DEFCON is my once a year pilgrimage to spend a lot of time at the hacking villages and workshops learning … Continue reading DEFCON 26

August, time for Hacker summer camp in the city of Las Vegas. In a space of 2 weeks, BSidesLV, Blackhat … Continue reading Blackhat 2018

Patch Patch Patch! http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html Continue reading Apache Struts 2 – Patch is out

CCleaner a popular application used to remove old legacy or stubborn drivers has been compromised by malware according to Cisco … Continue reading Popular driver cleaner compromised

Just released from Microsoft! Windows Server 2016 Security Guide which contains the usual hardening steps for the new 2016 editions … Continue reading MS Windows Server 2016 Security Guide

I am in support of David’s hunting model. This is a good read: A Simple Hunting Maturity Model http://detect-respond.blogspot.com/2015/10/a-simple-hunting-maturity-model.html Credits: … Continue reading Simple hunting model – David Bianco

Hi friends, I did an interview with CSO Online on Threat Hunting. Please review and send comments and feedback to … Continue reading Threat Hunting – My interview with CSO Online

So Alex Ionescu posted this morning about a remote execution via regsvr32. I tested the POC and what do you … Continue reading Regsvr32 running remote script bypassing APPLOCKER