Hunting a Zero day! By Matthew Green and Mike CohenMonday, July 26th, 2021 Velociraptor is an advanced open source endpoint visibility framework based on a flexible query language called VQL. What makes Velociraptor unique from other endpoint tools is the flexibility to develop new queries to address emerging threats. This Read more…
Secureworks incident responders investigated a long-running intrusion that involved compromises of SharePoint and Exchange servers and multiple web shells with links to Iranian threat groups. by Mike McLellan, Secureworks® Counter Threat Unit™ (CTU) research teamMonday, July 19th, 2021 In March and November 2020, third-party researchers reported on a campaign where Read more…
by CywareMonday, July 12th, 2021 Today’s threat and digital risk landscape stretch far beyond any single entity’s ability to comprehend. Often functioning as islands with the occasional outside data, financial institutions, healthcare organizations, webmail providers, utilities, tech companies, and everyone in between are constantly bombarded with cyber threats. These islands Read more…
July 8th, 2021 – During the recent 2021 AGM, Dave Schwartzburg, Information Security Architect from Cisco was newly appointed as the Chair of the premier organization and recognized global leader in incident response – Forum of Incident Response and Security Teams (FIRST). Dave has 18 years cybersecurity expertise including three Read more…
July 1st, 2021 – Jeffrey Carpenter and (posthumously) Dan Kaminsky are this year’s new inductees of FIRST’s Incident Response Hall of Fame. Hall of Fame nominations come from past inductees; members of the FIRST Board of directors; every representative, secondary representative of a team member; and FIRST liaison members and Read more…
June 11, 2021 – The Forum of Incident Response and Security Teams (FIRST) published its fifth Annual Report today. The report covers the organization’s accomplishments towards its vision of bringing together incident response and security teams from every country across the world to ensure a safe internet for all. It Read more…
ICASI – the Industry Consortium for Advancement of Security on the Internet was officially integrated into the Forum of Incident Response and Security Teams (FIRST) on May 28, 2021. Established in 2008, ICASI’s purpose was to strengthen the global security landscape by driving excellence and innovation in security response practices; Read more…
Together, We’re Creating Better Threat Intelligence Sharing for the World by Jacomo Piccolini, Outreach Team Lead, Team CymruMonday, January 28th, 2020 Since 2005, Team Cymru’s mission has been to save and improve lives by working with public and private sector entities to discover, track, and take down threat actors and Read more…