RedTeam

Here’s what happens if you don’t layer network security – or remove unused web shells

by

November 21, 2024 at 08:18PM The US Cybersecurity and Infrastructure Agency (CISA) simulated a cyber attack on a critical infrastructure provider, exploiting vulnerabilities to gain extensive access. They highlighted lessons learned, emphasizing the need for better detection controls, ongoing staff training, and leadership to prioritize addressing known vulnerabilities to prevent future breaches. ### Meeting Notes … Read more

The ROI of Security Investments: How Cybersecurity Leaders Prove It

by

November 11, 2024 at 06:42AM Cybersecurity is increasingly vital for businesses, focusing on validating security measures against real-world threats. Shawn Baird from DTCC emphasizes how Automated Security Validation tools enhance productivity and reduce reliance on costly contracting. The gradual implementation builds trust, optimizing staff resources and improving risk management, thus driving strategic budgeting and compliance … Read more

WhiteRabbitNeo: High-Powered Potential of Uncensored AI Pentesting for Attackers and Defenders

by

October 30, 2024 at 07:16AM Version 2.5 of WhiteRabbitNeo emulates a skilled red team expert, efficiently identifying and exploiting vulnerabilities. This advanced AI pentesting tool offers significant capabilities for both attackers and defenders, emphasizing its high-powered potential in the cybersecurity landscape. **Meeting Takeaways:** 1. **Product Overview**: Version 2.5 of WhiteRabbitNeo has been developed to emulate … Read more

Bad Actors Manipulate Red-Team Tools to Evade Detection

by

October 16, 2024 at 04:09PM EDRSilencer, an open-source tool used in red-team operations, is being exploited by threat actors to disable security alerts and evade detection by blocking 16 common EDR tools. This shift enhances stealth for malicious activities, prompting researchers to advise organizations to adopt advanced detection and threat-hunting strategies. ### Meeting Takeaways: 1. … Read more

Red team hacker on how she ‘breaks into buildings and pretends to be the bad guy’

by

September 29, 2024 at 12:45PM Alethe Denis, a senior security consultant at Bishop Fox, specializes in physical security assessments and social engineering attacks. Denis and her team break into buildings by impersonating employees or vendors to access corporate networks and steal data. Despite AI and deepfake advancements, human interactions remain the most effective tactic for … Read more

Cybersecurity Researchers Warn of New Rust-Based Splinter Post-Exploitation Tool

by

September 25, 2024 at 10:21AM Cybersecurity researchers discovered a new post-exploitation tool, Splinter, with features commonly found in penetration testing tools, developed in Rust. While not as advanced as others, it poses a threat if misused. No threat actor activity has been detected, but its large size suggests potential for cloud and data compromise. This … Read more

Dark Reading Confidential: Pen Test Arrests, Five Years Later

by

September 10, 2024 at 10:36AM Becky Bracken, Senior Editor at Dark Reading, hosted a podcast discussing the aftermath of the pen test arrest of cybersecurity professionals, Gary De Mercurio and Justin Wynn. They were arrested during an authorized pen test at a courthouse in Dallas County, Iowa. The incident highlighted the importance of physical penetration … Read more

CISA broke into a US federal agency, and no one noticed for a full 5 months

by

July 12, 2024 at 02:10PM CISA’s SILENTSHIELD exercise detected major security lapses at a federal agency in 2023. A red team exploited an Oracle Solaris vulnerability, leading to a full compromise. Despite timely alerts, the patch was delayed, and the agency ignored crucial investigation procedures. CISA’s report revealed poor network safeguards and a lack of … Read more

CISA Red Team Exercise Finds Critical Vulnerabilities in Federal Civilian Agency

by

July 12, 2024 at 10:33AM In early 2023, a CISA red team exercise exposed significant cybersecurity gaps in a federal civilian executive branch organization. The SILENTSHIELD assessment revealed the organization’s failure to prevent and identify malicious activity, insufficient network segmentation, deficient log collection, and use of a ‘known-bad’ detection approach. Additionally, bureaucratic communication and decentralized … Read more

AI red-teaming tools helped X-Force break into a major tech manufacturer ‘in 8 hours’

by

May 13, 2024 at 10:09AM IBM’s X-Force penetration-testing team employed AI-driven tools to hack into a major computer component manufacturer’s network within eight hours. Using automation, they exploited a flaw in the manufacturer’s HR portal, escalated privileges, and utilized a rootkit to avoid detection. The team is also helping other technology providers, banks, and defense … Read more