Zero Networks retweeted
I was going to write something, but @SwiftOnSecurity said it better: the answer to offensive cyber AI is doubling down on fundamentals.
Containment (= network + privileges) is the lever.
@ZeroNetworks' report (FD: I'm an advisor) shows we still have a lot of work ahead of us.
Today we're releasing the ๐๐๐๐ ๐๐๐ญ๐๐ซ๐๐ฅ ๐๐จ๐ฏ๐๐ฆ๐๐ง๐ญ ๐๐ฑ๐ฉ๐จ๐ฌ๐ฎ๐ซ๐ ๐๐๐ฉ๐จ๐ซ๐ญ โ the first benchmark measuring how far breaches actually travel inside live enterprise networks. ๐
As AI accelerates attacker speed and expands the internal attack surface, the data shows how exposed most enterprises already are: 80% of enterprise servers are reachable from anywhere inside your network. 87% accept inbound RDP or SSH from broad internal sources. The blast radius is bigger than most organizations realize โ and most can't even see it.
That's why we built Breach Map. It's a free tool that shows you exactly how far a breach could travel in your environment, before attackers find out first.
Dmitri Alperovitch, Co-Founder of CrowdStrike and current President of Silverado Policy Accelerator, put it best: "The organizations that adapt fastest will shift from perimeter-only thinking to containment: limiting lateral movement, reducing blast radius and ensuring attacks cannot bring down a business."
Read the press release โ businesswire.com/news/home/2โฆ
Get the report โ zeronetworks.com/resource-ceโฆ
Map your blast radius โ zeronetworks.com/resource-ceโฆ
Zero Networks retweeted
The latest episode of The Phillip Wylie Show features Nicholas DiCola from @ZeroNetworks! Nicholas shares career advice and information on micro-segmentation and #zerotrust.
YouTube: youtu.be/th14aaSNJxE
Spotify: open.spotify.com/episode/0z5โฆ
Zero Networks retweeted
Nice work by @YaronZi & @CrowdStrike promoting LDAP Security to detect suspicious LDAP activities.
crowdstrike.com/en-us/blog/iโฆ
Maybe someone wants to slap an AI agent on their #LDAPFirewall for similar results? :)
github.com/zeronetworks/ldapโฆ
Zero Networks retweeted
WATCH: @ZeroNetworks' Benny Lakunishok discusses the unpredictable challenges of founding a startup. #cybersecurity #infosec #ITsecurity READ MORE HERE: bit.ly/49iah2Q
bit.ly/3CTywrX
Zero Networks retweeted
#ShadowHound by @yudasm_ evades EDRs by operating as a PS module & using a stealthy LDAP search query.
๐จBlock it with our free #LDAPFirewall tool!
github.com/Friends-Security/โฆ
Zero Networks retweeted
Replying to @DEATHCon2026
@DEATHCon2024 weekend is done, with a ton professional, hands-on workshops.
Even if you don't have access to the conference, we wanted to make the workshop available for any #ThreatHunter who wants to try out our #LDAPFirewall & #RPCFirewall
youtu.be/hJyIpma6CYo
Zero Networks retweeted
In this @DEATHCon2024 , @dekel_paz and @SagieDulce will show how #RPCFirewall & #LDAPFirewall capture potentially malicious activities on the DCs.
If you configure our tools right, you're a simple Sentinel query away from detecting (and the next step is stopping) attacks!
Zero Networks retweeted
Everything is ready to go for @DEATHCon2024!
Join @dekel_paz and @SagieDulce for their workshop: ๐๐ง๐๐ซ๐๐ฃ๐ฉ๐๐ค๐ฃ ๐๐ฃ๐๐๐ฃ๐๐๐ง๐๐ฃ๐ via #LDAPFirewall and #RPCFirewall.
See how to start stopping - instead of just responding (too late) to attacks.
deathcon.io/
Zero Networks retweeted
How #PreventionEngineering is used to stop #ADCS ๐๐๐ซ๐ญ๐ข๐๐ข๐๐ ๐๐ซ๐-๐๐ฐ๐ง๐๐ attacks?
@SagieDulce demos how attacks via #Certify and other tools are mitigated with the #RPCFirewall, #LDAPFirewall and #NetworkSegmentation.
Read more here:
hubs.li/Q02PlSxC0
Zero Networks retweeted
The LDAP Firewall version was bumped to v1.0, as we are confident in the maturity of the tool to perform well in production environments
New in this version - support for Windows 2022 DC servers on Azure
Grab it here -> github.com/zeronetworks/ldapโฆ
Zero Networks retweeted
Replying to @TrustedSec
@TrustedSec's excellent writeup by @4ndr3w6S & Megan Nilsen on DACL detections - gave us an appetite for DACL ๐ฉ๐ซ๐๐ฏ๐๐ง๐ญ๐ข๐จ๐ง๐ฌ. @dekel_paz explains the way to prevent DACL based #LDAP attacks via the #LDAPFirewall๐ฅ
hubs.li/Q02Bvs7Y0
#Red_Team_Tactics
Zero Networks retweeted
Exciting news! @ZeroNetworks is named a winner at the 12th Annual Global Infosec Awards 2024! Keep striving, keep innovating, and keep inspiring. The cyber-world is excited about your next breakthrough!" #GIAWinners #GlobalExcellence #RSAC ๐๐
Zero Networks retweeted
#RPC is not only used for #LateralMovement, but also for a myriad of local evasion and privilege escalation techniques.
Detecting PID spoofing on a host is a challange, but #prevention of remote RPC attacks using the #RPCFirewall is a breeze ;)
ow.ly/cpCe50QLC99
Zero Networks retweeted
Replying to @hackthebox_eu
@hackthebox_eu module Windows Attacks & Defenses showing how to #prevent coercing & unconstrained delegation attacks: besides blocking outbound connections to 139 & 445 ports on sensitive severs, #RPCFirewall is the only prevention method.
#Coercer #Rubeus #Mimikatz
Zero Networks retweeted
Very cool to see #RPCFirewall referenced in learning materials.
@hackthebox_eu great module on Windows attacks & Defenses discusses #DCSync mitigations.
๐ก๏ธ #RPCFirewall is the only prevention method ๐ก๏ธ
Zero Networks retweeted
๐A nice shortlist about various #lateralmovement techniques.
Also includes links to mitigations (hint, most can be mitigated via the #RPCFirewall)
#PetitPotam #Coercer #NTLM
ow.ly/WjsW50Qx6El
Zero Networks retweeted
#LDAPFW has received some major updates, including a persistence mechanism (install #LDAPFW as a Windows service), improved rule matching for incoming requests, and general Quality-of-Life and debugging enhancements
Check out the latest release on github.com/zeronetworks/ldapโฆ
Zero Networks retweeted
Replying to @dekel_paz
@dekel_paz presenting #BlueHound last month in @BlackHatEvents Europe 2023. What a way to close the year!
If your New Yearโs resolutions include leveling up your network resilience, #BlueHound will help you find the security issues that actually matter. github.com/zeronetworks/Blueโฆ
Zero Networks retweeted
New #RPCFirewall version is out, introducing the "show" command.
The "show" command will help you gather info on RPC-related things.
You can now use the show command to see which processes are running as protected.
More to come... :)
ow.ly/SJVu50Qqg30



















