Check out the new #JCDC water sector incident response guide from Cybersecurity and Infrastructure Security Agency! Using input from Mandiant (part of Google Cloud)'s responders, this guide assists owners and operators in this sector with cyber resources.

A low radar attack by Midnight Blizzard: Guidance for responders on nation-state attack by Microsoft Threat Intelligence #infosec #apt #Espionage microsoft.com/en-us/security…

FBI and CISA publish guide to Living off the Land techniques #infosec #livingOffTheLand malwarebytes.com/blog/news/2024…

Riding Dragons: capa Harnesses Ghidra #infosec #flare #malware #reverse mandiant.com/resources/blog…

New Blog! Lessons from the iSOON Leaks blog.bushidotoken.net/2024/02/lesson…

Excellent ! Data structuring, visualisation and communication. Mastering Cyber Threat Intelligence with Obsidian. Utilize Obsidian to transform your CTI dataset and uncover unprecedented connections #infosec #cti #obsidian bank-security.medium.com/mastering-cybe…

Responding to a cyber incident – a guide for CEOs. Guidance to help CEOs in public and private sector organisations manage a cyber incident by NCSC #infosec #cyber #incident #response ncsc.gov.uk/guidance/ceos-…

How to cope with frustration in infosec ? A way of explaining why security's baseline is so low in places, and why it's so hard to raise. Here are the Efficient Security Principles via ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ #infosec #principles #baseline danielmiessler.com/p/efficient-se…

5 Steps for Creating an AppSec Program : Threat Model -> Design -> Scan -> Scale -> Run the program #infosec #cybersecurity pulse.latio.tech/p/latio-pulse-…

AWS’s head of security shares 7 reasons why security will always be Amazon’s top priority #infosec #cybersecurity #ciso #vision aboutamazon.com/news/aws/aws-s…

At many companies, people spend around 80% of their time in meetings or answering colleagues’ requests, leaving little time for all the critical work they must complete on their own. s.hbr.org/3j4ZTS1

Detection Engineering Behavior Maturity Model elastic.co/security-labs/…

Excellent : Evil MSI. A story about vulnerabilities in MSI Files. Many thanks CICADA8Research #infosec #windows #msi cicada-8.medium.com/evil-msi-a-lon…

Over 90 million French records exposed: mysterious data hoarder leaves instances open #infosec cybernews.com/security/frenc…

Cybersecurity burnout is a real risk #infosec #cyber #burnout eyal-estrin.medium.com/cybersecurity-…

The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access. #infosec #APT #TTP volexity.com/blog/2024/11/2…

Foundations for modern defensible architecture #infosec #cyber #defensible #zta #architecture cyber.gov.au/resources-busi…

CERT-FR said that Apple notified users of a new spyware campaign a week earlier and urged all individuals in France who received this notification to contact them immediately. #infosec #vulnerabilty infosecurity-magazine.com/news/france-ap…

Modern Adversary TTPs: The Rise of 'Read Teaming' -deceptiq deceptiq.com/blog/rise-of-r…

How Google Does It: Building AI agents for cybersecurity and defense #infosec #agentic #cyber cloud.google.com/transform/how-…