Interested in correlating events from network monitoring tools to host activity? Support for Community ID hashing in osquery allows osquery’s endpoint instrumentation to be easily correlated with…

Pwn stuff. Contribute to mm0r1/exploits development by creating an account on GitHub.

We recently discovered a novel REBOL exploit technique used for command-and-control. We've coined this the REBOL Yell. Read about the exploit and preventing it.

Deploying the Tpot honeypot on Google Cloud using Terraform

Ready to use prioritized Vulnerability Remediation requirements, to: Make sure the Information Security team is responsible for incident response,

Tool for Active Directory Certificate Services enumeration and abuse - ly4k/Certipy

Posted in r/netsec by u/securehoney • 2 points and 0 comments

We found lacking user privilege separation enforcement and post-authentication command injection remote code execution within Cisco ATA19X firmware.

Today we are introducing Shisho Cloud, a SaaS solution that supports an entire process of improving your infrastructure-as-code security with intelligent autofixes of security issues.Securing Infrastr...

Since 2012, Trail of Bits has helped secure some of the world's most targeted organizations and products. We combine high-­end security research with a real­ world attacker mentality to reduce risk and fortify code.

Israeli businessmen were reportedly targeted by an assassin in Cyprus who was caught. Targeted Israeli businessman Teddy Sagi's company has called the incident Iranian terror.

weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases. - weggli-rs/weggli

Posted in r/netsec by u/davidw_- • 0 points and 1 comment

Today we are excited to announce the release of Fleet 4.4.0 which brings new and improved features for our osquery and Fleet users.

Call Tree Overviewer. Contribute to herosi/CTO development by creating an account on GitHub.

This blog will be a technical deep-dive into CyberArk credential files and how the credentials stored in these files are encrypted and decrypted. I discovered it was possible to reverse engineer the encryption and key generation algorithms and decrypt the…