Threat Intelligence
Detect Pass-the-Hash Attacks: Logs, Signals and Blind Spots
Network authentication logs often hide pass-the-hash activity because they record successful logins without revealing the credential type used during the handshake.
lateral movement
Everything Sandbox Gazette has reported about lateral movement: 2 stories, newest first. Part of our Malware & Ransomware coverage.
Malware & Ransomware
Ransomware-as-a-Service: How the Business Model Changes Defense
The modular structure of ransomware-as-a-service shifts the attack burden to low-skill affiliates, making initial access brokers the true bottleneck for defenders.