Tag: Threat Detection Marketplace

GraphRunner Activity Detection: Hackers Apply a Post-Exploitation Toolset to Abuse Microsoft 365 Default Configurations 3 min read CVEs GraphRunner Activity Detection: Hackers Apply a Post-Exploitation Toolset to Abuse Microsoft 365 Default Configurations by Veronika Zahorulko CVE-2023-20198 Detection: Cisco IOS XE Zero-Day Vulnerability Actively Exploited to Install Implants 4 min read CVEs CVE-2023-20198 Detection: Cisco IOS XE Zero-Day Vulnerability Actively Exploited to Install Implants by Veronika Zahorulko UAC-0165 Activity Detection: Destructive Cyber Attacks Targeting Ukrainian Telecom Providers  5 min read CVEs UAC-0165 Activity Detection: Destructive Cyber Attacks Targeting Ukrainian Telecom Providers  by Veronika Zahorulko Balada Injector Malware Campaign Detection: Hackers Exploit a tagDiv Composer Vulnerability Infecting Thousands of WordPress Sites 4 min read CVEs Balada Injector Malware Campaign Detection: Hackers Exploit a tagDiv Composer Vulnerability Infecting Thousands of WordPress Sites by Veronika Zahorulko LostTrust Ransomware Detection: SFile and Mindware Advancement, Successor of MetaEncryptor Gang 3 min read CVEs LostTrust Ransomware Detection: SFile and Mindware Advancement, Successor of MetaEncryptor Gang by Veronika Zahorulko SmokeLoader Malware Detection: UAC-0006 Hackers Launch a Wave of Phishing Attacks Against Ukraine Targeting Accountants 3 min read CVEs SmokeLoader Malware Detection: UAC-0006 Hackers Launch a Wave of Phishing Attacks Against Ukraine Targeting Accountants by Veronika Zahorulko CVE-2023-22515 Detection: A Critical Zero-Day in Confluence Data Center & Server Under Active Exploitation 3 min read CVEs CVE-2023-22515 Detection: A Critical Zero-Day in Confluence Data Center & Server Under Active Exploitation by Veronika Zahorulko CVE-2023-42793 Detection: An Authentication Bypass Vulnerability Leading to RCE on JetBrains TeamCity Server 3 min read CVEs CVE-2023-42793 Detection: An Authentication Bypass Vulnerability Leading to RCE on JetBrains TeamCity Server by Veronika Zahorulko Frequent SIGMA Mistakes Series 2 min read Sigma Frequent SIGMA Mistakes Series by Adam Swan CVE-2023-29357 Detection: Microsoft SharePoint Server Elevation of Privilege Vulnerability Exploitation Can Lead to Pre-Auth RCE Chain 4 min read CVEs CVE-2023-29357 Detection: Microsoft SharePoint Server Elevation of Privilege Vulnerability Exploitation Can Lead to Pre-Auth RCE Chain by Veronika Zahorulko