Benefits and Drawbacks of NSA’s Advisory. The Double-Edged Sword

The Defense Cybersecurity Workout Plan. The Basics Never Looked So Good

Sophistication of Cyber Actors. The James Bonds of the Digital Realm

Use of Service and Dormant Accounts. Sleeping Giants

Expansion of Targeting. The More, the Merrier

Increased Importance of Cloud Initial Access. First Impressions Matter

Authentication as a Key Step. We Don't Need No Stinkin' Passwords!

Cloud TTPs Details. The Cyber Magician's Handbook

Adaptation to Cloud Services. Chameleons of the Cyber World

AdaptTactics' Advisory: The Art of Cloud Sneakery

MASEPIE Malware. Because One Malware Isn't Enough

Proxy and Tunnel. Ubiquiti's Unofficial Features

CVE-2023-23397. The Exploit That Keeps on Exploiting

Making Credential Theft Easier Since... Always

Moobot Trojan. When Ubiquiti Router Becomes a Botnet's Best Friend

Living off the Land. NSA advisories (Video)

Threat Actors Love Ubiquiti. A Match Made in Cyber Heaven

Ubiquiti: Where Security is Optional and keypoint is «change your password, seriously!»

The Fallout: Consequences of Ignoring SOHO Router Security

SOHO Meets New Best Friends: Malicious Cyber Actors

SOHO's Screwed: Affected Industries

Anonymous Sudan's Latest Adventures: A Hacktivist's Dream

Blame SOHO's Firmware: The Root of All Evil

The Irony of MobileIron. When Your Security Solution Needs Security

Building Resilient Software: Mitigating LOTL Risks

Reclaiming Lost Ground: LOTL Attack Recovery

The Digital Hunt: Tracking LOTL in Your Network

Fortifying the Fort: System Hardening Against LOTL Threats

Unveiling the Invisible: LOTL and LOLbins Detection Techniques

FileWave or FailWave. Navigating the Stormy Seas of MDM Vulnerabilities

Cutting Through the Noise: Establishing LOTL Detection Baselines

The Art of Digital Foraging: Deep Dive into LOTL

AirWatch Out! Your MDM Solution Might Be Watching Your Data Leak

Double-Edged Sword: Pros and Cons of LOTL Techniques

Surviving the Digital Wilderness: An Introduction to LOTL and LOLbins

Evolving Standards: Recent Changes in Maturity Models

Reaching the Pinnacle: Benefits of Achieving Target Maturity

Security Maturity Model Even Cybersecurity Needs to Grow Up (Video)

Podcast Announcement

Stages of Excellence: Understanding Maturity Levels

Securing the Future: A Cybersecurity Maturity Approach

Nuances of Maturity: Specifics and Details

Get the Scoop with "Notes" - Your New Knowledge Shortcut!

Embarking on the Maturity Journey: Introduction

Blackberry’s Back, and So Are Its Security Flaws

The Never-Ending Fuzzing Time Nightmare

Monthly Digest. 2024 / 07

Monthly Digest. 2024 / 07. Announcement

Think Tanks and NGOs: The Perfect Cover for Cyber Espionage

Skipping Authentication: Telerik Report Server’s New Feature?

Hacking the Hippocratic Oath. Forensic Fun with Medical IoT

Hacking the Hippocratic Oath. Forensic Fun with Medical IoT [announcement]

The Dark Side of LSASS: How Evil Twins Bypass Security Measures

Leveraging Energy Consumption Patterns for Cyberattack Detection in IoT Systems

Leveraging Energy Consumption Patterns for Cyberattack Detection in IoT Systems [announcement]

Check Point’s 'Best Security' Slogan Meets Reality: CVE-2024-24919

CVE-2024-27130 in QNAP: When 'Secure' is Just a Marketing Term

MalPurifier. Detoxifying Your Android, One Malicious Byte at a Time

Root Privileges for Dummies: Just Exploit CVE-2024-3400

When Velociraptors Meet VMs. A Forensic Fairytale

When Velociraptors Meet VMs. A Forensic Fairytale [announcement]

Breaking News: Chinese AVs Outwitted by Go Code

AMSI Bypass: The Malware’s Express Lane

Digests'24

Oops, We Did It Again. CVE-2024-21111 Strikes

MS-DOS: For those who think modern OSes are too user-friendly

Human Factors in Biocybersecurity Wargames & Gamification

Why Bother with Cybersecurity? Just Let Event Logs Do All the Work, Google said

Nimfilt: Because Authors Needed Another Language to Complicate Our Lives

Security Maturity Model. Even Cybersecurity Needs to Grow Up

Inside of Windows: How a Double-Fetch Vulnerability Leads to SYSTEM Access

Bias in AI. Because Even Robots Can Be Sexist

Passkeys: Making Phishing Scams Work a Little Harder

Android Live Threat Detection: 200 billion Scans a Day Still Won’t Catch Everything

Monthly Digest. 2024 / 06

Why Clicking on 'Urgent Invoice' Emails is the Best Way to Make Friends with IT

MediHunt

Firmware Overwrite: The New Trend in Router Fashion

Registry Hacking for Dummies: Removing Ads the Hard Way by OFGB (Oh Frick Go Back)

Detection of Energy Consumption Cyber Attacks on Smart Devices

ICSpector: Solving Forensics Problems You Didn’t Know You Had

NSA’s panic. SOHO

Raytracing on a ZX Spectrum: Who Needs Modern GPUs When You Can Spend a Weekend Rendering a Single Frame to Prove That Masochism Can Be a Hobby?

FIDO2: Phishing-Resistant, But Not Token-Resistant

NSA’s panic. Ubiquiti

Incident Response Made Easy: Using BucketLoot for Cloud Storage Forensics

NSA’s panic. AdaptTactics

QCSuper: Eavesdropping on Device Becomes a Hobby

TP-Link TDDP Buffer Overflow Vulnerability

Fuxnet

QEMU to emulate IoT firmware

AntiPhishStack

Botnet targets decade-old flaw in unpatched D-Link devices

Monthly Digest. 2024 / 05 [Pro Level]

Monthly Digest. 2024 / 05 [Regular Level]

Monthly Digest. 2024 / 05 [Free Level]

NSA’s manic panic. JetBrains

UserManagerEoP / CVE-2024-21447

Living Off the Land (LOTL)

Genzai. The IoT Security Toolkit

A blog about all things techy! Not too much hype, just a lot of cool analysis and insight from different sources. 📌Not sure what level is suitable for you? Check this explanation <a target="_blank" href="https://sponsr.ru/overkill_security/55291/Paid_Content/">https://sponsr.ru/overkill_security/55291/Paid_Content/</a> All places to read, listen and watch content:➡️Text and other media: <a href="https://t.me/+KUGgKF8dE1hmYTlh" target="_blank">TG</a>, <a href="https://boosty.to/overkill_security" target="_blank">Boosty</a>, <a href="https://teletype.in/overkill_security" target="_blank">Teletype.in</a>, <a href="https://vk.com/overkill_security" target="_blank">VK</a>, <a href="https://x.com/overkilsecurity" target="_blank">X.com</a>➡️Audio: <a href="https://overkillsecurity.mave.digital/" target="_blank">Mave</a>, you find here other podcast services, e.g. <a href="https://www.youtube.com/playlist?list=PLSDR-rJ79OzHJcdxD_9AMPHQH95gq3VFR" target="_blank">Youtube Podcasts</a>, <a href="https://open.spotify.com/show/0c3XHoDmcN2GWjsu2gZ1BS" target="_blank">Spotify</a>, <a href="https://podcasts.apple.com/us/podcast/overkill-security/id1761177431" target="_blank">Apple</a> or <a href="https://music.amazon.com/podcasts/7637ea03-07fa-4a04-9e96-489d52c23f3c/overkill-security" target="_blank">Amazon</a>➡️Video: <a href="https://www.youtube.com/@overkill_security" target="_blank">Youtube</a> The main categories of materials — use tags:📌<a href="https://sponsr.ru/overkill_security/?tag_id=31298" target="_blank">keypoints or notes</a>📌<a href="https://sponsr.ru/overkill_security/?tag_id=6570" target="_blank">news</a>📌<a href="https://sponsr.ru/overkill_security/?tag_id=29868" target="_blank">unpacking</a>📌<a href="https://sponsr.ru/overkill_security/?tag_id=29871" target="_blank">research</a>📌<a href="https://sponsr.ru/overkill_security/?tag_id=29327" target="_blank">digest</a> QA — directly or via email <a href="mailto:overkill_qa@outlook.com">overkill_qa@outlook.com</a>

Your donation fuels our mission to provide cutting-edge cybersecurity research, in-depth tutorials, and expert insights. Support our work today to empower the community with even more valuable content.*no refund, no paid content

Because Nothing Says 'Security' Like a Dozen Firewalls and a Biometric Scanner

because nothing says 'security' like a dozen firewalls and a biometric scanner

Overkill Security

overkill security