Detect Indicator Blocking with these free splunk Detection Rules
An adversary may attempt to block indicators or events typically captured by sensors from being gathered and analyzed. This could include maliciously redirecting or even disabling host-based sensors, such as Event…
Understanding Threat Hunting Part 2: The Threat Hunting Loop
An increasing number of cybersecurity threats are compromising organizations; in 2019, over 15.1 billion records were exposed. As the gravity and the number of these threats are increasing, a more proactive approach…
Detect Hidden Windows with this free Splunk Detection Rule
Adversaries may implement hidden windows to conceal malicious activity from the plain sight of users. In some cases, windows that would typically be displayed when an application carries out an…
Detect Erebus Linux Ransomware Activity with Yara Detection Rule
Erebus ransomware is a Linux ransomware and like any other…
Mozilla releases security patches for Firefox critical vulnerabilities exploited in the wild
Mozilla patched two critical zero-days in Firefox 74.0.1. The vulnerabilities…
wininit.exe: One Of The Most Important Windows Processes For Threat Hunting
“wininit.exe” stands for Windows Initialization. This process is an essential part…
Attackers Are Exploiting Docker Containers to Deliver Cryptomining Malware
For the past few months, an organized attack campaign is…
Detect Malicious Screensaver Files (SCR) with Sigma Detection Rule
Watch out for screensavers; they could contain malicious files. Attackers…
Windows Malware “Coronavirus” Overwrites MBR
A new Windows malware dubbed “Coronavirus” is exploiting the Covid-19…
Hackare knäcker LineageOS-servrar via opatchad sårbarhet
LineageOS källkod, OS Builds och signeringsnycklar förblev opåverkade, säger utvecklarna. Hackare har fått tillgång till kärn-infrastrukturen i LineageOS, ett mobilt…
Forskare avslöjar nya sätt att av anonymisera enhets-ID till användarnas biometri
Forskare har upptäckt ett potentiellt sätt att porträttera och spåra onlineanvändare med en ny metod som kombinerar enhetsidentifierare med deras…
Den Senaste Versionen av Ubuntu Linux är Släppt
Canonical har släppt den senaste versionen av sin Ubuntu Linux, en av de mest populära Linux-distributionerna som erbjuder flera spännande…