Collaborate Disseminate
Citrix today released patches for multiple new security vulnerabilities affecting its Citrix Endpoint Management (CEM), also known as XenMobile, a product made for enterprises to help companies manage and secure their employees’ mobile devices remotely… Continue reading Critical Flaws Affect Citrix Endpoint Management (XenMobile Servers)
Very often, DFIR and intel analysts alike don’t appear to consider such things as toolmarks associated with TTPs, nor intrusion intelligence. However, considering such things can lead to greater edge sharpness with respect to attribution, as well as to… Continue reading Toolmarks and Intrusion Intelligence
A 17-year-old teen and two other 19 and 22-year-old individuals have reportedly been arrested for being the alleged mastermind behind the recent Twitter hack that simultaneously targeted several high-profile accounts within minutes as part of a massive… Continue reading 17-Year-Old ‘Mastermind’, 2 Others Behind the Biggest Twitter Hack Arrested
A team of cybersecurity researchers today disclosed details of a new high-risk vulnerability affecting billions of devices worldwide—including servers and workstations, laptops, desktops, and IoT systems running nearly any Linux distribution or Windows… Continue reading Critical GRUB2 Bootloader Bug Affects Billions of Linux and Windows Systems
Garmin, the maker of fitness trackers, smartwatches and GPS-based wearable devices, is currently dealing with a massive worldwide service interruption after getting hit by a targeted ransomware attack, an employee of the company told The Hacker News on… Continue reading Smartwatch Maker Garmin Shuts Down Services After Ransomware Attack
Something I’ve been pretty focused on in my analysis for some time is the concept of “artifact constellations”. I originally referred to this concept as “artifact clusters”, but I heard someone from the FBI’s Cyber BAU team use the term “constell… Continue reading On Artifact Constellations And "Toolmarks"
The Department of Homeland Security and CISA ICS-CERT today issued a critical security advisory warning about over a dozen newly discovered vulnerabilities affecting billions of Internet-connected devices manufactured by many vendors across the globe.
… Continue reading New Ripple20 Flaws Put Billions of Internet-Connected Devices at Risk of Hacking
These plugins were developed as a result of this article posted to Medium by Zach, aka, “svch0st”. The article is fascinating, in that Zach found that there’re Registry keys that appear to track the applications that access the microphone and web… Continue reading Plugin Spotlight – consentstore, consentstore_tln, appcompatflags.pl update
Given the number of RegRipper plugins that are part of the distro, I thought it would be a good idea every now and then to spotlight a plugin or two, and share what led to the plugin being created, and discuss how it can be used as part of analysis.pri… Continue reading Plugin Spotlight – printer_settings, featureusage
Microsoft today released its June 2020 batch of software security updates that patches a total of 129 newly discovered vulnerabilities affecting various versions of Windows operating systems and related products.
This is the third Patch Tuesday update… Continue reading Microsoft Releases June 2020 Security Patches For 129 Vulnerabilities