The Cyber Threat Perspective
SecurIT360
Step into the ever-evolving world of cybersecurity with the offensive security group from SecurIT360. We’re bringing you fresh content from our journeys into penetration testing, threat research and various other interesting topics.brad@securit360.com
Episodes
Mentioned books
May 6, 2022 • 27min
May 6th, 2022 - Cyber Threat Perspective - Week in Review
In this week's review:Detecting SharpHound using DecoysUNC3524: Eye Spy on Your Email | MandiantThe New Initial Access Trend: ZIPs, ISOs & LNKsUnauthenticated RCE in F5 BIG-IP CVE-2022-1388Blog: https://offsec.blog/Youtube: https://www.youtube.com/channel/UCCWmudG_CTNAFBaV48vIcfwTwitter: https://twitter.com/cyberthreatpovWork with Us: https://securit360.comBlog: https://offsec.blog/Youtube: https://www.youtube.com/@cyberthreatpovTwitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇Spencer's Links: https://go.spenceralessi.com/links Work with Us: https://securit360.com | Find vulnerabilities that matter, learn about how we do internal pentesting here.
Apr 27, 2022 • 24min
Threat Intel Flash Briefing - Kerberos Relaying to Local SYSTEM
Explore the alarming vulnerability in Windows domain environments related to Kerberos relaying, where simple misconfigurations can lead to serious privilege escalation. Learn about unexpected security risks stemming from standard domain users being able to create machine accounts. Discover key strategies to mitigate these threats, including important adjustments to machine account quotas. The discussion emphasizes the simplicity of these attacks and the critical need for improved awareness and defense mechanisms to safeguard against exploitation.
