Open-source software’s adaptive nature ensures its durability, relevance, and compatibility with new technologies. When I started digging deeper into the open-source cybersecurity ecosystem, I discovered an engaged community of developers working to find practical solutions to many problems, one of…
Category: Interesting Stuff
Images Editing Tools ICO to PNG ICO Converter Image to Base64 Base64 to Image Flip Image Rotate Image Image Enlarger Image Cropper Image Resizer Image Converter JPG to PNG PNG to JPG JPG Converter WebP to JPG A Custom Link Website Management Tools HTML Decode HTML Encode URL Decode URL Encode HTML B…
ABSTRACT This document will help and guide you to start your first threat hunting based on MITRE ATT&CK Tactics. Reconnaissance Objective: Identify potential reconnaissance activity on the network Description: Reconnaissance is an important phase of an attack, where the attacker gathers informat…
Windows Event Logs mindmap provides a simplified view of Windows Event logs and their capacities that enables defenders to enhance visibility for different purposes: Log collection (eg: into a SIEM) Threat hunting Forensic / DFIR Troubleshooting Scheduled tasks: Event ID 4697 , This event generates…
Google recently announced the release of Magika, an “AI-powered file-type identification system”. I tested this on a corpus of nearly 125k files to see how it fared. Why? File type detection is useful in a number of places, such as: Anti-spam – detecting unwanted attachments, for example those with…
JPCERT/CC held JSAC2024 on January 25 and 26, 2024. The purpose of this conference is to raise the knowledge and technical level of security analysts, and we aimed to bring them together in one place where they can share technical knowledge related to incident analysis and response. The conference w…
Key Findings Explosive AI growth: Enterprise AI/ML transactions surged by 595% between April 2023 and January 2024. Concurrent rise in blocked AI traffic: Even as enterprise AI usage accelerates, enterprises block 18.5% of all AI transactions, a 577% increase signaling rising security concerns….
Ransomware is malware that locks your computer and mobile devices or encrypts your electronic files. When this happens, you can’t get to the data unless you pay a ransom.However this is not guaranteed and you should never pay! GOOD NEWS Prevention is possible. Following simple cyber security advice…
Ransomware, a phenomenon now very well known, serves one ultimate and obvious purpose: Monetary gain for the cybercriminal(s). However, multiple scenarios are, in fact, possible. Consider any and all of the following: Closing thoughts As we’ve seen, ransomware can serve a plethora of purposes; wheth…
In this blog post, we are talking about what we can do if we are presented with a Memory image for a suspected machine to investigate and how to leverage our tools to get as much information as we can from it. we will be dealing with two tools: Volatility 3 MemProcFS Experience Level required: Begin…
Tenable Research discovered a one-click account takeover vulnerability in the AWS Managed Workflows Apache Airflow service that could have allowed full takeover of a victim’s web management panel of the Airflow instance. The discovery of this now-resolved vulnerability reveals a broader problem of m…
This is an web about website security. It discusses different types of malware that can infect websites. The web article provides information on how to protect your website from these threats. Some of the important points from this web article are that attackers often target the .htaccess file to hi…
Summary Conducting an external website scan for indicators of compromise is one of the easiest ways to identify security issues. While remote scanners may not provide as comprehensive of a scan as server-side scanners, they allow users to instantly identify malicious code and detect security i…
Key Points ReliaQuest has observed 246% more business email compromise (BEC) attempts over the past year; this highlights the growing risk of fraud or other damage caused by cyber attacks, relevant to all sectors and countries. We have developed an advanced detection approach for organizations to id…
This joint guide, Understanding and Responding to Distributed Denial-Of-Service Attacks, addresses the specific needs and challenges faced by organizations in defending against DDoS attacks. The guidance now includes detailed insight into three different types of DDoS techniques: Volumetr…