Month: June 2023
6 posts
The Reddit Controversy, Hacktivism, and the Pandora’s Box of Vigilantism
The breach of Reddit by the BlackCat ransomware group highlights the dangers associated with hacktivism and underscores the need for greater cybersecurity awareness and preventive measures.
Weekly Top 10 – 6.23.2023 – BlackLotus Mitigation, GitHub Repojacking, Apple exploits
NSA Releases Guide to Mitigate BlackLotus, GitHub repojacking, actively exploited zero-day for Apple iOS and macOS bugs, and 7 more stories...
The Art of ATT&CK
MITRE ATT&CK has been heralded as an excellent resource for known TTPs, but how does one actually utilize it in a cybersecurity strategy?
Weekly Top 10 – 6.9.2023 – OneDrive Down After DDoS, Win32k Exploit, Hacked Barracuda Appliances
MS OneDrive down after claims of DDoS, proof of concept for Windows Win32k exploit, PowerDrop PowerShell malware, and 7 more stories...
Living Off the Land Attacks: The Risks
Sometimes an attacker's most useful tools conveniently already exist on your endpoints, a concept called "Living Off The Land." How to mitigate this risk?
Weekly Top 10 – 6.2.2023 – macOS Vulnerability, Russian Claim of US iPhone Attacks, Zyxel Firewall Exploit
Migraine macOS vulnerability could bypass System Integrity Protection, Russia Says US hacked iPhones in zero-click attack, critical Zyxel firewall flaw exploited in ongoing attacks, and 7 more stories...