Login
Moving up the Assemblyline: Exposing malicious code in browser extensions
How to use the open source Assemblyline tool to track browser extension updates and detect malicious code
Reading view
Hunting for malicious OpenClaw AI in the modern enterprise
We deconstruct a multi-step threat hunt for malicious OpenClaw AI agents, outlining our approach to identifying and mitigating risks posed by unauthorized AI skills.
Breaking down a supply chain attack leveraging a malicious Google Workspace OAuth app
How to detect and respond to OAuth consent attacks in Google Workspace
ChatGPT in your inbox? Investigating Entra apps that request unexpected permissions
How to observe, detect, investigate and mitigate against overly permissive Entra app consent
Bring the Fight to the Edge: Turning Time Into an Advantage in OT Security
Unit 42 research reveals most OT attacks begin in IT. Learn how edge-driven defense stops threats early and turns dwell time into advantage.
The post Bring the Fight to the Edge: Turning Time Into an Advantage in OT Security appeared first on Unit 42.
Why Identity Security Must Move Beyond MFA
By integrating identity threat detection with MFA, organizations can protect sensitive data, maintain operational continuity, and reduce risk exposure.
The post Why Identity Security Must Move Beyond MFA appeared first on SecurityWeek.
Predator Spyware Turns Failed Attacks Into Intelligence for Future Exploits
The Predator spyware is more sophisticated and dangerous than previously realized.
The post Predator Spyware Turns Failed Attacks Into Intelligence for Future Exploits appeared first on SecurityWeek.
Bun and done: The second coming of the Shai-Hulud worm
Everything you need to know to detect and prevent npm compromises from Shai-Hulud’s latest campaign
At Home Detection Engineering Lab for Beginners
| Niccolo Arboleda | Guest Author Niccolo Arboleda is a cybersecurity enthusiast and student at the University of Toronto. He is usually found in his home lab studying different cybersecurity […]
The post At Home Detection Engineering Lab for Beginners appeared first on Black Hills Information Security, Inc..
Impacket Defense Basics With an Azure Lab
Jordan Drysdale // Overview The following description of some of Impacket’s tools and techniques is a tribute to the authors, SecureAuthCorp, and the open-source effort to maintain and extend the code. […]
The post Impacket Defense Basics With an Azure Lab appeared first on Black Hills Information Security, Inc..
Geopolitical Cyber-Detection Lures for Attribution with Microsoft Sentinel
Jordan Drysdale // Summary! There are tons of security event management (SIEM) solutions available these days, but this blog will focus on Microsoft Sentinel. Sentinel is easy to deploy, logs […]
The post Geopolitical Cyber-Detection Lures for Attribution with Microsoft Sentinel appeared first on Black Hills Information Security, Inc..
