PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Trick or treat: 5 spooky phishing stories

bugcrowd.com | blog | #supply-chain | #phishing | #bugcrowd | #case-studies | #bec | #usb-drop-attack | #solarwinds
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A Halloween roundup of real incidents: the USB drop attack that crippled Saudi Aramco, the Ubiquiti BEC scam costing over $40 million, and the SolarWinds supply chain compromise, each with lessons.
Published
Collected

Related coverage

blog · jfrog.com
Lessons from the SolarWinds Breach: A Discussion With CISO Tim Brown
Former SolarWinds CISO Tim reflects on the historic Sunburst breach, fighting SEC charges, and securing the build pipeline against emerging AI threats.
research · volexity.com
Responding to the SolarWinds Breach: Detect, Prevent, and Remediate the Dark Halo Supply Chain Attack
Earlier this week, Volexity published a blog post providing details observed from multiple incident response efforts involving Dark Halo, the group tied to the SolarWinds breach. Since publication, Volexity has fielded and […]
blog · bugcrowd.com
Behind the scenes of PHP2Shell: What the last 72 hours taught us
PHP2Shell hit fast. Bugcrowd’s CISO shares what 72 hours of response taught us, plus three lessons for CISOs facing the next critical vulnerability.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · bugcrowd.com
Weird ways to hide shellcode
Discover a novel red teaming technique for hiding shellcode inside procedurally generated mazes, using shortest-path algorithms to disguise payloads from EDR and antivirus detection.
blog · bugcrowd.com
How to choose the right live hacking event for your organization
"ot sure which live hacking event fits your program? Compare Virtual, Live in the Loop, Bug Bash, and ReCON to find the right format, scope, and budget.
Back