Really excited about our partnership with @rubrikInc!
IOC scanning your backups using @Mandiant threat intelligence is game changing for #Ransomware recovery. It is very common to see victims restoring most recent backups before encryption, unwittingly also restoring attacker backdoors.
With Rubrik, you can now scan your backups before restoring, overcoming the need to "clear" systems before putting back into service. This will shave days off recovery!
Also it's great to work with @stonepwn3000 again
businesswire.com/news/home/2…
Don't miss this one!
🔎 Hunt down threats before they strike!
Join our webinar with frontline experts and discover real-world examples to uncover and respond to attacks.
Register Now: bit.ly/4aINDQ6
#Cybersecurity #CloudSecurity #ThreatHunting
Steve Elovitz retweeted
🔎 Hunt down threats before they strike!
Join our webinar with frontline experts and discover real-world examples to uncover and respond to attacks.
Register Now: bit.ly/4aINDQ6
#Cybersecurity #CloudSecurity #ThreatHunting
Looking for a strong #dfir IR leader for a US east nightshift role. Happy to include even sending folks to Hawaii to make the time requirement easier. OK with remote or in office if preferred. DM me or apply:
google.com/about/careers/app…
Steve Elovitz retweeted
🚨 NetScaler vulnerability CVE-2023-4966 is being actively exploited. It can lead to VDI session hijacking, including MFA bypass. There are no logs on the appliance to monitor for exploitation. Upgrade now and investigate your environment!
mandiant.com/resources/blog/…
#DFIR
Steve Elovitz retweeted
Today we launched a 🔎 scanning tool for orgs to search their Citrix netscalers for evidence of CVE-2023-3519 post-exploration. You can run this direct on the ADC or against a forensic image. With public POCs out there expect more exploitation!
mandiant.com/resources/blog/…
#DFIR
Happy to announce that we are looking for more red teamers @Mandiant. Check out our job postings in the NOVA/DC and Atlanta areas:
google.com/about/careers/app…
google.com/about/careers/app…
google.com/about/careers/app…
#jobposting #redteam #pentester #cybersecurity
Seeing a rash of baseless #extortion attempts targeting enterprises. @coveware has a good roundup of common templates here: coveware.com/blog/2019/11/19…
I've spent most of my career figuring out how criminals break into systems. It has been refreshing to also focus on helping organizations build better systems with more effective defenses.
Under one roof @Mandiant can bring: The Threat Intelligence to know which controls matter most to mitigate risk, the architects to design the controls, the engineers to implement the controls, and a world class red team to test the implementation.
Here is the first of a series of blogs where the team will walk through our approach. Stay tuned for more!
mandiant.com/resources/blog/…
Steve Elovitz retweeted
Felicidades @belisarioc @VenableLLP por convocar a quienes lideran estrategias y acciones para enfrentar retos de #ciberseguridad en #Latinoamérica
Tecnología sí, además: colaboración público-privada, talento especializado, gobernanza de datos
@Mandiant @googlecloud ☁️
(1/3)
@Mandiant identified a novel malware ecosystem impacting VMware ESXi, Linux vCenter servers, and Windows virtual machines that enables a threat actor to take the following actions:
(3/3)
Full details: mandiant.com/resources/blog/…
#dfir Detection and Hardening: mandiant.com/resources/blog/…
Super proud of
@MarviMalware
and the team here on the finds and detailed analysis work into this sophisticated attack.