Collaborate Disseminate
Recently, Microsoft and FireEye have announced the discovery of a new advanced threat group utilizing an IT monitoring software vendor as a means to enable access to other targets. This type of an attack is referred to as a “supply chain attack” or a “… Continue reading Security Advisory Regarding SolarWinds Supply Chain Compromise
Recently, the information security vendor FireEye has made it in the news as the latest victim to suffer a breach. FireEye is stating that their suite of Red Team Tools were among the assets and data that the threat actors retrieved. What is a red tea… Continue reading Security Advisory Regarding the Recent FireEye Breach Reports
Flare-on is a great CTF-style event. Its popularity means you can find many write ups for the same challenge, so you can pick and choose new techniques and tools to learn. I have seen a couple of challenge write-ups, but here I will solve this challeng… Continue reading Solving Garbage with Radare2
The first international congress for Radare was held in 2016 to mark the ten year anniversary of the project. Although this was supposed to be a one-time event, the Radare community has a very “why not” attitude–as in“why not” have another one (a thoug… Continue reading R2con 2020 Review
What is hardening? Hardening involves reducing risk through the identification and remediation of vulnerabilities across the attack surface of a system. A system tends to have more vulnerabilities or a larger attack surface as its complexity or functio… Continue reading A Comprehensive Checklist for Windows Hardening
Have you ever gotten an email from someone with a message saying “Please see attached,” “Past due notice,” or, my favorite, “Invoice #” and wondered if you should click on that link? Or perhaps that link just looks odd and you want to be sure if it’s s… Continue reading To Click or Not to Click: An OSINT Investigation Overview
There are many questions swirling around about what really goes on in the often complex world of cybersecurity. In this Q&A-style blog post, Hurricane Labs’ John Diez provides some insight from the perspective of a SOC Analyst. Why do you do work … Continue reading Insider Look from the Frontlines of Cybersecurity