Cobalt Strike

Cobalt Strike: The New Favorite Among Thieves

| | Blog, case-study, Cobalt Strike, Cyber Security, Cybersecurity, research, use case
By Chris Gerritz Since 2012, Cobalt Strike has been utilized as a proactive way of testing network defenses against advanced threat actor tools, tactics, and procedures (TTPs). The aim, of course, is ...
Blog – Infocyte
DNS over TLS and DNS over HTTPS

DNS over TLS and DNS over HTTPS

| | Brave, Chrome, CloudFlare, Cobalt Strike, Command And Control, Corelight Labs, dns, DoH, DoT, Firefox, Godlua, goDoH, HTTPS, json, json+https, Malware, network security monitoring, network traffic analysis, opera, PsiXbot, TLS, TLS 1.3, Zeek
By Jamie Brim, Corelight Security Researcher In this post, we’ll explore DNS over TLS (DoT) and DNS over HTTPS (DoH). DoT and DoH were invented to address privacy concerns associated with cleartext ...
Bright Ideas Blog
fileless malware

Adobe Patches Actively Exploited ColdFusion Zero-Day Flaw

| | Cobalt Strike, ColdFusion, emergency patch, FIN6, FrameworkPOS, memory scraping malware, point-of-sale systems, Remote Code Execution, upload restriction, Zero-day Vulnerability
Adobe Systems released an emergency update for the ColdFusion application server to fix a critical remote code execution that’s already being exploited by attackers. The vulnerability, tracked as CVE-2019-7816, is located in ...
Security Boulevard