Halkyn Consulting

Professional security consultancy based in North Wales and providing services UK wide.

[Halkyn Consulting @HalkynSecurity]

Ransomware: Don't panic - deal with it https://t.co/U4yTrb4XI9 #CyberEssentials #InformationSecurity #malware #Ransomware #Security

[Eric Vanderburg @evanderburg]

U.S. DoJ Dismantles Warzone RAT Infrastructure, Arrests Key Operators https://t.co/V258EaT5FK

[SwitHak (👁) @SwitHak]

2023 Zero-day vulnerabilities Summary
R1 - 14 Jan 2024
H/T @uuallan @pancak3lullz for the original idea
(I was missing yours, so I made my own but included all zerodays, not just initial access for ransomware as the original was.)

[Kevin Holvoet @digihash]

Come and join our #Cybersecurity #summit this Thursday and Friday online (UTC+1): https://t.co/EsEgFzZbYk. I'll be moderating the #CTI track with these amazing speakers during the live stream: @paulvixie @stefant @trompi @craiu @FDezeure @netnod @juanandres_gs and many more!

[The Hacker News @TheHackersNews]

⚠️ A new exploitation technique called '📩 SMTP Smuggling' could let attackers send malicious emails with fake sender addresses while bypassing security measures.

Read more 👉 https://t.co/Y5OWE5ZA1X

#infosec #cybersecurity #hacking

[Halkyn Consulting @HalkynSecurity]

Protect Your Business with Our Premier Incident Response Service!

#cybersecurity #infosec #dfir

https://t.co/a7MI6HmOPb

[Jai Minton @CyberRaiju]

It took me almost 3 years, but I finally restructured the Practical Malware Analysis section of my site. This is now broken up into more digestible sections, and I've also revamped the MITRE ATT&CK tests to come with appropriate categories and tagging.
https://t.co/LDjOg5PObk

[Halkyn Consulting @HalkynSecurity]

Cyber security people: Ever heard the term "VAD tree" and wondered what it meant?

Check this out for an easy-to-read explanation: https://t.co/IzIZkW0dFQ

[Halkyn Consulting @HalkynSecurity]

Linux Incident Response - introducing objdump.

#Linux #DFIR #Forensics

https://t.co/0z1W3HrLLX

[Mynydd Isa FC @MynyddIsaFC]

U19s ⚽

MIFC vs. @CPDCaerwysFC
📅 Saturday 10th September 2023
⏰ 13:30 kick off
🏟️ Argoed Sports Club, CH7 6SZ
🏆 @FlintshireJnrFL Youth League
💵 Free entry
Match Sponsor: Margden Heating

Please show the lads your support as they begin their league campaign! #uptheisa 🟡⚫

[Mynydd Isa U19 @IsaSpartans18s]

🚨Sponsor Appreciation Post🚨

A big thankyou to our sponsors this season: @HalkynSecurity, OMS, LP Builders and @MaestrosMaking. It means a lot to have your support on the shirt and on the sideline.
On behalf of coaches and players, a huge thank you. We are incredibly grateful

[Nina Turner @ninaturner]

Good.

[Zach @svch0st]

1/ Windows Error Reporting (WER) can provide investigators with a wealth of data including:
• SHA1 hashes of crashed processes
• Snapshot of process trees at time of crash
• Loaded modules of crash
• Process minidumps
#DFIR #Threathunting
See 🧵 for new #Velociraptor artefact

[Michael Koczwara @MichalKoczwara]

Additional BR C4

18.176.11.157
3.113.109.1
164.90.181.205
142.93.230.121
13.82.141.216
spectrumofinnovation.]org
152.67.78.82
170.254.185.1
3.27.18.66
20.74.155.146
52.199.127.115
54.92.22.199
85.208.22.36

[Halkyn Consulting @HalkynSecurity]

Undetected and undetectable are different things.

[The Register @TheRegister]

Near-undetectable malware linked to Russia's Cozy Bear https://t.co/kDOohEmw7v

[Unit 42 @Unit42_Intel]

Threat actors using nation-state tradecraft have begun to adopt the pentest tool #BruteRatel C4 https://t.co/C11ZqoGxXi

[Intel 471 @Intel471Inc]

Catch @Intel471Inc presenting at the @SANSInstitute #RansomwareSummit this week! Intelligence analysts Samantha Van de Ven & Beth Allen will be presenting research on Access Brokers and Threat Actor Partnerships on June 16th at 10:00 am ET. https://t.co/IpTAzuvW8M

[Dray Agha @Purp1eW0lf]

There are lots of blue team guides for monitoring & detecting, but there's not much on what to actually DO when you catch an active adversary.

This article's small contribution is to help you evict the adversary in your environment 🧵

https://t.co/HQY0nFFqH5

[Jamie Levy🦉 @gleeda]

This thread is 🌶🔥🌶🔥🌶 #dfir

[briankrebs @briankrebs]

1/ So you go shopping for a PIV card reader, because the US govt gave you one and you're curious to look at what's on it. You settle for this "DOD military USB common access smart card reader," because it's compatible with Mac OS. Cool! Only $15! What a bargain!