Threat actors are hacking Microsoft Exchange servers using ProxyShell and ProxyLogon exploits to distribute malware and bypass detection using stolen internal reply-chain emails.

Calling themselves “Memento team”, actors use Python-based ransomware that they reconfigured after setbacks.

OVERVIEW Mapping and enumeration the Mitre TTP helps us to proactively secure or to harden our internal network, even after a greater evolution of cyber security, it's been too complicated to manually map the TTP’S for recently discovered attacks. Features…

Join the Nation’s preeminent federal cybersecurity team and serve your country by working with us to protect critical infrastructure and the American people from cyber threats.

Threat Report ATT&CK™ Mapping (TRAM) is a tool to aid analyst in mapping finished reports to ATT&CK. - mitre-attack/tram

Posts about Process Hollowing written by Administrator

Code from "Taking Hunting to the Next Level: Hunting in Memory" presentation at SANS Threat Hunting Summit 2017 by Jared Atkinson and Joe Desimone - Get-InjectedThread.ps1

Data governance defines roles, responsibilities, and processes for ensuring accountability for and ownership of data assets across the enterprise.

How do we secure our AI?

We have an interesting problem on our hands. Our reliance on Artificial intelligence has increased exponentially over the last few years and yet our strategies and technologies to secure those systems have not. Couple that…

DNA Diagnostics Center (DDC), an Ohio-based DNA testing company, has disclosed a hacking incident that affects 2,102,436 persons.