PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

BloodHound versus Ransomware: A Defender’s Guide

specterops.io | incident
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Learn how BloodHound can help defenders proactively eliminate attack paths in Active Directory, reducing the risk of ransomware attacks on your organization.
Published
Collected

Related coverage

incident · yeswehack.com
Don’t eat the ChocoPoCs! How vulnerability researchers were repeatedly targeted by trojanised exploits
Trojanized proof-of-concept exploits turn the vulnerability-research workflow itself into an attack surface. Researchers should isolate, inspect and verify exploit code before execution.
incident · aikido.dev
Binance hack: how a compromised developer laptop can lead to a $6.3 billion breach
‍TL:DR: the $6.3 billion Binance hack may have started with a compromised DevOps engineer's laptop. Binance has since said its investigation found additional points of breach, and it has not said how the laptop was compromised. We see attacks on developer devices every day - just last week Aikido blocked nearly 500 malware attacks. Here is how one compromised laptop can lead to a service that moves money.
incident · aikido.dev
Popular code generator for TanStack Query hit by supply chain worm
This incident coverage highlights active npm package poisoning and practical supply chain defensive lessons.
incident · aikido.dev
Two popular Rust crates arrayref and append-only-vec compromised in Supply Chain Attack
This incident coverage highlights observed attacker activity and practical defensive lessons.
incident · aikido.dev
Keyv and friends compromised in active Shai-Hulud supply chain attack
Attackers hijacked the maintainer account behind keyv (127M weekly downloads) and its caching-package family, injecting a credential-stealing Shai-Hulud worm that spread to 444+ npm packages.
incident · aikido.dev
Four incident-response decisions from the Hugging Face breach
The incident shows how thousands of individually weak agent actions can assemble into a multi-day compromise. Runtime correlation, credential lineage, canary signals and rebuild readiness are essential when machine-speed activity overwhelms conventional alert thresholds.
Back