Threat Hunting Archives

Cyber Threat Intelligence, Threat Hunting, Threat Hunting Insights

Weekly Threat Landscape Digest – Week 46

As cybersecurity threats and challenges continually adapt, organizations must remain vigilant against emerging threats and vulnerabilities. This week’s digest highlights […]

Compromise Assessment, CVE, Cybersecurity, Threat Hunting, Vulnerability Assessment

Vulnerabilties Targeting Remote Access Technologies – 2024 First Quarter

Remote access technologies are a necessary part of life in the modern world. Regretfully, hackers enjoy them just as much […]

Alert Advisory, Cybersecurity, Threat Hunting

Zscaler Capabilities and Its Use in Threat Detection and Response

Background The emergence of cloud-based services has changed how businesses approach network security in the always changing field of cybersecurity. […]

Advanced Persistent Threat, Alert Advisory, Cybersecurity, Threat Hunting

DarkCasino: A New Emerging APT Threat Exploiting a WinRAR Flaw

NSFOCUS researchers examined the DarkCasino attack pattern, which exploited the WinRAR zero-day vulnerability identified as CVE-2023-38831. The financially motivated APT […]

Cybersecurity, Managed SOC Services, Security Operations Center, Threat Hunting

Leveraging DETT&CT Framework

Building detection is a difficult task, particularly with an increasing number of data sources. It might be challenging for detection […]

Cyber Security, Malware Protection, Managed SOC Services, Threat Hunting

A Sneaky Cross-Platform Threat Targeting Redis Server: P2PInfect Worm

Unit 42 cloud researchers discovered a new peer-to-peer (P2P) worm on July 11, 2023, which they have named P2PInfect. Background: […]

Cyber Security, Managed SOC Services, Threat Hunting

Threat Hunting Unauthorized RDP Post-Exploitation

Users of Microsoft Windows systems can access a remote desktop on systems remotely to administer one or more workstations and/or […]

Cyber Security, Threat Hunting

Digital Risk Management – Threat Hunting for Secrets, Keys and Leaked Source Code on Github

DRM stands for the procedure of locating, evaluating, and minimizing hazards to a company’s digital assets. Background Many firms have […]

Alert Advisory, Incident Response, Managed Security Services, Managed SOC Services, Security Operations Center, Threat Hunting, XDR

Alert Advisory: New Microsoft Exchange Zero-Days

Late on September 29, 2022, Microsoft acknowledged both zero-day vulnerabilities and stated that they were aware of “limited, targeted attacks […]

Cyber Security, Cyber Threat Intelligence, Machine Learning, Managed Security Services, Managed SOC Services, Security Operations Center, Threat Hunting, Threat Intelligence

Data Exfiltration and Detection through Anomaly Detection

Data exfiltration is the unauthorised transfer of critical and sensitive data and/or information from a targeted network to the cyber […]

Cyber Security, Incident Response, Threat Hunting, Threat Modeling

Threat Model and Security Considerations For Remote Workers

As the world faces uncertain times, due to the spread of the pandemic COVID19 (coronavirus) outbreak, organizations around the world […]

Managed Security Services, Managed SOC Services, Security Operations Center, Threat Hunting

The Basics of Threat Hunting

Forms of Threat Hunt The truth is that threat hunt end goal plays an important role in the whole classification […]

Managed Security Services, Managed SOC Services, Security Operations Center, Threat Hunting, Threat Modeling

A Threat Hunt Tale

The human domain is complex and unpredictable, and as a result the logic behind certain behaviors are also complex. The […]