Ashlee Benge

Astrophycist turned Director of Threat Intelligence @ReversingLabs. Formerly @cisco SecureX, @ZeroFOX, @TalosSecurity
Opinions are my own.

[CyberWire Daily, by N2K @thecyberwire]

#ResearchSaturday: @ashlee_benge of @ReversingLabs shares research "Operation Brainleeches: Malicious npm packages fuel supply chain & phishing attacks." Reecently discovered over a dozen malicious packages published to npm open source repository. Listen: https://t.co/kM1wkqqdt0

[Ashlee Benge @ashlee_benge]

Catch Karlo Zanki's analysis of some neat compiled python malware.

[ReversingLabs @ReversingLabs]

The @ReversingLabs #research team has identified a novel attack on #PyPI using compiled Python #code to evade detection — possibly the first attack to take advantage of PYC file direct execution. https://t.co/d4LasDJjB8

[Ashlee Benge @ashlee_benge]

Been a minute since I've been to a BSides - come see us next weekend!

[BSides Buffalo @BsidesBuffalo]

Just 8 more days until the second BSides Buffalo! I would again like to thank our sponsors for making it possible - we couldn't do this without your support. #FF

@securityonion
@sedarasecurity
@CorelliumHQ
@Optiv
@ReversingLabs
@PaloAltoNtwks
@EvansBankWNY
@GarlandTech

[Elizabeth Wharton @LawyerLiz]

Indeed - essays & insights from me & others incl @wendynather @sherrod_im @olafhartong @jamieantisocial @ashlee_benge @marcellelee @chrissanders88 @rickhholland @NicoleBeckwith fwd by @meansec, edited @nohackme @audrastreetman … thx @splunk 🥂

[Forgepoint Capital @forgepointcap]

Visit @ReversingLabs at #RSAC2023 Expo booth 5428 to chat about software supply chain security - then stay for a theater event!

#forgepointfamily #RSAC #rsa2023

[Ashlee Benge @ashlee_benge]

Not at #rsac this year, but delighted to have written a chapter of bluenomicon -- grab a copy at the @splunk booth!

[ReversingLabs @ReversingLabs]

Researchers @reversinglabs have been analyzing the attack on the @3CX #3CXDesktopApp, especially the d3dcompiler_47.dll. and ffmpeg.dll file, two malicious files pushed in the compromised MSI installer used in this attack.

[Cisco Talos Intelligence Group @TalosSecurity]

Congrats to the #ClamAV team on releasing version 1.0.0 of Talos' free, open-source anti-virus program!

[Cisco Talos Intelligence Group @TalosSecurity]

Join Talos in bringing awareness to #NCSAM with a #cybersecurity careers panel tomorrow October 12th at 12 p.m. ET

[Ashlee Benge @ashlee_benge]

If you use health or fitness data tracking apps of any kind, you should evaluate what those apps say about you and how the data they collect could be used against you.

[Ashlee Benge @ashlee_benge]

In a change of pace from more technical threat analysis, Jon Munshaw and I discuss rapidly changing health data privacy laws and what they mean for you (yes, you, who thinks they have nothing to hide) in the latest @TalosSecurity blog

https://t.co/O5DITjmuH5

[Ashlee Benge @ashlee_benge]

If you're a Ukrainian organization interested in support from Cisco and Talos, we're offering Secure Endpoint and Umbrella for free. We're also offering 24/7 managed threat hunting by Talos experts, also for free. Please reach out via any of our public channels.

[Ashlee Benge @ashlee_benge]

Today is Ukraine Independence Day -- so @dkorzhevin, JJ Cummings and myself had a chat with @hazeburton about Talos' continuing efforts in the region. The US media coverage has slowed recently but as long as the war is ongoing, Talos will continue our support.

[Cisco Talos Intelligence Group @TalosSecurity]

Ukraine Independence Day: Talos Update https://t.co/fejXmbNMW0

[Ashlee Benge @ashlee_benge]

@hazeburton I don't know if I would go that far but I do my best! So good to finally meet you in person!

[Cisco @Cisco]

Talos is taking over Cisco Twitter and we want to first say that we continue to proudly support the people of Ukraine by directly defending more than 30 critical infrastructure and government organizations, free of charge.

[Ashlee Benge @ashlee_benge]

Very excited to chat threat hunting with a group like this!

[Ryan K @meansec]

Yes, I am going to #blackhat2022 and #Defcon and I am super excited to be on a panel @BlueTeamVillage with @nohackme, @sherrod_im, @jamieantisocial, @ashlee_benge, and @seanzadig