Explore >> Select a destination
|
You are here 
|
www.deepinstinct.com | ||
| | | | |
thehackernews.com
|
|
| | | | | EDRKillShifter, a new tool linked to RansomHub ransomware, targets EDR software, posing a growing threat to endpoint security. | |
| | | | |
marcusedmondson.com
|
|
| | | | | Today I wanted to talk about using the deception technology called New-HoneyHash.ps1. This is a tool that was inspired by Mark Baggett and authored by Matt Graeber, that will inject fake credentials into the lsass.exe process. This can be effective at finding attackers who are dumping the lsass process in your environment in order to... | |
| | | | |
www.cybereason.com
|
|
| | | | | Cybereason GSOC observed distribution of the Bumblebee Loader and post-exploitation activities including privilege escalation, reconnaissance and credential theft. Bumblebee operators use the Cobalt Strike framework throughout the attack and abuse credentials for privilege escalation to access Active Directory, as well as abusing a domain administrator account to move laterally, create local user accounts and exfiltrate data... | |
| | | | |
unit42.paloaltonetworks.com
|
|
| | | We summarize current facts around CVE-2023-35078 affecting Ivanti Endpoint Manager Mobile (MobileIron Core). Included is attack scope and our interim guidance. | ||
