Your blog category
This is Part 1 of a series of blogs focused on automating red team infrastructure. Automating red team infrastructure is not new, and nothing demonstrated in this blog is intended to be novel. However, for practitioners starting out (or teams…
A suspicious activity appears on your network. Something is off. Logs don’t look right. Alerts start firing. Maybe an attacker is already moving laterally or worse, you’re discovering the compromise far too late. In that moment, what do you do?…
Background During Penetration tests, especially on a network where there are domain-joined computers, it is often necessary to demonstrate the impact of lateral movement and remote code execution to the customer. This may have been much easier in the past,…
Background On July 19, 2024, a major IT outage disrupted several online services, causing widespread inconvenienceand highlighting the ever-present threat of cyberattacks. The glitch originated from a corruptedsoftware update sent out by security company CrowdStrike to its vast number of…
Background In today’s interconnected world, both financial institutions and cybersecurity professionals facethe daunting task of managing risks effectively to safeguard assets and data. While the domains of finance and cybersecurity may seem distinct, they share common principles in riskmanagement. In…
BackgroundIn today’s digital landscape, organizations face an ever-evolving array of cyber threats that cancompromise their sensitive data, disrupt operations, and tarnish their reputation. As thefrequency and sophistication of cyber-attacks continue to rise, it has become imperative fororganizations to adopt proactive…