Zane Lackey

Transparency in our digital infrastructure is crucial. Just as we insist on knowing the ingredients in our food, we must demand detailed 'receipts' for the complex software and hardware systems in our enterprise stack—including laptops, servers, networking devices, IoT, OT, GenAI and more.

10

1 Comment

Reachability analysis is the key to fighting alert fatigue.

2

RedTeam Tips: Orchestrating Chaos, Evading Defense Culture Dive deep into the strategies and tactics of Red Teaming with experts from Amir Gholizadeh from Hadess | حادث and Nima D. from Nova Groups. Read now: https://lnkd.in/d2fnnSYq Shellcode to ASCII string API Testing Tip Wmiexec Evasion Exfiltration DNS Linux Binaries Nameless Excel Macro Hiding Malware Using Shadow Copy Usermode EDR hook bypass Process Instrumentation Callback Overpass-the-Hash Reconnaissance Tips Process Injections Local Code Injection DLL Injection Remote Thread Injection Thread Hijacking Classic APC Early Bird APC MapView Injection Binary Proxy Execution Active Directory Reversible Encryption RPC Payload development in smb or webdav amsi one line bypass Transfer Dns in Linux Execute the exfil command and transfer its information with icmp #redteam #hackthebox #activedirectory #networksecurity #hardening #microsoftad #redteamguide #edr #evading #activedirectorysecurity #cybersecurity #offensivesecurity #oscp #ecptx #crtp #crte #crto #crts #cyberwarfare

88

2 Comments

Attribute-Based Access Controls or ABAC can require significant lift, but provide a scale advantage over time, said Sandy Bird, Co-founder and CTO, Sonrai Security. This was discussed on Defense in Depth “Scaling Least Privilege for the Cloud.” Thanks to our sponsor, Sonrai Security. Listen to the full episode: https://lnkd.in/g3YsuFJK #CISOseries #CISO #security #infosec #informationsecurity #cybersecurity

5

🚨 Your secrets may not be as safe as you think. This morning, we shared Aqua Nautilus' latest findings on widespread enterprise secrets exposure in leading Source Code Management Systems. Now, dive deeper into the research with our latest blog: 🔍 Uncovering hidden secrets 📖 Case studies from the wild 🔧 Why do secrets scanning tools miss secrets? 🌐 Secrets that are accessible via cached views of SCM platforms 🛡️ How to better protect your code and infrastructure Explore various strategies to uncover secrets that may otherwise be hidden for years, read here ➡️ https://lnkd.in/ekJKMQgW Catch Yakir Kadkoda live at #CloudNativeSecurityCon for a breakdown of the research! #AquaNautilus #PhantomSecrets #CommitOnceExposeForever

22

Ray Carreira, VP of Security at Andreessen Horowitz, said it best 👇 Security teams have been caught in a cycle of continually throwing headcount and resources at their challenges. AI presents a more effective approach: "A properly deployed AI camera will catch that person jumping over a fence in the middle of the night and send that information, if it's set up properly, and distribute it to all the key decision makers." Achieving real-time detections and efficient responses — all without having to build and staff a new command post: that's the power of AI.  💡 Here at Ambient.ai, our AI-powered platform empowers security teams to transform their operations from reactive to proactive. Learn more:  https://lnkd.in/dkxvSJP8

109

4 Comments

🚨 The New York Times' recent source code leak is a critical wake-up call for all organizations. Yakir Kadkoda, lead security researcher at Aqua Security, warns, “From this large amount of data, attackers can extract tokens and sensitive information, identify vulnerabilities by examining the code, and discover internal and external domain names and IP addresses.” Explore the full story on CSO Online to learn more about the impact and preventive measures 👉 https://lnkd.in/eUUJTPjX #NYT #github #cybersecurity

31

1 Comment

Put some thoughts together on why traditional CA/CLM infrastructures fall short in dynamic, cloud-native environments. Purpose-built solutions like SPIFFE offer dynamic, attested identities, decentralized issuance, and granular policy enforcement, making them essential for modern workload credential management.

20

🌟 How are open-source collaborations shaping the future of Infrastructure-as-Code? Join us for a chat with Zach Goldberg of Gruntwork on the origins of #Terragrunt, its roadmap, why organizations are rapidly adopting OpenTofu, and more. Tune in now to this must-listen episode! ⬇️

13

Dapple Security just hit a major milestone! Raised $2.3M in Pre-Seed funding. Key points: 1. Focus: Protecting human digital identity. 2. Innovation: Passwordless platform. 3. Mission: Reduce data attack surface. Led by Gadalia Montoya Weinberg O'Bryan,the team is ready to revolutionize digital security. Imagine logging in securely without storing sensitive identity data. No more phishing or stolen credentials! Stay tuned for more updates from Dapple Security! What excites you most about a passwordless future? #TechInnovation #CyberSecurity #StartupSuccess #MondayFunding

36

6 Comments

In my latest blog post, I discuss the role of weak fingerprinting signals in the context of bot and fraud detection. I use the example of language-related signals to illustrate how even signals that may look insignificant can be leveraged to detect inconsistencies introduced by bot frameworks and anti-detect browsers. https://lnkd.in/eZ2hcKeH

35

4 Comments

Cloaked and covert... "Investigations into more recent operations in 2023 following fixes from the vendors involved in the investigation have corroborated Mandiant's initial observations that the actor operates in a sophisticated, cautious, and evasive nature. Mandiant has observed that UNC3886 employed several layers of organized persistence for redundancy to maintain access to compromised environments over time. Persistence mechanisms encompassed network devices, hypervisors, and virtual machines, ensuring alternative channels remain available even if the primary layer is detected and eliminated. This blog post discusses UNC3886's intrusion path and subsequent actions that were performed in the environments after compromising the guest virtual machines to achieve access to the critical systems, including: The use of publicly available rootkits for long-term persistence Deployment of malware that leveraged trusted third-party services for command and control (C2 or C&C) Subverting access and collecting credentials with Secure Shell (SSH) backdoors Extracting credentials from TACACS+ authentication using custom malware"

2

💡 ICYMI: Check out Claroty CEO Yaniv Vardi's essay "Application Security in Cyber–Physical Systems" on O'Reilly. In this go-to guide, editors Reet K. and Yabing W. share key concepts, up-to-date best practices, and cutting-edge tools that today's cyber professionals need to ensure solid application security. Read now: https://hubs.li/Q02CMrFL0

31

13 Comments

"Instead of risking security or slowing down operations by allowing or blocking by default, Garrison introduces a new option: "sanitize by default." Read the interview with Adam Maruyama, Field CTO at Garrison, from our latest quarterly issue here: https://bit.ly/4agAfTl, and download the full free publication here: https://bit.ly/49g44mH #TAGInfosphere #Cybersecurity #AI #MachineLearning

3

Tomorrow! Catch Sandeep Kamble and Karen Hsu as they break down the ultimate playbook to securing mobile privacy! Seats are filling fast, so be sure to register: https://lnkd.in/eEWCBXys #Appdome #mobilepentest #penetrationtesting

15

📢 #RSAC is coming in hot! 📢 If you'll be there – and you're looking to bolster every aspect of your identity protection – make sure to stop by booth #3333 to meet the team. You should also head over to Senior Security Researcher, Dor Segal's talk on bypassing modern authentication methods to SSO at 10:50am on Monday, May 6th. In this session, Dor will explore the strengths and weaknesses of passwordless authentication, WebAuthn protocol fundamentals, and famous attack tactics such as MITM and session hijacking to bypass different authentication mechanisms. Find out more about the session here 👉 https://lnkd.in/ejzeg2Nw

35