CISA Urges Endpoint Management System Hardening After Cyberattack Against US Organization https://infosec.pub/post/43679657 [https://infosec.pub/u/digicat] #blueteamsec

ANNUAL THREAT ASSESSMENT OF THE U.S. INTELLIGENCE COMMUNITY: "Cyber actors from China, Russia, Iran, North Korea, and ransomware groups will continue to pose critical threats to U.S. networks and CNI" https://infosec.pub/post/43651746 [https://infosec.pub/u/digicat] #blueteamsec

APT28 / FancyBear Phishing Framework https://infosec.pub/post/43651683 [https://infosec.pub/u/digicat] #blueteamsec

Boggy Serpens Threat Assessment https://infosec.pub/post/43651630 [https://infosec.pub/u/digicat] #blueteamsec

Interlock ransomware campaign targeting enterprise firewalls https://infosec.pub/post/43651584 [https://infosec.pub/u/digicat] #blueteamsec

StoatWaffle, malware used by WaterPlum | セキュリティナレッジ | NTTセキュリティ・ジャパン株式会社 https://infosec.pub/post/43651629 [https://infosec.pub/u/digicat] #blueteamsec

ScreenConnect™ 26.1 Security Hardening - issues related to how server-level cryptographic material is protected. https://infosec.pub/post/43651574 [https://infosec.pub/u/digicat] #blueteamsec

Web Shells, Tunnels, and Ransomware: Dissecting a Warlock Attack https://infosec.pub/post/43651523 [https://infosec.pub/u/digicat] #blueteamsec

fronthunter: FrontHunter is a tool for testing large lists of domains to identify candidates for domain fronting. https://infosec.pub/post/43651478 [https://infosec.pub/u/digicat] #blueteamsec

RegPwnBOF: Bof of RegPwn - Exploits a registry symlink race condition in the Windows Accessibility ATConfig mechanism to write arbitrary values to protected HKLM registry keys from a normal user https://infosec.pub/post/43651461 [https://infosec.pub/u/digicat] #blueteamsec