We observed an attacker #VPN directly into an internal network to bypass preventive security & then create a digital skeleton key to gain admin access across the entire network. Is your #remotework force secure? Read our full analysis >> ow.ly/mKa950zgD2c

See you at Blue Team Summit!

I'll be presenting at #HITB2023HKT, discussing how we leverage LLM as active directory security assistant.

Again Best Checklist IDOR: ⚡️ #infosec #cybersec #bugbountytips

I am honored that our submission was accepted for TROOPERS. Looking forward to Heidelberg next month!

Today at #Troopers24 we released Certiception – the ADCS honeypot we always wanted to have. Blog: srlabs.de/blog-post/cert… Source code: github.com/srlabs/Certice… Slide deck, including our guide to deception strategy: github.com/srlabs/Certice…

This is exactly why recovery from APT is difficult: they have multiple vantage points to get inside your network once they're in, lateral mouvement is deadly slideshare.net/FrodeHommedal/… by Frode #Fella 🇺🇦🇳🇴🇨🇦

[Blog] Lateral Movement Using Outlook’s CreateObject Method and DotNetToJScript posts.specterops.io/lateral-moveme…