[Private] [German] [Non-IT] My wife is releasing her new book on 14th Feb. Today is the cover reveal! Another amazing achievement for her :)
#SaaS compromises are often alien to security analysts. Here we walk through a real-life multi-account compromise in O365 in detail:
darktrace.com/en/blog/saa-s-…
From an interview of one of the #REvil operators: Hacking cyber insurers first, working through their customer list, then ransoming the insurance company themselves.
therecord.media/i-scrounged-…
Replying to @BuchananBen @CSETGeorgetown
I mapped the ML methods and the kill chain phases explained in the paper into an infographic. May it help fellow visual thinkers!
Interesting work from @CSETGeorgetown, @BuchananBen et al, thanks for sharing! cset.georgetown.edu/wp-conte…
Great to see a realistic view on this. I tried to put your combination of ML & attack phases into an infographic. May it help visual thinkers like myself. More below 👇👇
Replying to @anton_chuvakin
Just saw this, late to the show. I've approached the problem from a slightly different perspective, trying to identify the detection challenges chronologically in a cyber attack:
Replying to @TaniaLatici @EP_ThinkTank
Great paper!
You can tell it is about cyber if Sun Tzu is cited at least once ;)
Interesting to see that #APT29 used perimeter exploits for initial access. We've seen the same behaviour from other APT groups in the last few months.
ncsc.gov.uk/files/Advisory-A…













