Collaborate Disseminate
In the last few months, multiple groups of attackers successfully compromised corporate email accounts of at least 156 high-ranking officers at various firms based in Germany, the UK, Netherlands, Hong Kong, and Singapore.
Dubbed ‘PerSwaysion,’ the ne… Continue reading Targeted Phishing Attacks Successfully Hacked Top Executives At 150+ Companies
It’s not ‘Patch Tuesday,’ but software giant Adobe today released emergency updates for three of its widely used products that patch dozens of newly discovered critical vulnerabilities.
The list of affected software includes Adobe Illustrator, Adobe B… Continue reading Critical Security Patches Released for Magento, Adobe Illustrator and Bridge
The Duality of Attackers – Or Why Bad Guys are a Good Thing™
It’s no secret I’ve been on a spiritual journey the last few years. I tell most people it’s fundamentally changed my life and how I look at the world. I’m also a… Continue reading The Duality of Attackers – Or Why Bad Guys are a Good Thing™
Watch out Apple users!
The default mailing app pre-installed on millions of iPhones and iPads has been found vulnerable to two critical flaws that attackers are exploiting in the wild, at least, from the last two years to spy on high-profile victims.
… Continue reading Zero-Day Warning: It’s Possible to Hack iPhones Just by Sending Emails
After finishing the wave of research that covered pentesting, monitoring use cases, SOAR and TI, I’m excited to start research for a net new document covering an exciting topic rarely covered in Gartner research: Open source tools! The intent is … Continue reading From my Gartner Blog – New Research: Open Source Tools!
The United States agencies today released a joint advisory warning the world about the ‘significant cyber threat’ posed by North Korean state-sponsored hackers to the global banking and financial institutions.
Besides a summary of recent cyberattacks … Continue reading U.S. Offers Rewards up to $5 Million for Information on North Korean Hackers
In my last blog post, I provided a brief description of how I perform “Registry analysis”, and I thought it would be a good idea to share the actual mechanics of getting to the point of performing Registry analysis.First off, let me state clearly that … Continue reading Registry Analysis, pt II
It’s April 2020 Patch Tuesday, and during these challenging times of coronavirus pandemic, this month’s patch management process would not go easy for many organizations where most of the resources are working remotely.
Microsoft today released the la… Continue reading Microsoft Issues Patches for 3 Bugs Exploited as Zero-Day in the Wild
When you see the words, “Registry analysis”, what comes to mind? Okay, now…what actually happens when we ‘do’ this thing we call “Registry analysis”? More often than not, what this refers to manifests itself as opening a Registry hive file… Continue reading Registry Analysis
My favorite Gartner paper has just been updated to its 3rd version! “How to Develop and Maintain Security Monitoring Use Cases” was originally published in 2016 as a guidance framework for organizations trying to identify what their securit… Continue reading From my Gartner Blog – Developing and Maintaining Security Monitoring Use Cases