Collaborate Disseminate
Microsoft has issued an emergency out-of-band software update for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 systems to patch two new recently disclosed security vulnerabilities.
Tracked as CVE-2020-1530 and CVE-2020-1537, both flaws resi… Continue reading Microsoft Issues Emergency Security Updates for Windows 8.1 and Server 2012 R2
The South African arm of one of the world’s largest credit check companies Experian yesterday announced a data breach incident that exposed personal information of millions of its customers.
While Experian itself didn’t mention the number of affect cu… Continue reading Experian South Africa Suffers Data Breach Affecting Millions; Attacker Identified
I recently published a post where I discussed DFIR toolmarks, and not long after sharing it on Twitter, someone asked me for a list of resources that describe the “how”; that is, how to go about finding or determining toolmarks for various a… Continue reading Toolmarks: The "How"
Microsoft earlier today released its August 2020 batch of software security updates for all supported versions of its Windows operating systems and other products.
This month’s Patch Tuesday updates address a total of 120 newly discovered software vul… Continue reading Microsoft Reveals New Innocent Ways Windows Users Can Get Hacked
Citrix today released patches for multiple new security vulnerabilities affecting its Citrix Endpoint Management (CEM), also known as XenMobile, a product made for enterprises to help companies manage and secure their employees’ mobile devices remotely… Continue reading Critical Flaws Affect Citrix Endpoint Management (XenMobile Servers)
Very often, DFIR and intel analysts alike don’t appear to consider such things as toolmarks associated with TTPs, nor intrusion intelligence. However, considering such things can lead to greater edge sharpness with respect to attribution, as well as to… Continue reading Toolmarks and Intrusion Intelligence
A 17-year-old teen and two other 19 and 22-year-old individuals have reportedly been arrested for being the alleged mastermind behind the recent Twitter hack that simultaneously targeted several high-profile accounts within minutes as part of a massive… Continue reading 17-Year-Old ‘Mastermind’, 2 Others Behind the Biggest Twitter Hack Arrested
A team of cybersecurity researchers today disclosed details of a new high-risk vulnerability affecting billions of devices worldwide—including servers and workstations, laptops, desktops, and IoT systems running nearly any Linux distribution or Windows… Continue reading Critical GRUB2 Bootloader Bug Affects Billions of Linux and Windows Systems
Garmin, the maker of fitness trackers, smartwatches and GPS-based wearable devices, is currently dealing with a massive worldwide service interruption after getting hit by a targeted ransomware attack, an employee of the company told The Hacker News on… Continue reading Smartwatch Maker Garmin Shuts Down Services After Ransomware Attack
Something I’ve been pretty focused on in my analysis for some time is the concept of “artifact constellations”. I originally referred to this concept as “artifact clusters”, but I heard someone from the FBI’s Cyber BAU team use the term “constell… Continue reading On Artifact Constellations And "Toolmarks"