Out of the Woods: The Threat Hunting Podcast Out of the Woods: The Threat Hunting Podcast

Black Hat 2024 Training with Lee Archinal
"A Beginner's Guide to Threat Hunting: How to Shift Focus from IOCs to Behaviors and TTPs"
Early registration closes on May 24, 2024! Secure your spot now at a discounted rate:
*3-4 Aug 2024: Sign Up Here!
*5-6 Aug 2024: Sign Up Here!

-----




Top 5 Threat Hunting Headlines - 22 May 2024



1. Kandji | Malware: Cuckoo Behaves Like Cross Between Infostealer and Spyware
https://blog.kandji.io/malware-cuckoo-infostealer-spyware
2. Rapid7 | Ongoing Malvertising Campaign Leads to Ransomware
https://www.rapid7.com/blog/post/2024/05/13/ongoing-malvertising-campaign-leads-to-ransomware/
3. Unit 42 | Payload Trends in Malicious OneNote Samples
https://unit42.paloaltonetworks.com/payloads-in-malicious-onenote-samples/
4. Check Point Research | Bad Karma, No Justice: Void Manticore Destructive Activities in Isreal
https://research.checkpoint.com/2024/bad-karma-no-justice-void-manticore-destructive-activities-in-israel/
5. Aqua Nautilus | Kinsing Demystified - A comprehensive Technical Guide
https://1665891.fs1.hubspotusercontent-na1.net/hubfs/1665891/Threat%20reports/AquaSecurity_Kinsing_Demystified_Technical_Guide.pdf


-----

Follow Us!




Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc

Top 5 Threat Hunting Headlines - 13 May 2024



1. Infosecurity Magazine | AI-Powered Russian Network Pushes Fake Political News
https://www.infosecurity-magazine.com/news/aipowered-russian-network-fake-news/?&web_view=true
2. Elastic Security Labs | Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part Two
https://www.elastic.co/security-labs/dissecting-remcos-rat-part-two
3. The Record | Cyberthreat Landscape Permanently Altered by Chinese Operations, US Officials Say
https://therecord.media/cyberthreat-landscape-altered-chinese-operations?&web_view=true
4. Elastic Security Labs | Dissecting REMCOS RAT: An in- depth analysis of a widespread 2024 malware, Part Four
https://www.elastic.co/security-labs/dissecting-remcos-rat-part-four
5. Help Net Security | How Secure is the "Password Protection" on Your Files and Drives?
https://www.helpnetsecurity.com/2024/05/10/password-protect-pdf-excel-files/?web_view=true


-----

Follow Us!




Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc

Top 5 Threat Hunting Headlines - 22 April 2024


1. The Record | NATO to launch new cyber center to contest cyberspace 'at all times'


https://therecord.media/nato-new-military-civilian-cyber-center-mons-belgium?&web_view=true
2. Securonix | Securonix Threat Research Knowledge Sharing Series: Detecting DLL Sideloading Techniques Found In Recent Real-world Malware Attack Chains

https://www.securonix.com/blog/detecting-dll-sideloading-techniques-in-malware-attack-chains/
3.  Darkreading | Evil XDR: Researcher Turns Palo Alto Software Into Perfect Malware

https://www.darkreading.com/application-security/evil-xdr-researcher-turns-palo-alto-software-into-perfect-malware?&web_view=true
4. HackTricks

https://book.hacktricks.xyz
5. CSA | Deploying AI Systems Securely

https://media.defense.gov/2024/Apr/15/2003439257/-1/-1/0/CSI-DEPLOYING-AI-SYSTEMS-SECURELY.PDF
-----

Follow Us!




Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc

Top 5 Threat Hunting Headlines - 15 April 2024


1. Volexity | Zero-Day Exploitation of Unauthenticated Remote Code Execution Vulnerability in GlobalProtect (CVE-2024-3400)


https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/
2. Trend Micro | Cyberespionage Group Earth Hundun's Continuous Refinement of Waterbear and Deuterbear

https://www.trendmicro.com/en_no/research/24/d/earth-hundun-waterbear-deuterbear.html
3.  The Cyber Express | FatalRAT Targets Cryptocurrency Users With DLL Side-loading Techniques

https://thecyberexpress.com/fatalrat-phishing-campaign/?&web_view=true
4. Elastic Security Labs | Linux detection engineering with Auditd

https://www.elastic.co/security-labs/linux-detection-engineering-with-auditd
5. NIST Special Publication | Incident Response Recommendations and Considerations for Cybersecurity Risk Management

https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r3.ipd.pdf


-----

Follow Us!




Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc

To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh

Looking to have your cyber security questions or insights featured on our next episode? Tag #OutOfTheWoodsPodcast on your socials when you share your thoughts. No question is too specific, no insight too niche—we're here for it all! 

------------

Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
TikTok: https://www.tiktok.com/@cyborgsecinc

**[LIVE] Out of the Woods Podcast Episode
April 4, 2024 | 7:00 - 8:30 PM ET
More Details/Registration 👇

https://info.cyborgsecurity.com/en-us/threathuntingpodcast-e15



Get your FREE HUNTER Community Account today! 👇

https://www.cyborgsecurity.com/user-account-creation/

-----

Follow Us!




Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc