: The Threat Hunting Podcast. The podcast and the artwork on this page are embedded on this page using the public podcast feed (RSS).
Avsnitt
S3 Ep16: [Bonus Episode] Professional Growth and Security Strategies with Arun DeSouza
24 januari 2025 |
29 min
In this episode of Intel 471's Out of the Woods: Threat Hunting Podcast, Arun DeSouza shares insights from his journey as a cybersecurity leader, including the importance of zero trust, identity management, and data sovereignty. Arun emphasizes the value of strong relationships, mentorship, and continuous learning in overcoming challenges like IoT risks and responsible AI adoption.
Packed with practical advice, this conversation offers valuable takeaways for cybersecurity professionals at any stage of their career.
Connect with Arun: https://www.linkedin.com/in/arundesouza/
----
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
Packed with practical advice, this conversation offers valuable takeaways for cybersecurity professionals at any stage of their career.
Connect with Arun: https://www.linkedin.com/in/arundesouza/
----
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S3 Ep15: Trust but Verify
22 januari 2025 |
34 min
[LIVE] Out of the Woods Podcast
January 30, 2025 | 12:00 - 1:30 PM ET
Sign Up --> https://intel471.com/resources/podcasts/the-art-of-the-hunt-turning-intel-into-action
[LIVE] Threat Hunting Workshop: Hunting for Initial Access – Level 2
February 12, 2025 | 12:00 – 1:00 PM ET
Sign Up --> https://intel471.com/resources/webinars/threat-hunting-workshop-14-hunting-for-initial-access-level-2
----------
Top Headlines:
January 30, 2025 | 12:00 - 1:30 PM ET
Sign Up --> https://intel471.com/resources/podcasts/the-art-of-the-hunt-turning-intel-into-action
[LIVE] Threat Hunting Workshop: Hunting for Initial Access – Level 2
February 12, 2025 | 12:00 – 1:00 PM ET
Sign Up --> https://intel471.com/resources/webinars/threat-hunting-workshop-14-hunting-for-initial-access-level-2
----------
Top Headlines:
- Sekoia.ai Blog | Sneaky 2FA: Exposing a New AiTM Phishing-as-a-Service: https://blog.sekoia.io/sneaky-2fa-exposing-a-new-aitm-phishing-as-a-service/
- Netcraft | The Truth of the Matter: Scammers Targeting Truth Social Users: https://www.netcraft.com/blog/truth-social-scam-threat-review/
- Silverfort | Think You Blocked NTLMv1? Bypassing NTLM Authentication is Still Possible: https://www.silverfort.com/blog/ntlmv1-bypass-in-active-directory-technical-deep-dive/
- Cybersecurity News | CVE-2025-0411: 7-Zip Security Vulnerability Enables Code Execution – Update Now: https://securityonline.info/cve-2025-0411-7-zip-security-vulnerability-enables-code-execution-update-now/?&web_view=true
----------
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S3 Ep14: Some Things are Better Left Unstructured
15 januari 2025 |
38 min
[LIVE] Out of the Woods Podcast
January 30, 2025 | 12:00 - 1:30 PM ET
Sign Up --> https://intel471.com/resources/podcasts/the-art-of-the-hunt-turning-intel-into-action
Top Headlines:
January 30, 2025 | 12:00 - 1:30 PM ET
Sign Up --> https://intel471.com/resources/podcasts/the-art-of-the-hunt-turning-intel-into-action
Top Headlines:
- Truffle Security | Millions of Accounts Vulnerable due to Google's OAuth Flaw: https://trufflesecurity.com/blog/millions-at-risk-due-to-google-s-oauth-flaw
- Halcyon | Abusing AWS Native Services: Ransomware Encrypting S3 Buckets with SSE-C: https://www.halcyon.ai/blog/abusing-aws-native-services-ransomware-encrypting-s3-buckets-with-sse-c
- Horizon3 | Critical Vulnerabilities in SimpleHelp Remote Support Software: https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/
- Sekoia | Double-Tap Campaign: Russia-nexus APT possibly related to APT28 conducts cyber espionage on Central Asia and Kazakhstan diplomatic relations: https://blog.sekoia.io/double-tap-campaign-russia-nexus-apt-possibly-related-to-apt28-conducts-cyber-espionage-on-central-asia-and-kazakhstan-diplomatic-relations/
----------
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S3 Ep13: Unpacking Gifts After Christmas: Extensions, Packages, and Fiascos
7 januari 2025 |
40 min
[LIVE] Out of the Woods Podcast
January 30, 2025 | 12:00 - 1:30 PM ET
Sign Up --> https://intel471.com/resources/podcasts/the-art-of-the-hunt-turning-intel-into-action
Top Headlines:
January 30, 2025 | 12:00 - 1:30 PM ET
Sign Up --> https://intel471.com/resources/podcasts/the-art-of-the-hunt-turning-intel-into-action
Top Headlines:
- Socket | Quesar RAT Disguised as an npm Package for Detecting Vulnerabilities in Etherium Smart Contract: https://socket.dev/blog/quasar-rat-disguised-as-an-npm-package
- BleepingComputer | Windows 10 Users Urged to Upgrade to Avoid “Security Fiasco: https://www.bleepingcomputer.com/news/microsoft/windows-10-users-urged-to-upgrade-to-avoid-security-fiasco/?&web_view=true
- The Hacker News | When Good Extensions Go Bad: Takeways from the Campaign Targeting Browser Extensions: https://thehackernews.com/2024/12/when-good-extensions-go-bad-takeaways.html?m=1
- The Python Package Index Blog | Project Quarantine – The Python Package Index Blog: https://blog.pypi.org/posts/2024-12-30-quarantine/
----------
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S3 Ep12: Declawing, Disguising, and Destroying: Modern Cyber Threats Unmasked
17 december 2024 |
46 min
Top Headlines:
- Elastic Security Labs | Declawing PUMAKIT: https://www.elastic.co/security-labs/declawing-pumakit
- XLab | Glutton: a New Zero-Day Detection PHP Backdoor from Winnti Targets Cybercriminals: https://blog.xlab.qianxin.com/glutton_stealthily_targets_mainstream_php_frameworks-en/
- Claroty | Inside a New OT/IoT Cyberweapon: IOCONTROL - https://claroty.com/team82/research/inside-a-new-ot-iot-cyber-weapon-iocontrol
- SecureList | Careto is Back: What's New After 10 Years of Silence?: https://securelist.com/careto-is-back/114942/
----------
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S3 Ep11: Attack Away, Same Tricks Will Stay
10 december 2024 |
37 min
Top Headlines:
- Embrace The Red | DeepSeek AI: From Prompt Injection to Account Takeover: https://embracethered.com/blog/posts/2024/deepseek-ai-prompt-injection-to-xss-and-account-takeover/
- Huntress | Cleo Software Actively Being Exploited in the Wild: https://www.huntress.com/blog/threat-advisory-oh-no-cleo-cleo-software-actively-being-exploited-in-the-wild
- Zscaler | Unveiling RevC2 and Venom Loader: https://www.zscaler.com/blogs/security-research/unveiling-revc2-and-venom-loader
- Cyble | Threat Actor Targets Manufacturing Industry with Malware: https://cyble.com/blog/threat-actor-targets-manufacturing-industry-with-malware/?&web_view=true
----------
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S3 Ep10: [LIVE] The Ideal Outcome: The Gift of a Well-Crafted Threat Hunt
9 december 2024 |
88 min
Welcome to Out of the Woods: The Threat Hunting Podcast! In this episode, "The Ideal Outcome: The Gift of a Well-Crafted Threat Hunt," our expert team dives into what it means to reach the “ideal outcome” as a threat hunter, offering actionable insights to help you build an effective and enduring approach.
This episode discussed:
This episode discussed:
- Long-Term Impact: Discover how a structured threat hunt can benefit both hunters and their organizations, reinforcing stronger security measures and insights that last.
- Security Stack Essentials: Learn about the ideal tools and technologies that make up a robust security stack, empowering you to align hunting efforts with broader security goals.
- Integration and Team Synergy: Find out how to integrate threat hunting with security operations teams, fostering collaboration to create a well-rounded defense approach.
- Skills for the Future: We’ll also discuss the critical skills and techniques that help threat hunters stay effective in an evolving threat landscape.
Interesting Artifacts:
🔗 Join us on Discord: https://discord.gg/Ka6tsEc3
----
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S3 Ep9: [Bonus Episode] Dr. Joshua Scarpino on Guardrails for Responsible AI
2 december 2024 |
9 min
**Out of the Woods: The Threat Hunting Podcast [LIVE EPISODE]
December 5, 2024 | 12:00 - 1:30 PM EST
Sign Up Here: https://intel471.com/resources/podcasts/the-ideal-outcome-the-gift-of-a-well-crafted-threat-hunt
----------
In this episode of Out of the Woods: The Threat Hunting Podcast, host Scott Poley speaks with Dr Joshua Scarpino, VP of Information Security at TrustEngine and CEO of Assessed.Intelligence, during the Information Security Summit in Cleveland. Josh shares insights from his extensive career in IT and security, diving into responsible technology deployment and the challenges of managing AI systems.
Learn how organizations can implement guardrails to mitigate risks, tackle scope creep, and build foundational frameworks like the NIST AI Risk Management Framework (RMF). Josh also emphasizes the importance of addressing unknown risks and the need for diverse perspectives in AI system development to ensure fairness and accountability.
Tune in to gain practical strategies for assessing risks, establishing governance, and driving secure innovation in today’s evolving tech landscape.
*Connect with Dr. Joshua Scarpino: https://www.linkedin.com/in/joshuascarpino/
----
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
December 5, 2024 | 12:00 - 1:30 PM EST
Sign Up Here: https://intel471.com/resources/podcasts/the-ideal-outcome-the-gift-of-a-well-crafted-threat-hunt
----------
In this episode of Out of the Woods: The Threat Hunting Podcast, host Scott Poley speaks with Dr Joshua Scarpino, VP of Information Security at TrustEngine and CEO of Assessed.Intelligence, during the Information Security Summit in Cleveland. Josh shares insights from his extensive career in IT and security, diving into responsible technology deployment and the challenges of managing AI systems.
Learn how organizations can implement guardrails to mitigate risks, tackle scope creep, and build foundational frameworks like the NIST AI Risk Management Framework (RMF). Josh also emphasizes the importance of addressing unknown risks and the need for diverse perspectives in AI system development to ensure fairness and accountability.
Tune in to gain practical strategies for assessing risks, establishing governance, and driving secure innovation in today’s evolving tech landscape.
*Connect with Dr. Joshua Scarpino: https://www.linkedin.com/in/joshuascarpino/
----
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S3 Ep8: Exposures Unveiled: Keys, Clouds and Evolving Threats
26 november 2024 |
46 min
**Out of the Woods: The Threat Hunting Podcast [LIVE EPISODE]
December 5, 2024 | 12:00 - 1:30 PM EST
Sign Up Here: https://intel471.com/resources/podcasts/the-ideal-outcome-the-gift-of-a-well-crafted-threat-hunt
----------
Top Headlines:
December 5, 2024 | 12:00 - 1:30 PM EST
Sign Up Here: https://intel471.com/resources/podcasts/the-ideal-outcome-the-gift-of-a-well-crafted-threat-hunt
----------
Top Headlines:
- We Live Security | Unveiling WolfsBane: Gelsemium’s Linux counterpart to Gelsevirine: https://www.welivesecurity.com/en/eset-research/unveiling-wolfsbane-gelsemiums-linux-counterpart-to-gelsevirine/
- Phylum Research | Python Crypto Library Updated to Steal Private Keys: https://blog.phylum.io/python-crypto-library-updated-to-steal-private-keys/?&web_view=true
- Censys | The 2024 State of the Internet Report: Internet-Connected Industrial Control System: https://go.censys.com/rs/120-HWT-117/images/2024SOTIR.pdf
- Hunters Security | Unmasking VEILDrive: Threat Actors Exploit Microsoft Services for C2: https://www.hunters.security/en/blog/veildrive-microsoft-services-malware-c2?&web_view=true
----------
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S3 Ep7: [Bonus Episode] Protecting Privacy: Brian Hill on Cyber Threats and Individual Security
19 november 2024 |
32 min
In this episode of Out of the Woods: The Threat Hunting Podcast, Scott Poley sits down with Brian Hill, a cybersecurity leader with a rich background in law enforcement, military service, and corporate security. Brian shares his journey from major crimes detective and forensics expert to building and managing Security Operations Centers (SOCs) at organizations like Arctic Wolf and Black Cloak. The discussion highlights challenges in scaling SOCs, the importance of balancing specialized expertise with cross-functional training, and unique threats faced by high-profile individuals, such as SIM swapping and personal device vulnerabilities. Brian also explores broader trends like artificial intelligence and deepfake technology, emphasizing the need for education and proactive measures to stay ahead of evolving cyber threats.
*Connect with Brian Hill: https://www.linkedin.com/in/brian-hill-776b50100/
----
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
*Connect with Brian Hill: https://www.linkedin.com/in/brian-hill-776b50100/
----
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S3 Ep5: [Bonus Episode] Privacy Meets Protection: Violet Sullivan on the Real Scope of Cyber Insurance
14 november 2024 |
25 min
In this episode of Out of the Woods: The Threat Hunting Podcast, Scott Poley catches up with Violet Sullivan, cyber services lead for insurance carrier Crum and Forester, at the Information Security Summit in Cleveland. Violet dives into the evolving world of cyber insurance, shedding light on the often-overlooked layers of coverage that go beyond cyber events, including system outages and privacy litigation. She explains the shifting focus from ransomware to privacy issues, and how the rising importance of privacy is impacting both insurance policies and legal frameworks.
They discuss the nuanced world of privacy litigation and emerging technologies like privacy scans, which scrutinize website data collection practices. Violet also addresses the current debate on AI training data, ownership, and privacy, offering insights into the challenges and implications for companies and individuals alike. If you’re interested in the intersection of cyber insurance, privacy, and AI, this episode offers a compelling look at how these fields are rapidly converging.
*Connect with Violet Sullivan: https://www.linkedin.com/in/txcyberlawyer/
----
Stay in Touch!
They discuss the nuanced world of privacy litigation and emerging technologies like privacy scans, which scrutinize website data collection practices. Violet also addresses the current debate on AI training data, ownership, and privacy, offering insights into the challenges and implications for companies and individuals alike. If you’re interested in the intersection of cyber insurance, privacy, and AI, this episode offers a compelling look at how these fields are rapidly converging.
*Connect with Violet Sullivan: https://www.linkedin.com/in/txcyberlawyer/
----
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S3 Ep6: Be the Bengal, Dig Into the Process
12 november 2024 |
34 min
**Threat Hunting Workshop: Hunting for Discovery
November 20, 2024 | 12:00 – 1:00 PM EST
Sign Up Here: https://intel471.com/resources/webinars/threat-hunting-workshop-hunting-for-discovery
**Out of the Woods: The Threat Hunting Podcast [LIVE EPISODE]
December 5, 2024 | 12:00 - 1:30 PM EST
Sign Up Here: https://intel471.com/resources/podcasts/the-ideal-outcome-the-gift-of-a-well-crafted-threat-hunt
----------
Top Headlines:
November 20, 2024 | 12:00 – 1:00 PM EST
Sign Up Here: https://intel471.com/resources/webinars/threat-hunting-workshop-hunting-for-discovery
**Out of the Woods: The Threat Hunting Podcast [LIVE EPISODE]
December 5, 2024 | 12:00 - 1:30 PM EST
Sign Up Here: https://intel471.com/resources/podcasts/the-ideal-outcome-the-gift-of-a-well-crafted-threat-hunt
----------
Top Headlines:
- Sophos News | Bengal cat lovers in Australia get psspsspss’d in Google-driven Gootloader campaign: https://news.sophos.com/en-us/2024/11/06/bengal-cat-lovers-in-australia-get-psspsspssd-in-google-driven-gootloader-campaign/?amp=1
- Wiz Blog | Investigating 0ktapus: Phishing Analysis & Detection: https://www.wiz.io/blog/unmasking-phishing-strategies-for-identifying-0ktapus-domains?&web_view=true
- FortiGuard Labs | New Campaign Uses Remcos RAT to Exploit Victims: https://www.fortinet.com/blog/threat-research/new-campaign-uses-remcos-rat-to-exploit-victims
- Cado Security Labs | GuLoader: Evolving Tactics in Latest Campaign Targeting European Industry: https://www.cadosecurity.com/blog/guloader-targeting-european-industrial-companies
----------
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S3 Ep3: [Bonus Episode] Inside Cloud Security with CSA’s John DiMaria
7 november 2024 |
23 min
In this bonus episode of Out of the Woods, Scott Poley sits down with John DiMaria, Director of Operations Excellence at the Cloud Security Alliance (CSA), live from the Information Security Summit in Cleveland. DiMaria discusses his pivotal role in developing CSA’s STAR (Security, Trust, Assurance, and Risk) program and shares insights on cloud security, the evolution of the STAR program, and its alignment with CSA's Cloud Controls Matrix (CCM).
They also explore the future of STAR in the AI landscape, the crucial role of shared responsibility models in cloud security, and the importance of continuous monitoring and compliance in securing cloud infrastructure. DiMaria highlights his experience and CSA's ongoing efforts to provide businesses with practical resources and tools to manage cloud and AI security risks.
Perfect for anyone looking to understand the landscape of cloud security and CSA’s impact on the field, this episode offers a deep dive into the essential frameworks guiding secure cloud practices today. Tune in for this engaging and informative conversation!
*Connect with John DiMaria: https://www.linkedin.com/in/johndimaria/
-----
Stay in Touch!
They also explore the future of STAR in the AI landscape, the crucial role of shared responsibility models in cloud security, and the importance of continuous monitoring and compliance in securing cloud infrastructure. DiMaria highlights his experience and CSA's ongoing efforts to provide businesses with practical resources and tools to manage cloud and AI security risks.
Perfect for anyone looking to understand the landscape of cloud security and CSA’s impact on the field, this episode offers a deep dive into the essential frameworks guiding secure cloud practices today. Tune in for this engaging and informative conversation!
*Connect with John DiMaria: https://www.linkedin.com/in/johndimaria/
-----
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S3 Ep4: Security Beyond the Box
5 november 2024 |
40 min
**Threat Hunting Workshop: Hunting for Discovery
November 20, 2024 | 12:00 – 1:00 PM ET
Sign Up Here: https://intel471.com/resources/webinars/threat-hunting-workshop-hunting-for-discovery
----------
Top Headlines:
November 20, 2024 | 12:00 – 1:00 PM ET
Sign Up Here: https://intel471.com/resources/webinars/threat-hunting-workshop-hunting-for-discovery
----------
Top Headlines:
- Unit 42 | Jumpy Pisces Engages in Play Ransomware: https://unit42.paloaltonetworks.com/north-korean-threat-group-play-ransomware/
- Help Net Security | Sophos Mounted Counter-Offensive Operation to Foil Chinese Attackers: https://www.helpnetsecurity.com/2024/10/31/sophos-china-defensive-operation/?web_view=true
- Project Zero | From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code: https://googleprojectzero.blogspot.com/2024/10/from-naptime-to-big-sleep.html?m=1
- The Cyber Express | HeptaX: Uncovering Cyberespionage Operations Through Unauthorized RDP Connections: https://thecyberexpress.com/heptax-cyberattack/?&web_view=true
----------
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S3 Ep1: [LIVE] Blood, Sweat, and Threats: Carving the Perfect Threat Hunter
30 oktober 2024 |
90 min
*Join our Threat Hunting Workshop: Hunting for Discovery*
November 20, 2024 | 12:00 - 1:00 PM ET
Sign Up Here: https://intel471.com/resources/webinars/threat-hunting-workshop-hunting-for-discovery
----
In this live episode of Out of the Woods: The Threat Hunting Podcast, we dive into essential threat hunting techniques and the journey to mastering the craft.
Join us as we discuss:
November 20, 2024 | 12:00 - 1:00 PM ET
Sign Up Here: https://intel471.com/resources/webinars/threat-hunting-workshop-hunting-for-discovery
----
In this live episode of Out of the Woods: The Threat Hunting Podcast, we dive into essential threat hunting techniques and the journey to mastering the craft.
Join us as we discuss:
- Building resilience through community insights and shared resources
- Practical threat hunting tips with the latest from GitHub repositories and threat actor techniques
- Managing the grind and balancing detection with proactive hunting strategies
- Enhancing skill sets by embracing the unknowns in the journey
Interesting Artifacts:
- https://github.com/BushidoUK
- https://github.com/salesforce/logai?tab=readme-ov-file#documentation
- https://opensource.salesforce.com/logai/latest/intro.html
- https://detect.fyi/have-you-been-keeping-up-with-your-low-confidence-detections-494c742202e4
🔗 Join our Discord to interact with us at our next live session: https://discord.gg/Ka6tsEc3
#ThreatHunting #CyberSecurity #OutOfTheWoods #Podcast
S2 Ep28: Date Your Data… Swipe Right
9 oktober 2024 |
34 min
**[LIVE] Out of the Woods: The Threat Hunting Podcast
October 24, 2024 | 7:00 – 8:30 PM ET
Sign Up > https://intel471.com/resources/podcasts/blood-sweat-and-threats-carving-the-perfect-threat-hunter
----------
Top Headlines:
October 24, 2024 | 7:00 – 8:30 PM ET
Sign Up > https://intel471.com/resources/podcasts/blood-sweat-and-threats-carving-the-perfect-threat-hunter
----------
Top Headlines:
- Aqua | perfctl: A Stealthy Malware Targeting Millions of Linux Servers: https://www.aquasec.com/blog/perfctl-a-stealthy-malware-targeting-millions-of-linux-servers/
- Cisco Talos Blog | Threat Actor Believed to be Spreading New MedusaLocker Variant in Europe and South America: https://blog.talosintelligence.com/threat-actor-believed-to-be-spreading-new-medusalocker-variant-since-2022/?&web_view=true
- Proofpoint US | Security Brief: Royal Mail Lures Deliver Open Source Prince Ransomware: https://www.proofpoint.com/us/blog/threat-insight/security-brief-royal-mail-lures-deliver-open-source-prince-ransomware
- Security Affairs | Kyiv's Hackers Launched an Unprecedented Cyber Attack on Russian State Media VGTRK on Putin's Birthday: https://securityaffairs.com/169486/cyber-warfare-2/kyivs-hackers-hit-russian-state-media.html?web_view=true
----------
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S2 Ep27: iCUP… Let's Talk Hygiene
1 oktober 2024 |
41 min
**Threat Hunting Workshop: Hunting for Collection
October 2, 2024 | 12:00 - 1:00 PM ET
Sign Up > https://intel471.com/resources/webinars/threat-hunting-workshop-hunting-for-collection
**[LIVE] Out of the Woods: The Threat Hunting Podcast
October 24, 2024 | 7:00 – 8:30 PM ET
Sign Up > https://intel471.com/resources/podcasts/blood-sweat-and-threats-carving-the-perfect-threat-hunter
----------
Top Headlines:
October 2, 2024 | 12:00 - 1:00 PM ET
Sign Up > https://intel471.com/resources/webinars/threat-hunting-workshop-hunting-for-collection
**[LIVE] Out of the Woods: The Threat Hunting Podcast
October 24, 2024 | 7:00 – 8:30 PM ET
Sign Up > https://intel471.com/resources/podcasts/blood-sweat-and-threats-carving-the-perfect-threat-hunter
----------
Top Headlines:
- The Hacker News | Critical Linux CUPS Printing System Flaws Could Allow Remote Command Execution: https://thehackernews.com/2024/09/critical-linux-cups-printing-system.html?m=1
- The DFIR Report | Nitrogen Campaign Drops Silver and Ends With BlackCat Ransomware: https://thedfirreport.com/2024/09/30/nitrogen-campaign-drops-sliver-and-ends-with-blackcat-ransomware/
- Netskope | DCRat Targets Users with HTML Smuggling: https://www.netskope.com/blog/dcrat-targets-users-with-html-smuggling
- CISA Analysis: Fiscal Year 2023 Risk and Vulnerability Assessments: https://www.cisa.gov/sites/default/files/2024-09/FY23_RVA_Analysis_508.pdf
----------
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S2 Ep26: WHOIS, or Not WHOIS…
24 september 2024 |
39 min
**Threat Hunting Workshop: Hunting for Collection
October 2, 2024 | 12:00 - 1:00 PM ET
Sign Up > https://intel471.com/resources/webinars/threat-hunting-workshop-hunting-for-collection
**[LIVE] Out of the Woods: The Threat Hunting Podcast
October 24, 2024 | 7:00 – 8:30 PM ET
Sign Up > https://intel471.com/resources/podcasts/blood-sweat-and-threats-carving-the-perfect-threat-hunter
----------
In this episode of Out of the Woods: The Threat Hunting Podcast, Scott Poley and Tom Kastura explore the latest threat-hunting insights, starting with UNC 2970, a North Korean-linked group using trojanized PDF readers to target industries like energy and finance. They discuss how the group's phishing tactics exploit job openings and the use of telemetry to detect malicious activity. The episode also covers a campaign leveraging CAPTCHA pages to deliver the Luma Stealer malware and dives into the risk of poisoned Python packages compromising supply chains. Tune in for strategies to stay proactive against advanced threats and enhance your hunting techniques.
Top Headlines:
October 2, 2024 | 12:00 - 1:00 PM ET
Sign Up > https://intel471.com/resources/webinars/threat-hunting-workshop-hunting-for-collection
**[LIVE] Out of the Woods: The Threat Hunting Podcast
October 24, 2024 | 7:00 – 8:30 PM ET
Sign Up > https://intel471.com/resources/podcasts/blood-sweat-and-threats-carving-the-perfect-threat-hunter
----------
In this episode of Out of the Woods: The Threat Hunting Podcast, Scott Poley and Tom Kastura explore the latest threat-hunting insights, starting with UNC 2970, a North Korean-linked group using trojanized PDF readers to target industries like energy and finance. They discuss how the group's phishing tactics exploit job openings and the use of telemetry to detect malicious activity. The episode also covers a campaign leveraging CAPTCHA pages to deliver the Luma Stealer malware and dives into the risk of poisoned Python packages compromising supply chains. Tune in for strategies to stay proactive against advanced threats and enhance your hunting techniques.
Top Headlines:
- Unit 42 | Gleaming Pisces Poisoned Python Packages Campaign Delivers PondRAT Linux and MacOS Backdoors: https://unit42.paloaltonetworks.com/gleaming-pisces-applejeus-poolrat-and-pondrat/?web_view=true
- CloudSEK | Unmasking the Danger: Lumma Stealer Malware Exploits Fake CAPTCHA Pages: https://www.cloudsek.com/blog/unmasking-the-danger-lumma-stealer-malware-exploits-fake-captcha-pages?&web_view=true
- Google Cloud | An Offer You Can Refuse: UNC2970 Backdoor Deployment Using Trojanized PDF Reader: https://cloud.google.com/blog/topics/threat-intelligence/unc2970-backdoor-trojanized-pdf-reader
- DarkReading | For $20, Researchers Seize Part of Net Infrastructure: https://www.darkreading.com/cyber-risk/researchers-seize-internet-infrastructure-for-20?&web_view=true
----------
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S2 Ep25: Bad Extensions Level Up, Social Engineering Gets Social
9 september 2024 |
35 min
**Threat Hunting Workshop: Hunting for Collection
October 2, 2024 | 12:00 - 1:00 PM ET
Sign Up > https://intel471.com/resources/webinars/threat-hunting-workshop-hunting-for-collection
In this episode of Out of the Woods: The Threat Hunting Podcast, Scott and Lee discuss four key topics: North Korea’s social engineering attacks on the crypto industry, the rise of the malicious Chrome extension Luma C2 Stealer, a phishing and doxxing campaign by Russian threat actors targeting NGOs, and hacktivist attacks on Russian and Belarusian institutions using ransomware and common tools. They highlight the growing sophistication of these tactics and stress the importance of vigilance and proactive threat hunting to defend against these increasingly complex threats.
Top Headlines:
1. FBI | Public Service Announcement - North Korea Aggressively Targeting Crypto Industry with Well-Disguised Social Engineering Attacks: https://www.ic3.gov/Media/Y2024/PSA240903
2. Cybersecurity News | Beware the Drive-By Download: LummaC2 Stealer and Malicious Chrome Extension Wreak Havoc: https://securityonline.info/beware-the-drive-by-download-lummac2-stealer-and-malicious-chrome-extension-wreak-havoc/?&web_view=true
3. The Hacker News | North Korean Threat Actors Deploy COVERTCATCH Malware via LinkedIn Job Scams: https://thehackernews.com/2024/09/north-korean-threat-actors-deploy.html
4. SecureList | Head Mare: Adventures of a Unicorn in Russia and Belarus: https://securelist.com/head-mare-hacktivists/113555/
----------
Stay in Touch!
October 2, 2024 | 12:00 - 1:00 PM ET
Sign Up > https://intel471.com/resources/webinars/threat-hunting-workshop-hunting-for-collection
In this episode of Out of the Woods: The Threat Hunting Podcast, Scott and Lee discuss four key topics: North Korea’s social engineering attacks on the crypto industry, the rise of the malicious Chrome extension Luma C2 Stealer, a phishing and doxxing campaign by Russian threat actors targeting NGOs, and hacktivist attacks on Russian and Belarusian institutions using ransomware and common tools. They highlight the growing sophistication of these tactics and stress the importance of vigilance and proactive threat hunting to defend against these increasingly complex threats.
Top Headlines:
1. FBI | Public Service Announcement - North Korea Aggressively Targeting Crypto Industry with Well-Disguised Social Engineering Attacks: https://www.ic3.gov/Media/Y2024/PSA240903
2. Cybersecurity News | Beware the Drive-By Download: LummaC2 Stealer and Malicious Chrome Extension Wreak Havoc: https://securityonline.info/beware-the-drive-by-download-lummac2-stealer-and-malicious-chrome-extension-wreak-havoc/?&web_view=true
3. The Hacker News | North Korean Threat Actors Deploy COVERTCATCH Malware via LinkedIn Job Scams: https://thehackernews.com/2024/09/north-korean-threat-actors-deploy.html
4. SecureList | Head Mare: Adventures of a Unicorn in Russia and Belarus: https://securelist.com/head-mare-hacktivists/113555/
----------
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S2 Ep24: Basic Techniques Used in Advanced Ways
3 september 2024 |
37 min
In this episode of "Out of the Woods: The Threat Hunting Podcast," Scott and Tom dive into the latest threat hunting headlines for the week of September 2nd, 2024. They explore how basic techniques are being repurposed in advanced ways, such as using Google Sheets for command and control in a suspected espionage campaign and employing web dev to enhance phishing attacks. The discussion also covers a new wave of skimming attacks targeting e-commerce sites and a deep dive into APT32’s advanced persistence tactics in a long-term intrusion. Scott and Tom offer insights and strategies for threat hunters to detect and counter these evolving threats.
Top Headlines:
1. Huntress | Advanced Persistent Threat Targeting Vietnamese Human Rights Defenders: https://www.huntress.com/blog/advanced-persistent-threat-targeting-vietnamese-human-rights-defenders?&web_view=true
2. Objective-See | A Surreptitious Cryptocurrency Miner in the Mac App Store?: https://objective-see.org/blog/blog_0x2B.html
3. Malwarebytes | Hundreds of Online Stores Hacked in New Campaign: https://www.malwarebytes.com/blog/news/2024/08/hundreds-of-online-stores-hacked-in-new-campaign?web_view=true
4. Proofpoint US | The Malware That Must Not Be Named: Suspected Espionage Campaign Delivers "Voldemort": https://www.proofpoint.com/us/blog/threat-insight/malware-must-not-be-named-suspected-espionage-campaign-delivers-voldemort
----------
Stay in Touch!
Top Headlines:
1. Huntress | Advanced Persistent Threat Targeting Vietnamese Human Rights Defenders: https://www.huntress.com/blog/advanced-persistent-threat-targeting-vietnamese-human-rights-defenders?&web_view=true
2. Objective-See | A Surreptitious Cryptocurrency Miner in the Mac App Store?: https://objective-see.org/blog/blog_0x2B.html
3. Malwarebytes | Hundreds of Online Stores Hacked in New Campaign: https://www.malwarebytes.com/blog/news/2024/08/hundreds-of-online-stores-hacked-in-new-campaign?web_view=true
4. Proofpoint US | The Malware That Must Not Be Named: Suspected Espionage Campaign Delivers "Voldemort": https://www.proofpoint.com/us/blog/threat-insight/malware-must-not-be-named-suspected-espionage-campaign-delivers-voldemort
----------
Stay in Touch!
Twitter: https://twitter.com/Intel471Inc
LinkedIn: https://www.linkedin.com/company/intel-471/
YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
Discord: https://discord.gg/DR4mcW4zBr
Facebook: https://www.facebook.com/Intel471Inc/
S2 Ep23: Unique Executions... How Unique Are They?
27 augusti 2024 |
40 min
In this episode of the "Out of the Woods Threat Hunting Podcast," Scott and Tom break down the top threat hunting stories for the week of August 26, 2024. They dive into SetXP, a stealthy Linux malware that manipulates UDEV rules to evade detection, and explore why it’s not yet on the MITRE ATT&CK radar. The duo also covers PeakLight, a new memory-only dropper, and Stick Stealer, a malware targeting browser data and crypto wallets. Wrapping up with insights from a BlackSuit ransomware breach, they discuss how attackers often reuse old techniques in new ways. This episode challenges the notion of what truly makes an execution unique, offering practical tips for staying ahead of evolving threats.
1. AON | Unveiling "sedexp": A Stealthy Linux Malware Exploiting udev Rules: https://www.aon.com/en/insights/cyber-labs/unveiling-sedexp
2. The DFIR Report | BlackSuit Ransomware: https://thedfirreport.com/2024/08/26/blacksuit-ransomware/
3. Check Point Research | Unmasking Styx Stealer: How a Hacker’s Slip Led to an Intelligence Treasure Trove: https://research.checkpoint.com/2024/unmasking-styx-stealer-how-a-hackers-slip-led-to-an-intelligence-treasure-trove/
4. Google Cloud Blog | PEAKLIGHT: Decoding the Stealthy Memory-Only Malware: https://cloud.google.com/blog/topics/threat-intelligence/peaklight-decoding-stealthy-memory-only-malware/?&web_view=true
Stay in Touch!
1. AON | Unveiling "sedexp": A Stealthy Linux Malware Exploiting udev Rules: https://www.aon.com/en/insights/cyber-labs/unveiling-sedexp
2. The DFIR Report | BlackSuit Ransomware: https://thedfirreport.com/2024/08/26/blacksuit-ransomware/
3. Check Point Research | Unmasking Styx Stealer: How a Hacker’s Slip Led to an Intelligence Treasure Trove: https://research.checkpoint.com/2024/unmasking-styx-stealer-how-a-hackers-slip-led-to-an-intelligence-treasure-trove/
4. Google Cloud Blog | PEAKLIGHT: Decoding the Stealthy Memory-Only Malware: https://cloud.google.com/blog/topics/threat-intelligence/peaklight-decoding-stealthy-memory-only-malware/?&web_view=true
Stay in Touch!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep22: Top 5 Threat Hunting Headlines - 19 Aug 2024
19 augusti 2024 |
54 min
In this week's Top 5 Threat Hunting Headlines, Scott and Tom discuss top cybersecurity threats, including Kaspersky's Tusk InfoStealer campaign, a cloud extortion campaign exploiting AWS environments, APT41's advanced tactics against a Taiwanese research institute, and the Banshee InfoStealer targeting macOS. They also explore the impact of AI on cybersecurity, emphasizing the need for SOCs to evolve with new talent and strategies to address emerging threats. The episode underscores the importance of staying vigilant and adapting to the rapidly changing threat landscape.
Top 5 Threat Hunting Headlines - 19 Aug 2024
1. Secure List | Tusk Campaign Uses Infostealers and Clippers for Financial Gain
2. Unit 42 | Leaked Environment Variables Allow Large-Scale Extortion Operation of Cloud Environments
3. Cisco Talos Blog | APT41 Likely Compromised Taiwanese Government-Affiliated Research Institute with ShadowPad and Cobalt Strike
4. Elastic Security Labs | Beyond the Wail: Deconstructing the BANSHEE Infostealer
5. Help Net Security | 74% of IT Professionals Worry That AI Tools Will Replace Them
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep21: Top 5 Threat Hunting Headlines - 12 Aug 2024
15 augusti 2024 |
55 min
Top 5 Threat Hunting Headlines - 12 Aug 2024
1. DarkReading | SaaS Apps Present an Abbreviated Kill Chain for Attackers
2. ReasonLabs | Enterprise Grade Security to All of Your Personal Devices
3. DFIR | Threat Actors' Toolkit: Leveraging Silver, PoshC2 & Batch Scripts
4. SafeBreach | Downgrade Attacks Using Windows Updates
5. Cyble | Double Trouble: Latrodectus and ACR Stealer Observed Spreading Via Google Authenticator Phishing Site
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep20: Top 5 Threat Hunting Headlines - 29 July 2024
30 juli 2024 |
69 min
Threat Hunting Workshop: Hunting for Command and Control
31 July 2024 | 12:00 - 1:00 pm ET
31 July 2024 | 12:00 - 1:00 pm ET
Black Hat 2024 Training with Lee Archinal
"A Beginner's Guide to Threat Hunting: How to Shift Focus from IOCs to Behaviors and TTPs" | Secure your spot now at a discounted rate:
"A Beginner's Guide to Threat Hunting: How to Shift Focus from IOCs to Behaviors and TTPs" | Secure your spot now at a discounted rate:
- 3-4 Aug 2024: Sign Up Here!
- 5-6 Aug 2024: Sign Up Here!
-----
Top 5 Threat Hunting Headlines - 29 July 2024
1. Bleeping Computer | Acronis Warns of Cyber Infrastructure Default Password Abused in Attacks
2. Guardio Labs | “EchoSpoofing” – A Massive Phishing Campaigns Exploiting Proofpoint’s Email Protevtion to Dispatch Millions of Perfectly Spoofed Emails
3. Esentire | Introducing Gh0stGambit: A Dropper for Deploying Gh0st RAT
4. Check Point Research | Stargazers Ghost Network
5. Help Net Security | Most CISO’s Feel Unprepared for New Compliance Regulations
-----
Follow Us!
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep19: Top 5 Threat Hunting Headlines - 22 July 2024
25 juli 2024 |
61 min
Threat Hunting Workshop: Hunting for Command and Control
31 July 2024 | 12:00 - 1:00 pm ET
31 July 2024 | 12:00 - 1:00 pm ET
Black Hat 2024 Training with Lee Archinal
"A Beginner's Guide to Threat Hunting: How to Shift Focus from IOCs to Behaviors and TTPs" | Secure your spot now at a discounted rate:
"A Beginner's Guide to Threat Hunting: How to Shift Focus from IOCs to Behaviors and TTPs" | Secure your spot now at a discounted rate:
- 3-4 Aug 2024: Sign Up Here!
- 5-6 Aug 2024: Sign Up Here!
-----
Top 5 Threat Hunting Headlines - 22 July 2024
1. Popular Ukrainian Telegram Channels Hacked to Spread Russian Propaganda
2. New Play Ransomware Linux Variant Targets ESXI Shows Ties with Prolific Puma
3. Dragos Frostygoop Report
4. Likely Ecrome Actor Capitalizing on Falcon Sensor Issues
5. Internet Organised Crime Threat Assessment 2024
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep18: Top 5 Threat Hunting Headlines - 15 July 2024
17 juli 2024 |
40 min
Threat Hunting Workshop: Hunting for Command and Control
31 July 2024 | 12:00 - 1:00 pm ET
31 July 2024 | 12:00 - 1:00 pm ET
Black Hat 2024 Training with Lee Archinal
"A Beginner's Guide to Threat Hunting: How to Shift Focus from IOCs to Behaviors and TTPs"
Regular Registration closes on July 19, 2024! Secure your spot now at a discounted rate:
"A Beginner's Guide to Threat Hunting: How to Shift Focus from IOCs to Behaviors and TTPs"
Regular Registration closes on July 19, 2024! Secure your spot now at a discounted rate:
- 3-4 Aug 2024: Sign Up Here!
- 5-6 Aug 2024: Sign Up Here!
-----
Top 5 Threat Hunting Headlines - 15 July 2024
1. Infosecurity Magazine | CISA Urges Software Makers to Eliminate OS Command Injection Flaws
2. Wazuh | Detecting Living Off the Land Attacks with Wazuh
3. ClickFIx Deception: A Social Engineering Tactic to Deploy Malware
4. The Hacker News | 10,000 Victims a Day: Infostealer Garden of Low-Hanging Fruit
5. Blackberry | Coyote Banking Trojan Targets LATAM with a Focus on Brazillian Financial Institutions
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep17: Top 5 Threat Hunting Headlines - 1 July 2024
2 juli 2024 |
55 min
Threat Hunting Workshop: Hunting for Command and Control
31 July 2024 | 12:00 - 1:00 pm ET
31 July 2024 | 12:00 - 1:00 pm ET
Black Hat 2024 Training with Lee Archinal
"A Beginner's Guide to Threat Hunting: How to Shift Focus from IOCs to Behaviors and TTPs"
Regular Registration closes on July 19, 2024! Secure your spot now at a discounted rate:
"A Beginner's Guide to Threat Hunting: How to Shift Focus from IOCs to Behaviors and TTPs"
Regular Registration closes on July 19, 2024! Secure your spot now at a discounted rate:
- 3-4 Aug 2024: Sign Up Here!
- 5-6 Aug 2024: Sign Up Here!
-----
Top 5 Threat Hunting Headlines - 1 July 2024
1. Qualys Security Blog | Remote Unauthenticated Code Execution Vulnerability in OpenSSH Server
2. ZScaler | Kimsuky Deploys TRANSLATEXT to Target South Korean Academia
3. The Register | Police Allege 'Evil Twin' In-Flight WiFi Used to Steal Info & Australian Federal Police | Man Charged Over Creation of 'Evil Twin' Free WiFi Networks to Access Personal Data
- https://www.theregister.com/2024/07/01/australia_evil_twin_wifi_airline_attack/?&web_view=true
- https://www.afp.gov.au/news-centre/media-release/man-charged-over-creation-evil-twin-free-wifi-networks-access-personal
4. GitHub | JPCERTCC/LogonTracer
5. Help Net Security | 75% of New Vulnerabilities Exploited Within 19 Days
-----
Follow Us!
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep16: Top 5 Threat Hunting Headlines - 24 June 2024
25 juni 2024 |
57 min
Black Hat 2024 Training with Lee Archinal
"A Beginner's Guide to Threat Hunting: How to Shift Focus from IOCs to Behaviors and TTPs"
Regular Registration closes on July 19, 2024! Secure your spot now at a discounted rate:
*3-4 Aug 2024: Sign Up Here!
*5-6 Aug 2024: Sign Up Here!
-----
"A Beginner's Guide to Threat Hunting: How to Shift Focus from IOCs to Behaviors and TTPs"
Regular Registration closes on July 19, 2024! Secure your spot now at a discounted rate:
*3-4 Aug 2024: Sign Up Here!
*5-6 Aug 2024: Sign Up Here!
-----
Top 5 Threat Hunting Headlines - 25 June 2024
1. Positive Technologies | ExCobalt: GORed, the hidden-tunnel technique
2. Cisco Talos | SneakyChef espionage group targets government agencies with SugarCh0st and more infection techniques
3. Help Net Security | 1 out of 3 breaches go undetected
4. Ars Technica | Dell said return to office or else - nearly half of the workers chose "or else"
5. Infosecurity Magazine | Cybersecurity Burnout Costing Firms $700m+ Annually
-----
Follow Us!
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep15: Top 5 Threat Hunting Headlines - 10 June 2024
11 juni 2024 |
67 min
Black Hat 2024 Training with Lee Archinal
"A Beginner's Guide to Threat Hunting: How to Shift Focus from IOCs to Behaviors and TTPs"
Regular Registration closes on July 19, 2024! Secure your spot now at a discounted rate:
*3-4 Aug 2024: Sign Up Here!
*5-6 Aug 2024: Sign Up Here!
-----
"A Beginner's Guide to Threat Hunting: How to Shift Focus from IOCs to Behaviors and TTPs"
Regular Registration closes on July 19, 2024! Secure your spot now at a discounted rate:
*3-4 Aug 2024: Sign Up Here!
*5-6 Aug 2024: Sign Up Here!
-----
Top 5 Threat Hunting Headlines - 10 June 2024
1. Google Cloud | UNC5537 Targets Snowflake Customer Instances for Data Theft and Extortion
2. Morphisec | Howling at the Inxos: Sticky Werewolf's Latest Malicious Aviation Attacks
3. Vonahi Security | Automated Penetration Testing & Cyber Security Services - Top 10 Crticial Pentest Findings Report
4. The DFIR Report | IcedID Brings ScreenConnect and CSharp Streamer to ALPHV Ransomware Deployment
5. Zscaler | Technical Analysis of the Latest Variant of ValleyRAT
-----
Follow Us!
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep14: Top 5 Threat Hunting Headlines - 22 May 2024
22 maj 2024 |
60 min
Black Hat 2024 Training with Lee Archinal
"A Beginner's Guide to Threat Hunting: How to Shift Focus from IOCs to Behaviors and TTPs"
Early registration closes on May 24, 2024! Secure your spot now at a discounted rate:
*3-4 Aug 2024: Sign Up Here!
*5-6 Aug 2024: Sign Up Here!
-----
"A Beginner's Guide to Threat Hunting: How to Shift Focus from IOCs to Behaviors and TTPs"
Early registration closes on May 24, 2024! Secure your spot now at a discounted rate:
*3-4 Aug 2024: Sign Up Here!
*5-6 Aug 2024: Sign Up Here!
-----
Top 5 Threat Hunting Headlines - 22 May 2024
1. Kandji | Malware: Cuckoo Behaves Like Cross Between Infostealer and Spyware
2. Rapid7 | Ongoing Malvertising Campaign Leads to Ransomware
3. Unit 42 | Payload Trends in Malicious OneNote Samples
4. Check Point Research | Bad Karma, No Justice: Void Manticore Destructive Activities in Isreal
5. Aqua Nautilus | Kinsing Demystified - A comprehensive Technical Guide
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep13: Top 5 Threat Hunting Headlines - 13 May 2024
14 maj 2024 |
51 min
Top 5 Threat Hunting Headlines - 13 May 2024
1. Infosecurity Magazine | AI-Powered Russian Network Pushes Fake Political News
2. Elastic Security Labs | Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part Two
3. The Record | Cyberthreat Landscape Permanently Altered by Chinese Operations, US Officials Say
4. Elastic Security Labs | Dissecting REMCOS RAT: An in- depth analysis of a widespread 2024 malware, Part Four
5. Help Net Security | How Secure is the "Password Protection" on Your Files and Drives?
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep12: Top 5 Threat Hunting Headlines - 22 April 2024
23 april 2024 |
50 min
Top 5 Threat Hunting Headlines - 22 April 2024
1. The Record | NATO to launch new cyber center to contest cyberspace 'at all times'
2. Securonix | Securonix Threat Research Knowledge Sharing Series: Detecting DLL Sideloading Techniques Found In Recent Real-world Malware Attack Chains
3. Darkreading | Evil XDR: Researcher Turns Palo Alto Software Into Perfect Malware
4. HackTricks
5. CSA | Deploying AI Systems Securely
-----
Follow Us!
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep11: Top 5 Threat Hunting Headlines - 15 April 2024
16 april 2024 |
54 min
Top 5 Threat Hunting Headlines - 15 April 2024
1. Volexity | Zero-Day Exploitation of Unauthenticated Remote Code Execution Vulnerability in GlobalProtect (CVE-2024-3400)
2. Trend Micro | Cyberespionage Group Earth Hundun's Continuous Refinement of Waterbear and Deuterbear
3. The Cyber Express | FatalRAT Targets Cryptocurrency Users With DLL Side-loading Techniques
4. Elastic Security Labs | Linux detection engineering with Auditd
5. NIST Special Publication | Incident Response Recommendations and Considerations for Cybersecurity Risk Management
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep10: [LIVE] Out of the Woods: Episode 15
9 april 2024 |
93 min
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
Looking to have your cyber security questions or insights featured on our next episode? Tag #OutOfTheWoodsPodcast on your socials when you share your thoughts. No question is too specific, no insight too niche—we're here for it all!
------------
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
TikTok: https://www.tiktok.com/@cyborgsecinc
Looking to have your cyber security questions or insights featured on our next episode? Tag #OutOfTheWoodsPodcast on your socials when you share your thoughts. No question is too specific, no insight too niche—we're here for it all!
------------
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep9: Top 5 Threat Hunting Headlines - 25 March 2024
26 mars 2024 |
30 min
**[LIVE] Out of the Woods Podcast Episode
April 4, 2024 | 7:00 - 8:30 PM ET
More Details/Registration 👇
April 4, 2024 | 7:00 - 8:30 PM ET
More Details/Registration 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-e15
Get your FREE HUNTER Community Account today! 👇
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep8: Top 5 Threat Hunting Headlines - 20 March 2024
20 mars 2024 |
59 min
**[LIVE] Out of the Woods Podcast Episode
April 4, 2024 | 7:00 - 8:30 PM ET
More Details/Registration 👇
April 4, 2024 | 7:00 - 8:30 PM ET
More Details/Registration 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-e15
----
Top 5 Threat Hunting Headlines - 20 March 2024
1. IBM X-Force Threat Intelligence Index 2024
2. Almond | UAC Bypass via Elevated .NET Applications
3. Help Net Security | Only 13% of Medical Devices Support Endpoint Protection Agents
4. Sonicwall - By Security News | Interesting Multi-Stage StopCrypt Ransomware Variant Propagating in the Wild
5. Bleeping Computer | Hackers Exploit Aiohttp Bug to Find Vulnerable Networks
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep7: Top 5 Threat Hunting Headlines - 11 March 2024
12 mars 2024 |
58 min
**Threat Hunting Workshop: Hunting for Initial Access
March 20, 2024 | 12:00 - 1:00 PM ET
More Details/ Registration 👇
**[LIVE] Out of the Woods Podcast Episode
April 4, 2024 | 7:00 - 8:30 PM ET
More Details/Registration 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-e15
----
Top 5 Threat Hunting Headlines - 11 March 2024
1. The Hacker News | Microsoft Confirms Russian Hackers Stole Source Code, Some Customer Secrets
- https://thehackernews.com/2024/03/microsoft-confirms-russian-hackers.html?m=1
- https://blog.talosintelligence.com/deep-dive-into-phobos-ransomware/
2. Almond | UAC Bypass via Elevated .NET Applications
3. Check Point Research | Magnet Goblin Targets Publicly Facing Servers Using 1-Day Vulnerabilities
4. https://www.nieuwsblad.be/cnt/dmf20240306_93861112
5. Infosecurity Magazine | Dropbox Used to Steal Credentials and Bypass MFA in Novel Phishing Campaign
5. Infosecurity Magazine | Dropbox Used to Steal Credentials and Bypass MFA in Novel Phishing Campaign
-----
Follow Us!
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep6: Top 5 Threat Hunting Headlines - 04 March 2024
5 mars 2024 |
30 min
**Threat Hunting Workshop: Hunting for Initial Access
March 20, 2024 | 12:00 - 1:00 PM ET
More Details/ Registration 👇
Top 5 Threat Hunting Headlines - 04 March 2024
1. TrendMicro - Multistage RA World Ransomware Uses Anti-AV Tactics, Exploits GPO
2. Help Net Security - Cybercriminals harness AI for new era of malware development
3. Malware Bytes - Malicious meeting invite fix targets Mac users
4. Security Affairs - A U.S. Court ordered surveillance firm NSO Group to hand over the source code for its Pegasus spyware and other products to Meta
5. Security Affairs - U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Microsoft Streaming Service vulnerability to its Known Exploited Vulnerabilities catalog
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep5: [LIVE] Out of the Woods: Episode 14
28 februari 2024 |
90 min
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
------------
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
TikTok: https://www.tiktok.com/@cyborgsecinc
------------
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep4: Top 5 Threat Hunting Headlines - 26 Feb 2024
26 februari 2024 |
62 min
Top 5 Threat Hunting Headlines - 26 February 2024
1. The DFIR Report: SEO Poisoning to Domain Control: The Gootloader Saga Continues
2. Cybersecurity & Infrastructure Security Agency: Updated: Top Cyber Actions for Securing Water Systems
- https://www.cisa.gov/news-events/alerts/2024/02/23/updated-top-cyber-actions-securing-water-systems
- https://www.cisa.gov/sites/default/files/2024-02/fact-sheet-top-cyber-actions-for-securing-water-systems.pdf
3. The Hacker News: LockBit Ransomware Group Resurfaces After Law Enforcement Takedown
4. Group-IB: Extra Credit: VietCredCare Information Stealer Takes Aim at Vietnamese Businesses
5. Help Net Security: Cybersecurity Fears Drive a Return to On-Premise Infrastructure From Cloud Computing
-----
Follow Us!
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc
S2 Ep3: Top 5 Threat Hunting Headlines - 05 Feb 2024
6 februari 2024 |
66 min
Top 5 Threat Hunting Headlines - 05 February 2024
1. Exploring the Latest Mispadu Stealer Variant
2. Buzzing on Christmas Eve: Trigona Ransomware in 3 Hours
3. DDoS Attack Power Skyrockets to 1.6 Tbps
4. Evolution of UNC4990: Uncovering USB Malware
5. Detecting and Mitigating a Phishing Threat: "Greatness"
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
S2 Ep2: Top 5 Threat Hunting Headlines - 22 Jan 2024
24 januari 2024 |
58 min
Top 5 Threat Hunting Headlines - 22 January 2024
1. MavenGate Attack Could Let Hackers Hijack Java and Android via Abandoned Libraries
1. MavenGate Attack Could Let Hackers Hijack Java and Android via Abandoned Libraries
- https://thehackernews.com/2024/01/hackers-hijack-popular-java-and-android.html
- https://blog.oversecured.com/Introducing-MavenGate-a-supply-chain-attack-method-for-Java-and-Android-applications/#maven-philosophy
2. North Korea's ScarCruft Attackers Gear Up to Target Cybersecurity Pros
- https://www.darkreading.com/threat-intelligence/north-koreasc-arcruft-attackers-target-cybersecurity-pros
- https://www.sentinelone.com/labs/a-glimpse-into-future-scarcruft-campaigns-attackers-gather-strategic-intelligence-and-target-cybersecurity-professionals/
3. The Fake Fix: New Chae$ 4.1 Malware Hides in Driver Downloads
4. Outlook Vulnerability Discovery and New Ways to Leak NTLM Hashes
5. Bulletproof Hosting: A Critical Cybercriminal Service
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
S2 Ep1: Top 5 Threat Hunting Headlines - 08 Jan 2024
8 januari 2024 |
50 min
Top 5 Threat Hunting Headlines - 08 January 2024
1. The Hacker News | Sea Turtle Cyber Espionage Campaign Targets Dutch IT and Telecom Companies
- https://thehackernews.com/2024/01/sea-turtle-cyber-espionage-campaign.html?&web_view=true
- https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/tortoise-and-malwahare.html
2. TRM | North Korean Hackers Stole $600 Million in Crypto in 2023
3. ClearSky Cyber Securfity | No-Justice Wiper
4. Uptycs | Ukraine Targeted by UAC-0050 Using Remcos RAT Pipe Method for Evasion
5. The Register | Ransomware payment ban: Wrong idea at the wrong time
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep64: Top 5 TTPs & Behaviors - 11 Dec 2023
12 december 2023 |
27 min
Top 5 TTPs & Behaviors - 11 Dec 2023
Get your FREE HUNTER Community Account to hunt for these TTPs and Behaviors 👇
https://hunter.cyborgsecurity.io/login
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
Get your FREE HUNTER Community Account to hunt for these TTPs and Behaviors 👇
https://hunter.cyborgsecurity.io/login
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep63: [LIVE] Out of the Woods: Episode 13
8 december 2023 |
91 min
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
------------
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
------------
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep62: [SPOTLIGHT INTERVIEW] Guarding the Digital Frontier: Insights from Major Pierce
30 november 2023 |
42 min
Bonus Episode - November 30, 2023
Embark on an exploratory journey through the domain of cybersecurity with our host, Scott Poley, in this enlightening podcast episode. Our distinguished guest, Major Pierce, currently serving as the Director of Cyber Operations for the PA National Guard, unfolds her unique narrative within the digital defense realm – from her initial draw to the cyber sector to the pivotal decisions guiding her to a leading role.
Major Pierce's tenure at the PA National Guard is far from typical. In her pivotal position, she directs a nuanced strategy of cyber operations, tackling the complexities of digital warfare within the U.S. Army. The operations she oversees are characterized by a sophisticated blend of tactical foresight and the raw talent of her team, crafting bespoke solutions that address the multifaceted challenges of national security.
In this episode, Major Pierce offers a rare glimpse behind the scenes of military cybersecurity, discussing the trials and triumphs that shape the sector's landscape. As she narrates her professional trajectory and operational insights, listeners are invited to discover the synergy between individual expertise and collective operational success in the dynamic arena of cyber operations. Tune in for an episode rich in anecdotes and wisdom from the forefront of cybersecurity innovation.
*Connect with Major Pierce: https://www.linkedin.com/in/christine-pierce-mps-cissp-3a128080/
-----
Embark on an exploratory journey through the domain of cybersecurity with our host, Scott Poley, in this enlightening podcast episode. Our distinguished guest, Major Pierce, currently serving as the Director of Cyber Operations for the PA National Guard, unfolds her unique narrative within the digital defense realm – from her initial draw to the cyber sector to the pivotal decisions guiding her to a leading role.
Major Pierce's tenure at the PA National Guard is far from typical. In her pivotal position, she directs a nuanced strategy of cyber operations, tackling the complexities of digital warfare within the U.S. Army. The operations she oversees are characterized by a sophisticated blend of tactical foresight and the raw talent of her team, crafting bespoke solutions that address the multifaceted challenges of national security.
In this episode, Major Pierce offers a rare glimpse behind the scenes of military cybersecurity, discussing the trials and triumphs that shape the sector's landscape. As she narrates her professional trajectory and operational insights, listeners are invited to discover the synergy between individual expertise and collective operational success in the dynamic arena of cyber operations. Tune in for an episode rich in anecdotes and wisdom from the forefront of cybersecurity innovation.
*Connect with Major Pierce: https://www.linkedin.com/in/christine-pierce-mps-cissp-3a128080/
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep61: Top 5 Threat Hunting Headlines - 27 Nov 2023
28 november 2023 |
49 min
Top 5 Threat Hunting Headlines - 27 Nov 2023
Secure List: HrServ – Previously Unknown Web Shell Used in APT Attack
Group-IB: Hunting Rituals #2.2: Threat Hunting for Abuse of Windows Services
Red Canary: Threat Hunting for PsExec, Open-Source Clones, and Other Lateral Movement Tools
Talos: A Deep Dive into Phobos Ransomware, Recently Deployed by 8Base Group
Cyware: Lazarus Group Exploit MagicLine2NX Flaw to Launch Supply Chain Attacks
https://cyware.com/news/lazarus-group-exploit-magicline4nx-flaw-to-launch-supply-chain-attacks-11b98153
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep60: [BONUS EPISODE] Tony Pietrocola’s Strategic Insights on AI-Driven Cybersecurity Solutions
21 november 2023 |
34 min
Join our host, Scott Poley, in this insightful bonus episode where he sits down with Tony Pietrocola, the driving force behind AgileBlue. Tony shares his personal expedition into the realm of cybersecurity, detailing the journey that shaped his expertise. He also unfolds his forward-thinking perspective on the future of cybersecurity in our rapidly evolving digital age.
AgileBlue offers a synergy of AI-driven cybersecurity fortified with the reliability of human expertise. Their sophisticated SOC|SOAR platform stands guard over your digital and cloud infrastructure. It provides comprehensive 24/7 oversight, adept at swiftly pinpointing and mitigating cyber threats, ensuring peace of mind through vigilant monitoring, detection, and responsive action.
*Learn more about AgileBlue – https://www.linkedin.com/in/tonypietrocola/
*Connect with Tony - https://agileblue.com/
-----
AgileBlue offers a synergy of AI-driven cybersecurity fortified with the reliability of human expertise. Their sophisticated SOC|SOAR platform stands guard over your digital and cloud infrastructure. It provides comprehensive 24/7 oversight, adept at swiftly pinpointing and mitigating cyber threats, ensuring peace of mind through vigilant monitoring, detection, and responsive action.
*Learn more about AgileBlue – https://www.linkedin.com/in/tonypietrocola/
*Connect with Tony - https://agileblue.com/
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep59: [BONUS EPISODE] Samuel Paredes: The Art of Web Application Security
17 november 2023 |
33 min
Bonus Episode - November 17, 2023
Dive into the world of cybersecurity with Sam Paredes on our latest podcast episode. As the Founder and Security Researcher at BugNode, Samuel shares his personal odyssey within the tech industry, from a burgeoning passion to the helm of a trailblazing security enterprise.
BugNode isn't just another web application testing service. Under Samuel's leadership, the company champions a meticulous, hands-on approach to safeguarding applications. By tackling security challenges with human ingenuity, BugNode's expert team crafts a tailored defense strategy for each client, ensuring robust protection that empowers businesses to thrive without the overhead of digital threats.
Throughout the episode, Samuel provides an insider's look at the hurdles faced by security professionals and how BugNode strategically overcomes them. Tune in to gain valuable insights into the intersection of personal growth and professional excellence in the fast-evolving landscape of application security.
*Learn more about BugNode - https://www.bugnode.io/
*Connect with Sam - https://www.linkedin.com/in/sam-par/
-----
Dive into the world of cybersecurity with Sam Paredes on our latest podcast episode. As the Founder and Security Researcher at BugNode, Samuel shares his personal odyssey within the tech industry, from a burgeoning passion to the helm of a trailblazing security enterprise.
BugNode isn't just another web application testing service. Under Samuel's leadership, the company champions a meticulous, hands-on approach to safeguarding applications. By tackling security challenges with human ingenuity, BugNode's expert team crafts a tailored defense strategy for each client, ensuring robust protection that empowers businesses to thrive without the overhead of digital threats.
Throughout the episode, Samuel provides an insider's look at the hurdles faced by security professionals and how BugNode strategically overcomes them. Tune in to gain valuable insights into the intersection of personal growth and professional excellence in the fast-evolving landscape of application security.
*Learn more about BugNode - https://www.bugnode.io/
*Connect with Sam - https://www.linkedin.com/in/sam-par/
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep58: Top 5 Threat Hunting Headlines - 13 Nov 2023
14 november 2023 |
44 min
Top 5 Threat Hunting Headlines - 13 Nov 2023
Kaspersky Threat Intelligence - Modern Asian APT Groups
Unit 42 - Agonizing Serpens (Aka Agrius) Targeting the Israeli Higher Education and Tech Sectors
Huntress - Bitter Pill: Third-Party Pharmaceutical Vendor Linked to Pharmacy and Health Clinic Cyberattack
Mandiant - Sandworm Disrupts Power in Ukraine Using a Novel Attack Against Operational Technology
Security Affairs - North Korea-Linked APT Sapphire Sleet Targets IT Job Seekers with Bogus Skills Assessment Portals
https://securityaffairs.com/154082/apt/sapphire-sleet-apt-targets-it-job-seekers.html?web_view=true
-----
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep57: [BONUS EPISODE] Pat Shannon’s Innovative Approach to Cyber Security Awareness & Training
9 november 2023 |
37 min
Bonus Episode - November 9, 2023
Join us for a special bonus episode where our host, Scott Poley, engages in an enlightening conversation with the master of cyber tips, Pat Shannon, recorded live at the 2023 Information Security Summit.
In this engaging episode, Pat shares his unconventional career journey leading to his current role as President & CEO of GreatestTrainingEver.com and delves into the concept behind his renowned unconventional cyber training videos.
Pat takes a unique approach in his training program, focusing on end users who may not have invested in cybersecurity education but interact with technology daily. He guides them in understanding how to protect themselves beyond traditional cyber awareness videos. His content is relatable, catchy, and memorable, designed to empower individuals with the knowledge needed to guard against potential threats and uncover hidden dangers they might not be aware of.
*Connect with Pat: https://www.linkedin.com/in/pat-shannon-844277/
*Learn more about GreatestTrainingEver.com: https://gtever.com/
-----
Join us for a special bonus episode where our host, Scott Poley, engages in an enlightening conversation with the master of cyber tips, Pat Shannon, recorded live at the 2023 Information Security Summit.
In this engaging episode, Pat shares his unconventional career journey leading to his current role as President & CEO of GreatestTrainingEver.com and delves into the concept behind his renowned unconventional cyber training videos.
Pat takes a unique approach in his training program, focusing on end users who may not have invested in cybersecurity education but interact with technology daily. He guides them in understanding how to protect themselves beyond traditional cyber awareness videos. His content is relatable, catchy, and memorable, designed to empower individuals with the knowledge needed to guard against potential threats and uncover hidden dangers they might not be aware of.
*Connect with Pat: https://www.linkedin.com/in/pat-shannon-844277/
*Learn more about GreatestTrainingEver.com: https://gtever.com/
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep56: [BONUS EPISODE] Bridging the Gap: Neil Singh's Vision for Cyber Talent
8 november 2023 |
38 min
Bonus Episode - November 8, 2023
In this special bonus episode, our host, Scott Poley, engages in an enlightening conversation with the passionate Neil Singh, recorded live at the 2023 Information Security Summit.
Join us as Neil discusses how his diverse background, including 17 years of experience in IT, played a pivotal role in his career shift five years ago toward talent development, with a strong emphasis on cybersecurity. Explore how he has innovatively applied this knowledge to the field of cybersecurity talent development, setting himself apart from industry conventions and making a significant impact on numerous companies and individuals entering the field.
Neil will outline how his dedication to community support plays a pivotal role in driving economic growth and ensuring the region has access to a skilled and diverse workforce. Listen as he shares his enthusiasm for educating companies, helping them establish achievable benchmarks, and empowering practitioners with the foundational skills needed to achieve their career aspirations.
*Connect with Neil – https://www.linkedin.com/in/neilsingh01/
*Get in Touch with Neil - https://neilsingh.co/
*Neil’s Median - https://medium.com/@neil_singh01
-----
In this special bonus episode, our host, Scott Poley, engages in an enlightening conversation with the passionate Neil Singh, recorded live at the 2023 Information Security Summit.
Join us as Neil discusses how his diverse background, including 17 years of experience in IT, played a pivotal role in his career shift five years ago toward talent development, with a strong emphasis on cybersecurity. Explore how he has innovatively applied this knowledge to the field of cybersecurity talent development, setting himself apart from industry conventions and making a significant impact on numerous companies and individuals entering the field.
Neil will outline how his dedication to community support plays a pivotal role in driving economic growth and ensuring the region has access to a skilled and diverse workforce. Listen as he shares his enthusiasm for educating companies, helping them establish achievable benchmarks, and empowering practitioners with the foundational skills needed to achieve their career aspirations.
*Connect with Neil – https://www.linkedin.com/in/neilsingh01/
*Get in Touch with Neil - https://neilsingh.co/
*Neil’s Median - https://medium.com/@neil_singh01
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep56: [BONUS EPISODE] - Exploring The Cisco Technical Training Institute with Hamid Abdollahian
7 november 2023 |
37 min
Bonus Episode - November 7, 2023
In this bonus episode, our host, Scott Poley, engages in an enlightening conversation with the highly knowledgeable Hamid Abdollahian, recorded live at the 2023 Information Security Summit.
Tune in as Hamid dives into the Cisco Technical Training Institute at Cuyahoga Community College. He sheds light on the wide array of training programs and certifications they offer, the tangible benefits of these training courses, and provides invaluable insights on how to kickstart your journey in this domain.
*Connect with Hamid – https://www.linkedin.com/in/hamid-abdollahian-a259a31/
*Explore Training Opportunities at Cuyahoga Community College – https://www.tri-c.edu/workforce/cisco/index.html
-----
In this bonus episode, our host, Scott Poley, engages in an enlightening conversation with the highly knowledgeable Hamid Abdollahian, recorded live at the 2023 Information Security Summit.
Tune in as Hamid dives into the Cisco Technical Training Institute at Cuyahoga Community College. He sheds light on the wide array of training programs and certifications they offer, the tangible benefits of these training courses, and provides invaluable insights on how to kickstart your journey in this domain.
*Connect with Hamid – https://www.linkedin.com/in/hamid-abdollahian-a259a31/
*Explore Training Opportunities at Cuyahoga Community College – https://www.tri-c.edu/workforce/cisco/index.html
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep55: [BONUS EPISODE] What Harm Could a Computer Do? Featuring Violet Sullivan
3 november 2023 |
42 min
Bonus Episode - November 3, 2023
In this bonus episode, our host Scott Poley engages in an intriguing conversation with the exceptionally intelligent and successful Violet Sullivan, CIPP US, recorded live at the Information Security Summit.
Tune in as Violet discusses her career journey and how she rose to prominence in the field of Cyber Law and education. Dive deep into the intricate world of general Cyber Law and Privacy, and explore the complexities of Cyber Insurance, its offerings, and why some may have reservations about it. Plus, gain valuable insights into staying current in the academic realm. Prepare to expand your knowledge with this enlightening episode.
*Connect with Violet - https://www.linkedin.com/in/txcyberlawyer/
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep54: [BONUS EPISODE] - Guest Spotlight: Nathan Wenzler from Tenable
2 november 2023 |
39 min
Bonus Episode - November 2, 2023
Join host Scott Poley in this exclusive bonus episode as he engages in an enlightening conversation with Nathan Wenzler, Chief Security Strategist at Tenable, recorded live during the Information Security Summit.
Nathan's diverse career journey, spanning from government to CISO roles and management consulting, has provided him with a comprehensive understanding of the cybersecurity landscape. He shares insights into common industry challenges and best practices, while also explaining the mission of Tenable and how their innovative solutions benefit organizations.
Tune in for a deep dive into the evolving world of cybersecurity, practical guidance, and the transformative impact of Tenable in securing a digital future, all through the lens of Nathan's extensive industry knowledge.
*Connect with Nathan - https://www.linkedin.com/in/nathanwenzler/
*Explore Tenable - http://www.tenable.com/
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep54: [BONUS EPISODE] - Guest Spotlight: Brian Gittinger from Halcyon
1 november 2023 |
35 min
Bonus Episode - November 1, 2023
In this bonus episode, our host, Scott Poley, engages in a riveting conversation with the multi-talented Brian Gittinger during the Information Security Summit.
Tune in as Brian dives into his journey, tracing his steps from the world of a Security Engineer to the intriguing realms of 'The Dark Side,' otherwise known as Sales. Explore how he leverages his unique background to identify the perfect matches for their cutting-edge product.
Discover the remarkable features of Halcyon's Anti-Ransomware and Cyber Resilience Platform, setting new standards in safeguarding your digital world. Join us for this exclusive discussion as we unravel the secrets behind Brian's transformative career and the innovations brought to you by Halcyon.
*Connect with Brian – https://www.linkedin.com/in/brian-gittinger-86520a6/
*Explore Halcyon – https://www.halcyon.ai/
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep53: Top 5 Threat Hunting Headlines - 30 Oct 2023
31 oktober 2023 |
64 min
Top 5 Threat Hunting Headlines - 30 Oct 2023
The DFIR Report – NetSupport Intrusion Results In Domain Compromise
Sentinel One – Power for the People | Cyber Threats in the Energy Sector and How To Defend Against Them
The Register – LockBit Alleges it Boarded Boeing, Stole ‘Sensitive Data’
Elastic Security Labs – GHOSTPULSE Haunts Victims Using Defense Evasion Bag O’ Tricks
Security Week – Boeing Investigating Ransomware Attack Claims
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep52: [LIVE] Out of the Woods: Episode 12
30 oktober 2023 |
92 min
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
------------
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
------------
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep51: Top 5 Threat Hunting Headlines - 17 Oct 2023
18 oktober 2023 |
62 min
Can't get enough of threat hunting? Join these upcoming events!
⛵️ Mastering the Hunt: Translating Intelligence to Action
With Cyborg Security and Recorded Future
November 8, 2023
🎥 Out of the Woods: The Threat Hunting Podcast - LIVE Event
October 26, 2023 | 7:00 - 8:30 PM ET
☕️ Pumpkin Spice Logs: Sweet & Swift Threat Hunting
On-Demand 30-Minute Webinars
- Hunting for APT: https://info.cyborgsecurity.com/en-us/psl-part-1
- Hunting for Toolkits: https://info.cyborgsecurity.com/en-us/psl-part-2
- Hunting for Malware: https://info.cyborgsecurity.com/en-us/psl-part-3
🛡️ Information Security Summit
October 23 - 27, 2023
💻 Cyber Solutions Fest
October 25 - 27, 2023
-----
Top 5 Threat Hunting Headlines - 17 Oct 2023
Top 5 Threat Hunting Headlines - 17 Oct 2023
ToddyCat: Keep Calm and Check Logs
CERT-UA
Hackers Hit Aid Groups Responding to Israel and Gaza Crisis
Disclosing the BLOODALCHEMY Backdoor
Warning: Unpatched Cisco Zero-Day Vulnerability Actively Targeted in the Wild
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep50: Top 5 Threat Hunting Headlines - 02 Oct 2023
3 oktober 2023 |
62 min
Top 5 Threat Hunting Headlines - 02 Oct 2023
The Thin Line: Educational Tools vs. Malicious Threats – A Focus on The-Murk-Stealer
Budworm: APT Group Uses Updated Custom Tool in Attacks on Government and Telecoms Org
GitHub – Nick-Vinesmoke/The-Murk-stealer
SecureList: A cryptor, a stealer and a banking trojan
Meet LostTrust ransomware — A likely rebrand of the MetaEncryptor gang
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep48: Top 5 Threat Hunting Headlines - 25 Sept 2023
26 september 2023 |
60 min
Top 5 Threat Hunting Headlines - 25 Sept 2023
Unit 42 Researchers Discover Multiple Espionage Operations Targeting Southeast Asian Government
- https://unit42.paloaltonetworks.com/analysis-of-three-attack-clusters-in-se-asia/
- https://unit42.paloaltonetworks.com/alloy-taurus-targets-se-asian-government/
- https://unit42.paloaltonetworks.com/rare-possible-gelsemium-attack-targets-se-asia/
The DFIR Report: From ScreenConnect to Hive Ransomware in 61 hours
BEHIND THE SCENES OF BBTOK: ANALYZING A BANKER’S SERVER SIDE COMPONENTS
Stealth Falcon preying over Middle Eastern skies with Deadglyph
OilRig’s Outer Space and Juicy Mix: Same ol’ rig, new drill pipes
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep49: [LIVE] Out of the Woods: Episode 11
26 september 2023 |
92 min
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
------------
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
------------
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep47: Top 5 Threat Hunting Headlines - 11 Sept 2023
12 september 2023 |
44 min
**Out of the Woods: LIVE & Interactive Episode
September 21 @ 7:00 - 8:30 PM ET
Save your seat👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e11
September 21 @ 7:00 - 8:30 PM ET
Save your seat👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e11
Top 5 Threat Hunting Headlines - 11 Sept 2023
Microsoft Teams phishing attack pushes DarkGate malware
GitHub - boringtools/git-alerts
Technical Analysis of HijackLoader
FBI Identifies Lazarus Group Cyber Actors as Responsible for Theft of $41 Million from Stake.com
- https://www.fbi.gov/news/press-releases/fbi-identifies-lazarus-group-cyber-actors-as-responsible-for-theft-of-41-million-from-stakecom
- https://attack.mitre.org/groups/G0082/
UK Government Backs Down on Anti-Encryption Stance
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep46: Top 5 Threat Hunting Headlines - 28 Aug 2023
29 augusti 2023 |
59 min
**Out of the Woods: LIVE & Interactive Episode
September 21 @ 7:00 - 8:30 PM ET
Save your seat👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e11
September 21 @ 7:00 - 8:30 PM ET
Save your seat👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e11
Top 5 Threat Hunting Headlines - 28 Aug 2023
THE DFIR REPORT: Real Intrusions by Real Attackers, The Truth Behind the Intrusion
Weak Password Report 2023
TUNNEL WARFARE: EXPOSING DNS TUNNELING CAMPAIGNS USING GENERATIVE MODELS – COINLOADER CASE STUDY
Public Sector Cybersecurity | Why State & Local Governments Are at Risk
LEAKED LOCKBIT 3.0 RANSOMWARE BUILDER USED BY MULTIPLE THREAT ACTORS
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep45: Top 5 Threat Hunting Headlines - 21 Aug 2023
22 augusti 2023 |
47 min
Top 5 Threat Hunting Headlines - 21 Aug 2023
Cuba Ransomware Deploys New Tools: Targets Critical Infrastructure Sector in the U.S. and IT Integrator in Latin America
Hunting Rituals #1: Threat hunting for DLL side-loading
Suspected N. Korean Hackers Target S. Korea-US Drills
Ransomware Diaries: Volume 3 – LockBit’s Secrets
Add 'writing malware' to the list of things generative AI is not very good at doing
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep44: Top 5 Threat Hunting Headlines - 14 Aug 2023
15 augusti 2023 |
38 min
Top 5 Threat Hunting Headlines - 14 Aug 2023
Common TTPs of attacks against industrial organizations. Implants for uploading data
LOLEKHosted admin arrested for aiding Netwalker ransomware gang
Common TTPs of attacks against industrial organizations. Implants for gathering data
Cyber Security Managed Services Market Size to Surpass USD 32.68 Billion by 2030, exhibiting a CAGR of 11%
GitHub- onhexgroup/Conferences
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep43: Top 5 Threat Hunting Headlines - 31 July 2023
2 augusti 2023 |
53 min
Come see us at Black Hat USA 2023 @ Booth #2817 as we unveil the future of threat hunting! With a myriad of unique activities, insightful discussions, and special offers, Cyborg Security has something in store for everyone 👇
https://info.cyborgsecurity.com/blackhat2023events?utm_campaign=3rd%20Party%20Event%20|%20Black%20Hat%20USA%202023&utm_content=258414485&utm_medium=social&utm_source=linkedin&hss_channel=lcp-37377305
-----
https://info.cyborgsecurity.com/blackhat2023events?utm_campaign=3rd%20Party%20Event%20|%20Black%20Hat%20USA%202023&utm_content=258414485&utm_medium=social&utm_source=linkedin&hss_channel=lcp-37377305
-----
Top 5 Threat Hunting Headlines - 31 July 2023
Israel's largest oil refinery website offline after DDoS attack
Linux version of Abyss Locker ransomware targets VMware ESXi servers
Dark Power Ransomware Abusing Vulnerable Dynamic-Link Libraries in Resolved API Flow
The Nightmare Of Destructive Malware | From Wiper To SwiftSlicer
BlueBravo Adapts to Target Diplomatic Entities with GraphicalProton Malware
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep42: Top 5 Threat Hunting Headlines - 24 July 2023
25 juli 2023 |
49 min
Come see us at Black Hat USA 2023 @ Booth #2817 as we unveil the future of threat hunting! With a myriad of unique activities, insightful discussions, and special offers, Cyborg Security has something in store for everyone.
-----
-----
Top 5 Threat Hunting Headlines - 24 July 3023
Sachkov's Revenge: Jailed On Treason Charges, A Russian Cybersecurity Exec Goes On The Offensive
Deconstructing PowerShell Obfuscation in Malspam Campaigns
Clop gang to earn over $75 million from MOVEit extortion attacks
First Known Targeted OSS Supply Chain Attacks Against the Banking Sector
- https://checkmarx.com/blog/first-known-targeted-oss-supply-chain-attacks-against-the-banking-sector/
Attackers intensify DDoS attacks with new tactics
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep41: [LIVE] Out of the Woods: Episode 10
25 juli 2023 |
91 min
Come see us at Black Hat USA 2023 @ Booth #2817 as we unveil the future of threat hunting! With a myriad of unique activities, insightful discussions, and special offers, Cyborg Security has something in store for everyone.
------------
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
------------
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
------------
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
------------
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep40: Top 5 Threat Hunting Headlines - 10 July 2023
12 juli 2023 |
53 min
**Out of the Woods LIVE Episode
July 20th @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e10
-----
July 20th @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e10
-----
Top 5 Threat Hunting Headlines - 10 July 3023
A man from Tracy, California, has been charged with a computer attack on the Discovery Bay water treatment facility
June's Cyber Battleground: Decoding Ransomware and APT Attacks in Europe
Killnet as a private military hacking company? For now, it's probably just a dream
Neo_Net | The Kingpin of Spanish eCrime
Vishing Goes High-Tech: New 'Letscall' Malware Employs Voice Traffic Routing
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep39: Top 5 Threat Hunting Headlines - 03 July 2023
3 juli 2023 |
43 min
**Out of the Woods LIVE Episode
July 20th @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e10
-----
July 20th @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e10
-----
Top 5 Threat Hunting Headlines - 03 July 3023
Torrent of image-based phishing emails are harder to detect and more convincing
Cyber Security Market to Reach $500.70 Billion by 2030: Grand View Research, Inc.
DNS TXT Records Can Be Used by Hackers to Execute Malware
The DPRK strikes using a new variant of RUSTBUCKET
Malvertising Used as Entry Vector for BlackCat, Actors Also Leverage SpyBoy Terminator
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep38: Top 5 Threat Hunting Headlines - 26 June 2023
27 juni 2023 |
48 min
**Threat Hunting: Shifting Gears in Query Tuning
June 28th @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/shifting-gears
**Out of the Woods LIVE Episode
July 20th @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e10
-----
June 28th @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/shifting-gears
**Out of the Woods LIVE Episode
July 20th @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e10
-----
Top 5 Threat Hunting Headlines - 26 June 2023
BEYOND THE HORIZON: TRAVELING THE WORLD ON CAMARO DRAGON’S USB FLASH DRIVES
Microsoft Teams Flaw Sends Malware to Employees’ Inboxes
- https://www.hackread.com/microsoft-teams-flaw-malware-employees-inbox/
- https://labs.jumpsec.com/advisory-idor-in-microsoft-teams-allows-for-external-tenants-to-introduce-malware/
PindOS: New JavaScript Dropper Delivering Bumblebee and IcedID
Technical Analysis of RDPCredentialStealer: Uncovering Malware Targeting RDP Credentials with API Hooking
US Military Personnel Targeted by Unsolicited Smartwatches Linked to Data Breaches
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep37: Top 5 Threat Hunting Headlines - 20 June 2023
20 juni 2023 |
38 min
**Threat Hunting: Shifting Gears in Query Tuning
June 28th @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/shifting-gears
**Out of the Woods LIVE Episode
July 20th @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e10
-----
June 28th @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/shifting-gears
**Out of the Woods LIVE Episode
July 20th @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e10
-----
Top 5 Threat Hunting Headlines - 20 June 2023
Skuld: The Infostealer that Speaks Golang
Fulfilling Expected SEC Requirements for Cybersecurity Expertise at Board Level
Mystic Stealer – Evolving “stealth” Malware
2 Cybersecurity Stocks You Can Buy and Hold for the Next Decade
Over 100,000 Stolen ChatGPT Account Credentials Sold on Dark Web Marketplaces
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep36: Top 5 Threat Hunting Headlines - 12 June 2023
13 juni 2023 |
42 min
**Threat Hunting: Shifting Gears in Query Tuning
June 28th @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/shifting-gears
-----
June 28th @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/shifting-gears
-----
Top 5 Threat Hunting Headlines - 05 June 2023
The DFIR Report - A Truly Graceful Wipe Out
https://thedfirreport.com/2023/06/12/a-truly-graceful-wipe-out/
Data Breach Impacts MN Department of Education
https://www.kare11.com/article/news/local/data-breach-minnesota-department-of-education/89-5b573d53-05ef-4453-882b-167770287aa1
Cybercriminals Using Powerful BatCloak Engine to Make Malware Fully Endetectable
https://thehackernews.com/2023/06/cybercriminals-using-powerful-batcloak.html
Data Breach Impacts MN Department of Education
https://www.kare11.com/article/news/local/data-breach-minnesota-department-of-education/89-5b573d53-05ef-4453-882b-167770287aa1
Cybercriminals Using Powerful BatCloak Engine to Make Malware Fully Endetectable
https://thehackernews.com/2023/06/cybercriminals-using-powerful-batcloak.html
Barracuda Urges Customers to Replace Vulnerable Appliances Immediately
SaaS Ransomware Observed in the Wild for Sharepoint in Microsoft 365
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep35: Top 5 Threat Hunting Headlines - 05 June 2023
6 juni 2023 |
31 min
**Threat Hunting: Shifting Gears in Query Tuning
June 28th @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/shifting-gears
-----
June 28th @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/shifting-gears
-----
Top 5 Threat Hunting Headlines - 05 June 2023
Investigating BlackSuit Ransomware’s Similarities to Royal
https://www.trendmicro.com/en_us/research/23/e/investigating-blacksuit-ransomwares-similarities-to-royal.html
The DFIR Report -
The DFIR Report -
IcedID Macro Ends in Nokoyawa Ransomware
Carbon Black’s TrueBot Detection
Inside the Mind of a Cyber Attacker | Tactics, Techniques, and Procedures (TTPs) Every Security Practitioner Should Know
New MOVEit Transfer zero-day mass-exploited in data theft attacks
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep34: [LIVE] Out of the Woods: Episode 8
31 maj 2023 |
95 min
**Threat Hunting Workshop: Hunting for Exfiltration
May 31 @ 12:00 – 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-8
------------
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
------------
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
May 31 @ 12:00 – 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-8
------------
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
------------
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep33: BONUS EPISODE - Hybrid Hunting
11 maj 2023 |
60 min
In the ever-evolving cybersecurity battlefield, organizations need to balance internal security tasks with outside expertise. That’s where hybrid hunting comes in – the powerful model that lets you divide security tasks between your internal team and an MSSP to create an unbeatable threat detection and response force.
In this bonus episode, our expert speakers, Scott Poley (Senior Threat Hunter, Cyborg Security) and Justin Heard (Threat Intelligence Manager, Nuspire) dive into a comprehensive overview of the latest trends in hybrid hunting and practical guidance on program development and management.
Watch the full video recording 👇
https://www.cyborgsecurity.com/our-webinars/hybrid-hunting-threat-hunting-in-the-managed-security-battlespace/
-----
In this bonus episode, our expert speakers, Scott Poley (Senior Threat Hunter, Cyborg Security) and Justin Heard (Threat Intelligence Manager, Nuspire) dive into a comprehensive overview of the latest trends in hybrid hunting and practical guidance on program development and management.
Watch the full video recording 👇
https://www.cyborgsecurity.com/our-webinars/hybrid-hunting-threat-hunting-in-the-managed-security-battlespace/
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep32: Top 5 Threat Hunting Headlines - 08 May 2023
9 maj 2023 |
40 min
**Top Cover - Threat Hunting Management Workshop: Reporting & Communication
May 24 @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/top-cover-3
**Threat Hunting Workshop: Hunting for Exfiltration
May 31 @ 12:00 – 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-8
**[LIVE] Out of the Woods: The Threat Hunting Podcast
Submit Question -> [email protected]
May 18 @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e9
-----
May 24 @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/top-cover-3
**Threat Hunting Workshop: Hunting for Exfiltration
May 31 @ 12:00 – 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-8
**[LIVE] Out of the Woods: The Threat Hunting Podcast
Submit Question -> [email protected]
May 18 @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e9
-----
Top 5 Threat Hunting Headlines - 08 May 2023
Deconstructing Amadey’s Latest Multi-Stage Attack and Malware Distribution
San Bernardino County Sheriff’s Department paid a $1.1M ransom
Kimsuky Evolves Reconnaissance Capabilities in New Global Campaign
https://www.sentinelone.com/labs/kimsuky-evolves-reconnaissance-capabilities-in-new-global-campaign/
SolarWinds hack: Did DOJ know 6 months earlier?
ALPHV gang claims ransomware attack on Constellation Software
https://www.bleepingcomputer.com/news/security/alphv-gang-claims-ransomware-attack-on-constellation-software/
-----
Show Notes: https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2005-08-2023.pdf
-----
-----
Show Notes: https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2005-08-2023.pdf
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep31: Top 5 Threat Hunting Headlines - 01 May 2023
2 maj 2023 |
38 min
**Top Cover - Threat Hunting Management Workshop: Reporting & Communication
May 24 @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/top-cover-3
**Threat Hunting Workshop: Hunting for Exfiltration
May 31 @ 12:00 – 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-8
**[LIVE] Out of the Woods: The Threat Hunting Podcast
May 18 @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e9
-----
May 24 @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/top-cover-3
**Threat Hunting Workshop: Hunting for Exfiltration
May 31 @ 12:00 – 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-8
**[LIVE] Out of the Woods: The Threat Hunting Podcast
May 18 @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e9
-----
Top 5 Threat Hunting Headlines - 01 May 2023
RTM Locker Ransomware as a Service (RaaS) Now Suits Up for Linux Architecture
ViperSoftX Updates Encryption, Steals Data
Unpacking BellaCiao: A Closer Look at Iran’s Latest Malware
Elastic Security Labs Discovers the LOBSHOT Malware
APT28 Targets Ukrainian Government Entities with Fake "Windows Update" Emails
https://thehackernews.com/2023/05/apt28-targets-ukrainian-government.html
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep30: Top 5 Threat Hunting Headlines - 24 April 2023
25 april 2023 |
38 min
**Threat Hunting Workshop: Hunting for Impact
April 26 @ 12:00 – 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-7
**Top Cover - Threat Hunting Management Workshop: Reporting & Communication
May 24 @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/top-cover-3
-----
April 26 @ 12:00 – 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-7
**Top Cover - Threat Hunting Management Workshop: Reporting & Communication
May 24 @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/top-cover-3
-----
Show Notes:
Top 5 Threat Hunting Headlines - 24 April 2023
X_Trader Supply Chain Attack Affects Critical Infrastructure Organizations in U.S. and Europe
EvilExtractor – All-in-One Stealer
Living Off the Orchard: macOS Binaries (LOOBins)
20 Best Threat Hunting Tools – 2023
Lockbit Ransomware Aims To Target macOS Systems – But May Not Be As Successful
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep29: [LIVE] Out of the Woods: Episode 8
25 april 2023 |
92 min
**Threat Hunting Workshop: Hunting for Impact
April 26 @ 12:00 – 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-7
**Top Cover - Threat Hunting Management Workshop: Reporting & Communication
May 24 @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/top-cover-3
------------
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
------------
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
April 26 @ 12:00 – 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-7
**Top Cover - Threat Hunting Management Workshop: Reporting & Communication
May 24 @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/top-cover-3
------------
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
------------
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep28: Top 5 Threat Hunting Headlines - 10 April 2023
13 april 2023 |
38 min
**Threat Hunting Workshop: Hunting for Impact
April 26 @ 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-7
**Out of the Woods LIVE Podcast Recording - Episode 8
April 20 @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e8
-----
April 26 @ 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-7
**Out of the Woods LIVE Podcast Recording - Episode 8
April 20 @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e8
-----
Top 5 Threat Hunting Headlines - 10 April 2023
CISA Adds Five Known Exploited Vulnerabilities to Catalog
https://www.cisa.gov/news-events/alerts/2023/04/07/cisa-adds-five-known-exploited-vulnerabilities-catalog
Hackers Flood NPM with Bogus Packages Causing a DoS Attack
https://thehackernews.com/2023/04/hackers-flood-npm-with-bogus-packages.html
MERCURY and DEV-1084: Destructive Attack on Hybrid Environment
https://www.microsoft.com/en-us/security/blog/2023/04/07/mercury-and-dev-1084-destructive-attack-on-hybrid-environment/
Taiwanese PC Company MSI Falls Victim to Ransomware Attack
https://thehackernews.com/2023/04/taiwanese-pc-company-msi-falls-victim.html
Hackers Hide Backdoors Behind Malicious Self-Extracting Archives
https://cyware.com/news/hackers-hide-backdoors-behind-malicious-self-extracting-archives-345b1e28
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep27: Top 5 Threat Hunting Headlines - 27 March 2023
4 april 2023 |
32 min
**Top Cover - Threat Hunting Management Workshop: From KPIs to Metrics
April 12 @ 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/top-cover-2
**Threat Hunting Workshop: Hunting for Impact
April 26 @ 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-7
**Out of the Woods LIVE Podcast Recording - Episode 8
April 20 @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e8
-----
April 12 @ 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/top-cover-2
**Threat Hunting Workshop: Hunting for Impact
April 26 @ 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-7
**Out of the Woods LIVE Podcast Recording - Episode 8
April 20 @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e8
-----
Top 5 Threat Hunting Headlines - 03 April 2023
Malicious ISO File Leads Domain Wide Ransomware
https://thedfirreport.com/2023/04/03/malicious-iso-file-leads-to-domain-wide-ransomware/
Moobot Strikes Again - Targeting Cacti And RealTek Vulnerabilities
https://www.fortinet.com/blog/threat-research/moobot-strikes-again-targeting-cacti-and-realtek-vulnerabilities
Exploitation is a Dish Best Served Cold
https://www.proofpoint.com/us/blog/threat-insight/exploitation-dish-best-served-cold-winter-vivern-uses-known-zimbra-vulnerability
Large Alabama School System Hit by Ransomware Attack
https://www.wvtm13.com/article/large-alabama-school-system-hit-by-ransomware-attack/43486343#
US Space Force Requests $700M for Cybersecurity Blast Off
https://www.darkreading.com/cloud/us-space-force-wants-700m-cybersecurity
-----
Show Notes:
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2004-03-2023.pdf
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
https://thedfirreport.com/2023/04/03/malicious-iso-file-leads-to-domain-wide-ransomware/
Moobot Strikes Again - Targeting Cacti And RealTek Vulnerabilities
https://www.fortinet.com/blog/threat-research/moobot-strikes-again-targeting-cacti-and-realtek-vulnerabilities
Exploitation is a Dish Best Served Cold
https://www.proofpoint.com/us/blog/threat-insight/exploitation-dish-best-served-cold-winter-vivern-uses-known-zimbra-vulnerability
Large Alabama School System Hit by Ransomware Attack
https://www.wvtm13.com/article/large-alabama-school-system-hit-by-ransomware-attack/43486343#
US Space Force Requests $700M for Cybersecurity Blast Off
https://www.darkreading.com/cloud/us-space-force-wants-700m-cybersecurity
-----
Show Notes:
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2004-03-2023.pdf
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep26: Top 5 Threat Hunting Headlines - 27 March 2023
28 mars 2023 |
40 min
**Hybrid Hunting - Threat Hunting in the Managed Security Space
March 29 @ 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/hybrid-hunting
**Top Cover - Threat Hunting Management Workshop: From KPIs to Metrics
April 12 @ 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/top-cover-2
-----
March 29 @ 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/hybrid-hunting
**Top Cover - Threat Hunting Management Workshop: From KPIs to Metrics
April 12 @ 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/top-cover-2
-----
Top 5 Threat Hunting Headlines - 27 March 2023
Congress closer to a TikTok ban or forced sale after CEO's concerning testimony, Gallagher says
https://abcnews.go.com/Politics/tiktok-ceos-testimony-increased-possibility-congress-passes-ban/story?id=98127912
Venomous vacancies: Job seekers across MEA hit by sting in scammers’ tail
https://www.group-ib.com/blog/venomous-vacancies/
OpenAI Reveals Redis Bug Behind ChatGPT User Data Exposure Incident
https://thehackernews.com/2023/03/openai-reveals-redis-bug-behind-chatgpt.html
BlackMamba ChatGPT Polymorphic Malware | A Case of Scareware or a Wake-up Call for Cyber Security?
https://www.sentinelone.com/blog/blackmamba-chatgpt-polymorphic-malware-a-case-of-scareware-or-a-wake-up-call-for-cyber-security/
CISA Released a New Tool to Detect Hacking Activity in Microsoft Cloud Environments
https://cybersecuritynews.com/cisa-new-tool/
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
Venomous vacancies: Job seekers across MEA hit by sting in scammers’ tail
https://www.group-ib.com/blog/venomous-vacancies/
OpenAI Reveals Redis Bug Behind ChatGPT User Data Exposure Incident
https://thehackernews.com/2023/03/openai-reveals-redis-bug-behind-chatgpt.html
BlackMamba ChatGPT Polymorphic Malware | A Case of Scareware or a Wake-up Call for Cyber Security?
https://www.sentinelone.com/blog/blackmamba-chatgpt-polymorphic-malware-a-case-of-scareware-or-a-wake-up-call-for-cyber-security/
CISA Released a New Tool to Detect Hacking Activity in Microsoft Cloud Environments
https://cybersecuritynews.com/cisa-new-tool/
-----
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep24: [LIVE] Out of the Woods: Episode 7
21 mars 2023 |
82 min
**Threat Hunting Workshop: Hunting for Lateral Movement
March 22 @ 12:00 – 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-6
**Hybrid Hunting - Threat Hunting in the Managed Security Space
March 29 @ 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/hybrid-hunting
**Top Cover - Threat Hunting Management Workshop: From KPIs to Metrics
April 12 @ 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/top-cover-2
------------
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
------------
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
March 22 @ 12:00 – 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-6
**Hybrid Hunting - Threat Hunting in the Managed Security Space
March 29 @ 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/hybrid-hunting
**Top Cover - Threat Hunting Management Workshop: From KPIs to Metrics
April 12 @ 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/top-cover-2
------------
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
------------
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep25: Out of the Woods: Top 5 Threat Hunting Headlines
21 mars 2023 |
37 min
**Threat Hunting Workshop: Hunting for Lateral Movement
March 22 @ 12:00 – 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-6
**Hybrid Hunting - Threat Hunting in the Managed Security Space
March 29 @ 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/hybrid-hunting
**Top Cover - Threat Hunting Management Workshop: From KPIs to Metrics
April 12 @ 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/top-cover-2
March 22 @ 12:00 – 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-6
**Hybrid Hunting - Threat Hunting in the Managed Security Space
March 29 @ 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/hybrid-hunting
**Top Cover - Threat Hunting Management Workshop: From KPIs to Metrics
April 12 @ 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/top-cover-2
Top 5 Threat Hunting Headlines - 20 March 2023
Emotet Malware Now Distributed in Microsoft OneNote Files to Evade Defenses
https://www.bleepingcomputer.com/news/security/emotet-malware-now-distributed-in-microsoft-onenote-files-to-evade-defenses/
Uncovering HinataBot: A Deep Dive into a Go-Based Threat
https://www.bleepingcomputer.com/news/security/new-hinatabot-botnet-could-launch-massive-33-tbps-ddos-attacks/
Cancer Patient Sues Medical Provider After Ransomware Group Posts Her Photos Online
https://cyberscoop.com/patient-sues-leigh-valley-ransomware/
CatB Ransomware | File Locker Sharpens Its Claws to Steal Data with MSDTC Service DLL Hijacking
https://www.sentinelone.com/blog/decrypting-catb-ransomware-analyzing-their-latest-attack-methods/
NBA Is Warning Fans Of A Data Breach After A Third-Party Newsletter Service Hack
https://securityaffairs.com/143693/data-breach/nba-data-breach.html
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
https://cyberscoop.com/patient-sues-leigh-valley-ransomware/
CatB Ransomware | File Locker Sharpens Its Claws to Steal Data with MSDTC Service DLL Hijacking
https://www.sentinelone.com/blog/decrypting-catb-ransomware-analyzing-their-latest-attack-methods/
NBA Is Warning Fans Of A Data Breach After A Third-Party Newsletter Service Hack
https://securityaffairs.com/143693/data-breach/nba-data-breach.html
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep23: Out of the Woods: Top 5 Threat Hunting Headlines
7 mars 2023 |
43 min
*Threat Hunting Workshop: Hunting for Lateral Movement
March 22nd | 12:00 – 1:00 PM ET
Earn your “Lateral Movement – Level 1” certification 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-6
**Out of the Woods - LIVE & Interactive Podcast Recording
March 16th | 7:00 - 8:30 PM ET👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e7
**Hybrid Hunting: Threat Hunting in the Managed Security Battlespace
March 29th | 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/hybrid-hunting
March 22nd | 12:00 – 1:00 PM ET
Earn your “Lateral Movement – Level 1” certification 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-6
**Out of the Woods - LIVE & Interactive Podcast Recording
March 16th | 7:00 - 8:30 PM ET👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e7
**Hybrid Hunting: Threat Hunting in the Managed Security Battlespace
March 29th | 12:00 - 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/hybrid-hunting
Top 5 Threat Hunting Headlines - 06 March 2023
Weekly threat Roundup
https://blog.talosintelligence.com/threat-roundup-feb-24-march-3-2023/
DBatLoader and Remcos RAT Sweep Eastern Europe
https://www.sentinelone.com/blog/dbatloader-and-remcos-rat-sweep-eastern-europe/
The DFIR Report - 2022 year in Review
https://thedfirreport.com/2023/03/06/2022-year-in-review/
Ransomware - Centric Collection and Threat profiling
https://analyst1.com/ransomware-centric-collection-and-threat-profiling/
Watchguard's 2023 Cybersecurity Predictions
https://www.watchguard.com/wgrd-resource-center/cyber-security-predictions
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep22: Out of the Woods: Top 5 Threat Hunting Headlines
2 mars 2023 |
47 min
**Join our Threat Hunting Workshop: Hunting for Lateral Movement on March 22nd from 12:00 – 1:00 PM ET and earn your “Lateral Movement – Level 1” certification! Save your seat 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-6
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-6
11 Countries Take Part in Military Cyberwarfare Exercise
https://www.securityweek.com/11-countries-take-part-in-military-cyberwarfare-exercise/?web_view=true
IBM Security X-Force Threat Intelligence Index 2023
Dota 2 Under Attack: How a V8 Bug Was Exploited in the Game
How to Use AI in Cybersecurity and Avoid Being Trapped
TA569: SocGholish and Beyond
S1 Ep21: [LIVE] Out of the Woods: Episode 6
22 februari 2023 |
87 min
**Join our Threat Hunting Workshop: Hunting for Lateral Movement on March 22nd from 12:00 – 1:00 PM ET and earn your “Lateral Movement – Level 1” certification! Save your seat 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-6
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-6
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep21: Out of the Woods: Top 5 Threat Hunting Headlines
22 februari 2023 |
27 min
**Join our Threat Hunting Workshop: Hunting for Lateral Movement on March 22nd from 12:00 – 1:00 PM ET and earn your “Lateral Movement – Level 1” certification! Save your seat 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-6
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-6
Show Notes
APT SideCopy Targeting Indian Government Entities
WIP26 Espionage | Threat Actors Abuse Cloud Infrastructure in Targeted Telco Attacks
Fog of war: how the Ukraine conflict transformed the cyber threat landscape
HWP Malware Using the Steganography Technique: RedEyes (ScarCruft)
Stealc: a copycat of Vidar and Raccoon infostealers gaining in popularity – Part 1
S1 Ep20: Out of the Woods: Top 5 Threat Hunting Headlines
7 februari 2023 |
35 min
**Join our Threat Hunting Workshop: Hunting for Credential Access on February 8th from 12:00 – 1:00 PM ET and earn your “Credential Access – Level 1” certification! Save your seat 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-5
The DFIR Report: Collect, Exfiltrate, Sleep, Repeat
https://thedfirreport.com/2023/02/06/collect-exfiltrate-sleep-repeat/
North Korea: Intelligence Assessment 2022
https://analyst1.com/north-korea-intelligence-assessment-2022/
New APT34 Malware Targets The Middle East
https://www.trendmicro.com/en_us/research/23/b/new-apt34-malware-targets-the-middle-east.html
SocGholish: A Tale of FakeUpdates
https://www.reliaquest.com/i/blog/socgholish-fakeupdates/
The Defender’s Guide to OneNote MalDocs
https://opalsec.substack.com/p/the-defenders-guide-to-onenote-maldocs
Show Notes:
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%202-06-2023.pdf
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-5
The DFIR Report: Collect, Exfiltrate, Sleep, Repeat
https://thedfirreport.com/2023/02/06/collect-exfiltrate-sleep-repeat/
North Korea: Intelligence Assessment 2022
https://analyst1.com/north-korea-intelligence-assessment-2022/
New APT34 Malware Targets The Middle East
https://www.trendmicro.com/en_us/research/23/b/new-apt34-malware-targets-the-middle-east.html
SocGholish: A Tale of FakeUpdates
https://www.reliaquest.com/i/blog/socgholish-fakeupdates/
The Defender’s Guide to OneNote MalDocs
https://opalsec.substack.com/p/the-defenders-guide-to-onenote-maldocs
Show Notes:
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%202-06-2023.pdf
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep19: Out of the Woods: Top 5 Threat Hunting Headlines
31 januari 2023 |
38 min
**Join our Threat Hunting Workshop: Hunting for Credential Access on February 8th from 12:00 – 1:00 PM ET and earn your “Credential Access – Level 1” certification! Save your seat 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-5
Watering Hole Attacks Push ScanBox Keylogger
https://threatpost.com/watering-hole-attacks-push-scanbox-keylogger/180490/
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-5
Watering Hole Attacks Push ScanBox Keylogger
https://threatpost.com/watering-hole-attacks-push-scanbox-keylogger/180490/
- https://www.proofpoint.com/us/blog/threat-insight/chasing-currents-espionage-south-china-sea
- https://en.wikipedia.org/wiki/STUN
- https://www.rfc-editor.org/rfc/rfc5389
JD Sports Hit by Cyber-Attack That Leaked 10m Customers’ Data
https://www.theguardian.com/business/2023/jan/30/jd-sports-cyber-attack-customers-data-jd-size-millets-blacks
Germany’s Tank Support Met with Russian Cyberattacks
https://cybernews.com/news/german-tank-support-spurs-russian-cyberattacks/
Realtek Vulnerability Under Attack: Over 134 Million Attempts to Hack IoT Devices
https://thehackernews.com/2023/01/realtek-vulnerability-under-attack-134.html
Russian Hackers Use Western Network to Attack Ukraine
https://cybernews.com/security/russians-use-western-networks-attack-ukraine/
Show Notes:
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%201-30-2023.pdf
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep18: Out of the Woods: Top 5 Threat Hunting Headlines
24 januari 2023 |
27 min
**Join our Threat Hunting Workshop: Hunting for Credential Access on February 8th from 12:00 – 1:00 PM ET and earn your “Credential Access – Level 1” certification! Save your seat 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-5
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-5
EXCLUSIVE: U.S. Airline Accidentally Exposes ‘No Fly List’ on Unsecured Server
ChatGPT Is Pretty Good at Writing Malware, It Turns Out
The DFIR Report: How Threat Actors Discover File Shares
Gamaredon Group Launches Cyberattacks Against Ukraine Using Telegram
National Security Agency | IPv6 Security Guidance
Show Notes:
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%201-23-2023.pdf
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep17: [LIVE] Out of the Woods: Episode 5
24 januari 2023 |
88 min
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
Episode 5 | 3 Interesting Artifacts:
*TikTok Banning:
https://www.nbcnews.com/tech/tiktok-bans-public-universities-list-rcna66185
*GHOSTS – Training / Exercise NPC Activity
https://github.com/cmu-sei/GHOSTS
https://github.com/cmu-sei/GHOSTS-SPECTRE
https://github.com/cmu-sei/GHOSTS-ANIMATOR
https://www.youtube.com/watch?v=EkwK-cqwjjA
*OPERA1ER: Playing God Without Permission
https://www.group-ib.com/resources/research-hub/opera1er/
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
Episode 5 | 3 Interesting Artifacts:
*TikTok Banning:
https://www.nbcnews.com/tech/tiktok-bans-public-universities-list-rcna66185
*GHOSTS – Training / Exercise NPC Activity
https://github.com/cmu-sei/GHOSTS
https://github.com/cmu-sei/GHOSTS-SPECTRE
https://github.com/cmu-sei/GHOSTS-ANIMATOR
https://www.youtube.com/watch?v=EkwK-cqwjjA
*OPERA1ER: Playing God Without Permission
https://www.group-ib.com/resources/research-hub/opera1er/
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep16: Out of the Woods: Top 5 Threat Hunting Headlines
10 januari 2023 |
35 min
**Join our Threat Hunting Workshop: Hunting for Credential Access on February 8th from 12:00 – 1:00 PM ET and earn your “Credential Access – Level 1” certification! Save your seat 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-5
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-5
Many of 13 New Mac Malware Families Discovered in 2022 Linked to China
Microsoft Ends Windows 7 Extended Security Updates on Tuesday
Attackers Abuse Genuine Windows Tool to Deliver Pupy RAT
Can You Trust Your VSCode Extensions?
Unwrapping Ursnifs Gifts
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep15: Out of the Woods: Top 5 Threat Hunting Headlines
22 december 2022 |
48 min
Top 5 Threat Hunting Headlines - 19 December 2022
OPWNAI: AI THAT CAN SAVE THE DAY OR HACK IT AWAY
https://research.checkpoint.com/2022/opwnai-ai-that-can-save-the-day-or-hack-it-away/
ISA Researchers: Russia's Fancy Bear infiltrated US Satellite Network
https://www.cyberscoop.com/apt28-fancy-bear-satellite/
Colombian Energy Supplier EPM Hit by BlackCat Ransomware Attack
https://www.bleepingcomputer.com/news/security/colombian-energy-supplier-epm-hit-by-blackcat-ransomware-attack/
Russia’s Trident Ursa (aka Gamaredon APT) Cyber Conflict Operations Unwavering Since Invasion of Ukraine
https://unit42.paloaltonetworks.com/trident-ursa/
FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked
https://krebsonsecurity.com/2022/12/fbis-vetted-info-sharing-network-infragard-hacked/
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
OPWNAI: AI THAT CAN SAVE THE DAY OR HACK IT AWAY
https://research.checkpoint.com/2022/opwnai-ai-that-can-save-the-day-or-hack-it-away/
ISA Researchers: Russia's Fancy Bear infiltrated US Satellite Network
https://www.cyberscoop.com/apt28-fancy-bear-satellite/
Colombian Energy Supplier EPM Hit by BlackCat Ransomware Attack
https://www.bleepingcomputer.com/news/security/colombian-energy-supplier-epm-hit-by-blackcat-ransomware-attack/
Russia’s Trident Ursa (aka Gamaredon APT) Cyber Conflict Operations Unwavering Since Invasion of Ukraine
https://unit42.paloaltonetworks.com/trident-ursa/
FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked
https://krebsonsecurity.com/2022/12/fbis-vetted-info-sharing-network-infragard-hacked/
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep14: Out of the Woods: Top 5 Threat Hunting Headlines
13 december 2022 |
26 min
Top 5 Threat Hunting Headlines - 12 December 2022
Rackspace Warns of Phishing Risks Following Ransomware Attack
https://www.bleepingcomputer.com/news/security/rackspace-warns-of-phishing-risks-following-ransomware-attack/
https://www.bleepingcomputer.com/news/security/rackspace-warns-of-phishing-risks-following-ransomware-attack/
New MuddyWater Threat: Old Kitten; New Tricks
https://www.deepinstinct.com/blog/new-muddywater-threat-old-kitten-new-tricks
https://www.deepinstinct.com/blog/new-muddywater-threat-old-kitten-new-tricks
Researchers Detail New Attack Method to Bypass Popular Web Application Firewalls
https://thehackernews.com/2022/12/researchers-detail-new-attack-method-to.html
https://thehackernews.com/2022/12/researchers-detail-new-attack-method-to.html
Buyer Beware: Fake Cryptocurrency Applications Serving as Front for AppleJeus Malware
https://www.volexity.com/blog/2022/12/01/buyer-beware-fake-cryptocurrency-applications-serving-as-front-for-applejeus-malware/
https://www.volexity.com/blog/2022/12/01/buyer-beware-fake-cryptocurrency-applications-serving-as-front-for-applejeus-malware/
Hack-for-Hire Group Targets Travel and Financial Entities with New Janicab Malware Varient
https://thehackernews.com/2022/12/hack-for-hire-group-targets-travel-and.html
Show Notes
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2012-12-2022.pdf
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
https://thehackernews.com/2022/12/hack-for-hire-group-targets-travel-and.html
Show Notes
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2012-12-2022.pdf
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep13: [LIVE] Out of the Woods: Episode 4
13 december 2022 |
86 min
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
Episode 4 | 3 Interesting Artifacts:
*Rackspace Incident Highlights How Disruptive Attacks on Cloud Providers Can Be
https://www.darkreading.com/cloud/rackspace-incident-highlights-disruptive-attacks-on-cloud-providers
*ANNOUNCING PWN2OWN TORONTO 2022 AND INTRODUCING THE SOHO SMASHUP!
https://www.zerodayinitiative.com/blog/2022/8/29/announcing-pwn2own-toronto-2022-and-introducing-the-soho-smashup
*SOF-ELK and Integration with KAPE
https://aboutdfir.com/sof-elk-and-integration-with-kape/
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
Episode 4 | 3 Interesting Artifacts:
*Rackspace Incident Highlights How Disruptive Attacks on Cloud Providers Can Be
https://www.darkreading.com/cloud/rackspace-incident-highlights-disruptive-attacks-on-cloud-providers
*ANNOUNCING PWN2OWN TORONTO 2022 AND INTRODUCING THE SOHO SMASHUP!
https://www.zerodayinitiative.com/blog/2022/8/29/announcing-pwn2own-toronto-2022-and-introducing-the-soho-smashup
*SOF-ELK and Integration with KAPE
https://aboutdfir.com/sof-elk-and-integration-with-kape/
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep12: Out of the Woods: Top 5 Threat Hunting Headlines
29 november 2022 |
34 min
Top 5 Threat Hunting Headlines - 28 November 2022
OpZero’s Modus Operandi: Opportunity Hunter, Front for Kremlin, or Both?
https://cybernews.com/editorial/opzero-exploit-hunter-kremlin/
https://cybernews.com/editorial/opzero-exploit-hunter-kremlin/
Vice Society Ransomware Claims Attack on CCncinnati State College
https://www.bleepingcomputer.com/news/security/vice-society-ransomware-claims-attack-on-cincinnati-state-college/
https://www.bleepingcomputer.com/news/security/vice-society-ransomware-claims-attack-on-cincinnati-state-college/
Russia-based RansomBoggs Ransomware Targeted Several Ukrainian Organizations
https://thehackernews.com/2022/11/russia-based-ransomboggs-ransomware.html
https://thehackernews.com/2022/11/russia-based-ransomboggs-ransomware.html
Millions of Twitter Users Hacked in ‘Colossal’ Security Breach
https://www.yahoo.com/news/millions-twitter-users-hacked-colossal-130736003.html
https://www.yahoo.com/news/millions-twitter-users-hacked-colossal-130736003.html
Emotet Strikes Again – LNK File Leads to Domain Wide Ransomware
https://thedfirreport.com/2022/11/28/emotet-strikes-again-lnk-file-leads-to-domain-wide-ransomware/
Show Notes
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2011-28-2022.pdf
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
https://thedfirreport.com/2022/11/28/emotet-strikes-again-lnk-file-leads-to-domain-wide-ransomware/
Show Notes
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2011-28-2022.pdf
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep11: Out of the Woods: Top 5 Threat Hunting Headlines
22 november 2022 |
37 min
Top 5 Threat Hunting Headlines - 21 November 2022
144 Cybersecurity Statistics for 2022
https://www.humanize.security/blog/news/144-cybersecurity-statistics-for-2022
https://www.humanize.security/blog/news/144-cybersecurity-statistics-for-2022
US Charges BEC Suspects with Targeting Federal Health Care Programs
https://bleepingcomputer.com/news/security/us-charges-bec-suspects-with-targeting-federal-health-care-programs/
Iranian Government-Sponsored APT Actors Compromise Federal Network, Deploy Crypto Miner, Credential Harvester
https://www.cisa.gov/uscert/ncas/alerts/aa22-320a
FTX Hacker Dumps Prices of ETH Using Stolen Coins, Revealing Another Vulnerability of Crypto
https://vulcanpost.com/809402/ftx-hacker-dumps-prices-of-eth-using-stolen-coins/
https://bleepingcomputer.com/news/security/us-charges-bec-suspects-with-targeting-federal-health-care-programs/
Iranian Government-Sponsored APT Actors Compromise Federal Network, Deploy Crypto Miner, Credential Harvester
https://www.cisa.gov/uscert/ncas/alerts/aa22-320a
FTX Hacker Dumps Prices of ETH Using Stolen Coins, Revealing Another Vulnerability of Crypto
https://vulcanpost.com/809402/ftx-hacker-dumps-prices-of-eth-using-stolen-coins/
Microsoft Warns of Hackers Using Google Ads to Distribute Royal Ransomware
https://thehackernews.com/2022/11/microsoft-warns-of-hackers-using-google.html
Show Notes
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2011-21-2022.pdf
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
https://thehackernews.com/2022/11/microsoft-warns-of-hackers-using-google.html
Show Notes
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2011-21-2022.pdf
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep10: Out of the Woods: Top 5 Threat Hunting Headlines
15 november 2022 |
34 min
Top 5 Threat Hunting Headlines - 14 November 2022
Australia Sets Up 100-Strong Permanent 'Operation' to Target Hackers
https://www.itnews.com.au/news/australia-sets-up-100-strong-permanent-operation-to-target-hackers-587691
Over 15,000 WordPress Sites Compromised in Malicious SEO Campaign
https://thehackernews.com/2022/11/over-15000-wordpress-sites-compromised.html
Worok Hackers Abuse Dropbox API to Exfiltrate Data via Backdoor Hidden in Images
https://thehackernews.com/2022/11/worok-hackers-abuse-dropbox-api-to.html
Microsoft Blames Russian Hackers for Prestige Ransomware Attacks on Ukraine and Poland
https://thehackernews.com/2022/11/microsoft-blames-russian-hackers-for.html
US Health Dept warns of Venus ransomware targeting healthcare orgs
https://www.bleepingcomputer.com/news/security/us-health-dept-warns-of-venus-ransomware-targeting-healthcare-orgs/
Show Notes
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2011-14-2022.pdf
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
Australia Sets Up 100-Strong Permanent 'Operation' to Target Hackers
https://www.itnews.com.au/news/australia-sets-up-100-strong-permanent-operation-to-target-hackers-587691
Over 15,000 WordPress Sites Compromised in Malicious SEO Campaign
https://thehackernews.com/2022/11/over-15000-wordpress-sites-compromised.html
Worok Hackers Abuse Dropbox API to Exfiltrate Data via Backdoor Hidden in Images
https://thehackernews.com/2022/11/worok-hackers-abuse-dropbox-api-to.html
Microsoft Blames Russian Hackers for Prestige Ransomware Attacks on Ukraine and Poland
https://thehackernews.com/2022/11/microsoft-blames-russian-hackers-for.html
US Health Dept warns of Venus ransomware targeting healthcare orgs
https://www.bleepingcomputer.com/news/security/us-health-dept-warns-of-venus-ransomware-targeting-healthcare-orgs/
Show Notes
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2011-14-2022.pdf
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep9: Out of the Woods: Top 5 Threat Hunting Headlines
8 november 2022 |
40 min
Top 5 Threat Hunting Headlines - 7 November 2022
Insurance Giant Settles NotPetya Lawsuit, Signaling Cyber Insurance Shakeup
https://www.cyberscoop.com/insurance-giant-settles-notpetya-lawsuit/
Robin Banks Phishing Service for Cybercriminals Returns with Russian Server
https://thehackernews.com/2022/11/robin-banks-phishing-service-for.html
Researchers Uncover 29 Malicious PyPI Packages Targeted Developers with W4SP Stealer
https://thehackernews.com/2022/11/researchers-uncover-29-malicious-pypi.html
Microsoft Accuses China of Abusing Vulnerability Disclosure Requirements
https://therecord.media/microsoft-accuses-china-of-abusing-vulnerability-disclosure-requirements/?web_view=true
Everything you need to know about the OpenSSL 3.0.7 Patch (CVE-2022-3602 & CVE-2022-3786)
https://www.malwaretech.com/2022/11/everything-you-need-to-know-about-the-openssl-3-0-7-patch.html
Show Notes
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2011-7-2022.pdf
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
Insurance Giant Settles NotPetya Lawsuit, Signaling Cyber Insurance Shakeup
https://www.cyberscoop.com/insurance-giant-settles-notpetya-lawsuit/
Robin Banks Phishing Service for Cybercriminals Returns with Russian Server
https://thehackernews.com/2022/11/robin-banks-phishing-service-for.html
Researchers Uncover 29 Malicious PyPI Packages Targeted Developers with W4SP Stealer
https://thehackernews.com/2022/11/researchers-uncover-29-malicious-pypi.html
Microsoft Accuses China of Abusing Vulnerability Disclosure Requirements
https://therecord.media/microsoft-accuses-china-of-abusing-vulnerability-disclosure-requirements/?web_view=true
Everything you need to know about the OpenSSL 3.0.7 Patch (CVE-2022-3602 & CVE-2022-3786)
https://www.malwaretech.com/2022/11/everything-you-need-to-know-about-the-openssl-3-0-7-patch.html
Show Notes
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2011-7-2022.pdf
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep8: Out of the Woods: Top 5 Threat Hunting Headlines
1 november 2022 |
36 min
Top 5 Threat Hunting Headlines - 31 October 2022
Twilio Reveals Another Breach from the Same Hackers Behind the August Hack
New Azov Data Wiper Tries to Frame Researchers and BleepingComputer
Researchers Uncover Stealthy Techniques Used by Cranefly Espionage Hackers
New Open-Source Tool Scans Public AWS S3 Buckets for Secrets
Ransomware is Being Used As a Precursor to Physical War: Ivanti
https://www.infosecurity-magazine.com/news/ransomware-precursor-to-physical/
Show Notes
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2010-31-2022.pdf
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
Show Notes
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2010-31-2022.pdf
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep7: [LIVE] Out of the Woods: Episode 3
31 oktober 2022 |
87 min
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
Episode 3 | 3 Interesting Artifacts:
*Cybersecurity Teams are Reaching Their Breaking point. We Should All be Worried
https://www.zdnet.com/article/cybersecurity-teams-are-reaching-their-breaking-point-we-should-all-be-worried/
*blackhillsinfosec / DEFCON4
https://github.com/blackhillsinfosec/EventLogging/tree/master/DEFCON4
*TactiKoolSec / OTHF
https://github.com/TactiKoolSec/OTHF
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
Episode 3 | 3 Interesting Artifacts:
*Cybersecurity Teams are Reaching Their Breaking point. We Should All be Worried
https://www.zdnet.com/article/cybersecurity-teams-are-reaching-their-breaking-point-we-should-all-be-worried/
*blackhillsinfosec / DEFCON4
https://github.com/blackhillsinfosec/EventLogging/tree/master/DEFCON4
*TactiKoolSec / OTHF
https://github.com/TactiKoolSec/OTHF
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep6: Out of the Woods: Top 5 Threat Hunting Headlines
18 oktober 2022 |
35 min
Top 5 Threat Hunting Headlines - 18 October 2022
Fortinet Urges Admins to Patch Bug with Public Exploit Immediately
https://www.bleepingcomputer.com/news/security/fortinet-urges-admins-to-patch-bug-with-public-exploit-immediately/
Microsoft Warns Over Unusual Ransomware Attacks
https://www.zdnet.com/article/microsoft-warns-over-unusual-ransomware-attacks/
Killnet: Don’t Underestimate the “Script Kiddies,” Experts Say
https://cybernews.com/cyber-war/killnet-dont-underestimate-script-kiddies/
Fake News, New Malware Drive Recent Attacks
https://securityboulevard.com/2022/10/fake-news-new-malware-drive-recent-attacks/
Police Tricks Deadbolt Ransomware Out of 155 Decryption Keys
https://www.bleepingcomputer.com/news/security/police-tricks-deadbolt-ransomware-out-of-155-decryption-keys/
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
Fortinet Urges Admins to Patch Bug with Public Exploit Immediately
https://www.bleepingcomputer.com/news/security/fortinet-urges-admins-to-patch-bug-with-public-exploit-immediately/
Microsoft Warns Over Unusual Ransomware Attacks
https://www.zdnet.com/article/microsoft-warns-over-unusual-ransomware-attacks/
Killnet: Don’t Underestimate the “Script Kiddies,” Experts Say
https://cybernews.com/cyber-war/killnet-dont-underestimate-script-kiddies/
Fake News, New Malware Drive Recent Attacks
https://securityboulevard.com/2022/10/fake-news-new-malware-drive-recent-attacks/
Police Tricks Deadbolt Ransomware Out of 155 Decryption Keys
https://www.bleepingcomputer.com/news/security/police-tricks-deadbolt-ransomware-out-of-155-decryption-keys/
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep5: Out of the Woods: Top 5 Threat Hunting Headlines
12 oktober 2022 |
32 min
Top 5 Threat Hunting Headlines - 12 October 2022
Caffeine Service Lets Anyone Launch Microsoft 365 Phishing Attacks
Hundreds of Microsoft SQL Servers Backdoored with New Malware
Fortinet Warns of Active Explotation of Newly Discovered Critical Auth Bypass Bug
https://thehackernews.com/2022/10/fortinet-warns-of-active-exploitation.html
New Report Uncovers Emotet's Delivery and Evasion Techniques Used in Recent Attacks
https://thehackernews.com/2022/10/new-report-uncovers-emotets-delivery.html
Microsoft Issues Improved Mitigations for Unpatched Exchange Server Vulnerabilities
https://thehackernews.com/2022/10/microsoft-issues-improved-mitigations.html
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
New Report Uncovers Emotet's Delivery and Evasion Techniques Used in Recent Attacks
https://thehackernews.com/2022/10/new-report-uncovers-emotets-delivery.html
Microsoft Issues Improved Mitigations for Unpatched Exchange Server Vulnerabilities
https://thehackernews.com/2022/10/microsoft-issues-improved-mitigations.html
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep4: Out of the Woods: Top 5 Threat Hunting Headlines
5 oktober 2022 |
33 min
Top 5 Threat Hunting Headlines - 04 October 2022
Office Exploits Continue to Spread More Than Any Other Category of Malware
https://www.helpnetsecurity.com/2022/09/29/office-exploits-continue-to-spread/
Office Exploits Continue to Spread More Than Any Other Category of Malware
https://www.helpnetsecurity.com/2022/09/29/office-exploits-continue-to-spread/
Top Issues Driving Cybersecurity: Growing Number of Cybercriminals, Variety of Attacks
https://www.helpnetsecurity.com/2022/09/30/top-issues-driving-cybersecurity/
New Malware Backdoors VMware ESXi Servers to Hijack Virtual Machines
https://www.bleepingcomputer.com/news/security/new-malware-backdoors-vmware-esxi-servers-to-hijack-virtual-machines/
Detecting Fileless Malware Infections is Becoming Easier
https://www.helpnetsecurity.com/2022/10/03/detecting-fileless-malware-infections/
Microsoft Confirms New Exchange Zero-Days are Used in Attacks
https://www.bleepingcomputer.com/news/microsoft/microsoft-confirms-new-exchange-zero-days-are-used-in-attacks/
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
https://www.helpnetsecurity.com/2022/09/30/top-issues-driving-cybersecurity/
New Malware Backdoors VMware ESXi Servers to Hijack Virtual Machines
https://www.bleepingcomputer.com/news/security/new-malware-backdoors-vmware-esxi-servers-to-hijack-virtual-machines/
Detecting Fileless Malware Infections is Becoming Easier
https://www.helpnetsecurity.com/2022/10/03/detecting-fileless-malware-infections/
Microsoft Confirms New Exchange Zero-Days are Used in Attacks
https://www.bleepingcomputer.com/news/microsoft/microsoft-confirms-new-exchange-zero-days-are-used-in-attacks/
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep3: Out of the Woods: Top 5 Threat Hunting Headlines
27 september 2022 |
35 min
Top 5 Threat Hunting Headlines - 27 September 2022
NSA Reveals “Hackers’ Playbook” for OT Attacks
https://www.infosecurity-magazine.com/news/nsa-reveals-hackers-playbook-for/
Firing Your Entire Cybersecurity Team? Are You Sure?
https://thehackernews.com/2022/09/firing-your-entire-cybersecurity-team.html
Russian Sandworm Hackers Pose as Ukrainian Telcos to Drop Malware
https://www.bleepingcomputer.com/news/security/russian-sandworm-hackers-pose-as-ukrainian-telcos-to-drop-malware/
Microsoft Teams Stores Auth Tokens as Cleartext in Windows, Linux, Macs
https://www.bleepingcomputer.com/news/security/microsoft-teams-stores-auth-tokens-as-cleartext-in-windows-linux-macs/
Hackers Exploited Zero-Day RCE Vulnerability in Sophos Firewall – Patch Released
https://thehackernews.com/2022/09/hackers-actively-exploiting-new-sophos.html
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
NSA Reveals “Hackers’ Playbook” for OT Attacks
https://www.infosecurity-magazine.com/news/nsa-reveals-hackers-playbook-for/
Firing Your Entire Cybersecurity Team? Are You Sure?
https://thehackernews.com/2022/09/firing-your-entire-cybersecurity-team.html
Russian Sandworm Hackers Pose as Ukrainian Telcos to Drop Malware
https://www.bleepingcomputer.com/news/security/russian-sandworm-hackers-pose-as-ukrainian-telcos-to-drop-malware/
Microsoft Teams Stores Auth Tokens as Cleartext in Windows, Linux, Macs
https://www.bleepingcomputer.com/news/security/microsoft-teams-stores-auth-tokens-as-cleartext-in-windows-linux-macs/
Hackers Exploited Zero-Day RCE Vulnerability in Sophos Firewall – Patch Released
https://thehackernews.com/2022/09/hackers-actively-exploiting-new-sophos.html
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep2: [LIVE] Out of the Woods: Episode 2
19 september 2022 |
87 min
To be fully interactive by asking questions and giving feedback and opinions in real-time via our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
Episode 2 Headlines:
*GIFShell Attack Creates Reverse Shell Using Microsoft Teams GIFs
https://www.bleepingcomputer.com/news/security/gifshell-attack-creates-reverse-shell-using-microsoft-teams-gifs/
*SharkBot Malware Reappears in the Google Play Store
https://www.extremetech.com/mobile/339364-sharkbot-malware-reappears-in-the-google-play-store
*Ransomware Gangs Switching to New Intermittent Encryption Tactic
https://www.bleepingcomputer.com/news/security/ransomware-gangs-switching-to-new-intermittent-encryption-tactic/
*Lazarus APT Uses Log4j Flaw To Hack US, Canadian Energy Co’s – Cyber Experts Comment
https://informationsecuritybuzz.com/expert-comments/lazarus-apt-uses-log4j-flaw-to-hack-us-canadian-energy-cos-cyber-experts-comment/
*Bumblebee Malware Adds Post-Exploitation Tool for Stealthy Infections
https://www.bleepingcomputer.com/news/security/bumblebee-malware-adds-post-exploitation-tool-for-stealthy-infections/
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
Episode 2 Headlines:
*GIFShell Attack Creates Reverse Shell Using Microsoft Teams GIFs
https://www.bleepingcomputer.com/news/security/gifshell-attack-creates-reverse-shell-using-microsoft-teams-gifs/
*SharkBot Malware Reappears in the Google Play Store
https://www.extremetech.com/mobile/339364-sharkbot-malware-reappears-in-the-google-play-store
*Ransomware Gangs Switching to New Intermittent Encryption Tactic
https://www.bleepingcomputer.com/news/security/ransomware-gangs-switching-to-new-intermittent-encryption-tactic/
*Lazarus APT Uses Log4j Flaw To Hack US, Canadian Energy Co’s – Cyber Experts Comment
https://informationsecuritybuzz.com/expert-comments/lazarus-apt-uses-log4j-flaw-to-hack-us-canadian-energy-cos-cyber-experts-comment/
*Bumblebee Malware Adds Post-Exploitation Tool for Stealthy Infections
https://www.bleepingcomputer.com/news/security/bumblebee-malware-adds-post-exploitation-tool-for-stealthy-infections/
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
S1 Ep1: [LIVE] Out of the Woods: Episode 1
4 augusti 2022 |
61 min
To be fully interactive by asking questions and giving feedback and opinions in real-time via our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
00:00
-00:00
En liten tjänst av I'm With Friends. Finns även på engelska.