First Ring Daily: Evernote’s Death Spiral and Amazon’s New Enterprise-Focused Q Assistant

In this episode of First Ring Daily, Brad Sams and Paul Thurrott discuss Evernote significantly restricting its feature set for free users, Amazon launching a new AI chatbot for the enterprise, and more.
The post First Ring Daily: Evernote’s De… Continue reading First Ring Daily: Evernote’s Death Spiral and Amazon’s New Enterprise-Focused Q Assistant

Cobalt Strike and Outflank Security Tooling: Friends in Evasive Places

This is a joint blog written by the Cobalt Strike and Outflank teams. It is also available on the Outflank site. Over the past few months there has been increasing collaboration and knowledge sharing internally between the Cobalt Strike and Outflank R&D teams. We are excited about the innovation opportunities made possible by this teamwork […]

Read More…

Continue reading Cobalt Strike and Outflank Security Tooling: Friends in Evasive Places

Stopping Cybercriminals From Abusing Security Tools 

Microsoft’s Digital Crimes Unit (DCU), cybersecurity software company Fortra™ and Health Information Sharing and Analysis Center (Health-ISAC) are taking technical and legal action to disrupt cracked, legacy copies of Cobalt Strike and abused Microsoft software, which have been used by cybercriminals to distribute malware, including ransomware. This is a change in the way DCU has […]

Read More…

Continue reading Stopping Cybercriminals From Abusing Security Tools 

Cobalt Strike 4.8: (System) Call Me Maybe

Cobalt Strike 4.8 is now available. This release sees support for system calls, options to specify payload guardrails, a new token store, and more.   We had originally planned to get this release out late in 2022 but progress was stymied due to the 4.7.1 and 4.7.2 patch releases that we had to put out to […]

Read More…

Continue reading Cobalt Strike 4.8: (System) Call Me Maybe

Out Of Band Update: Cobalt Strike 4.7.2

Cobalt Strike 4.7.2 is now available. This is an out of band update to fix a remote code execution vulnerability that is rooted in Java Swing but which can be exploited in Cobalt Strike. Remote Code Execution Vulnerability I’d like to start by giving credit to Rio Sherri (0x09AL) and Ruben Boonen (FuzzySec) from the […]

Read More…

Continue reading Out Of Band Update: Cobalt Strike 4.7.2

Out Of Band Update: Cobalt Strike 4.7.1

Cobalt Strike 4.7.1 is now available. This is an out of band update to fix an issue discovered in the 4.7 release that was reported to be impacting users, and for which there was no workaround. We also took the opportunity to address a vulnerability that was reported shortly after the 4.7 release, along with […]

Read More…

Continue reading Out Of Band Update: Cobalt Strike 4.7.1

Cobalt Strike 4.7: The 10th Anniversary Edition

Cobalt Strike 4.7 is now available. This release sees support for SOCKS5, new options to provide flexibility around how BOFs live in memory, updates to how Beacon sleeps and a number of other changes that have been requested by our users. We’ve also given the user interface a bit of a refresh (including support for […]

Read More…

Continue reading Cobalt Strike 4.7: The 10th Anniversary Edition

Celebrating 10 Years of Cobalt Strike

Can you believe it? Cobalt Strike is 10 years old! Think back to the summer of 2012. The Olympics were taking place in London. CERN announced the discovery of a new particle. The Mars Rover, Curiosity, successfully landed on the red planet. And despite the numerous eschatological claims of the world ending by December, Raphael […]

Read More…

Continue reading Celebrating 10 Years of Cobalt Strike