Cyber Threat Intelligence Lab

Cyber Threat Intelligence Lab at the Hasso Plattner Institute. RTs ≠ endorsement

[Cyber Threat Intelligence Lab @cyberthreatlab]

Passionate about #CyberSecurity and interested in a deepening your security knowledge in a #PhD? Join the #CTI lab! Two weeks to go until the fall application for fully-funded #PhDposition: https://t.co/hJMPBEh6uB #AcademicTwitter

[SANS DFIR @sansforensics]

Join us at #CTISummit when Prof. Dr. Christian Doerr and @f00th0ld will share 6 #CTI challenges, their solutions, and practical takeaways to implement in your daily practice.

Learn more and register now for FREE: https://t.co/ngWsBki0nf
#threatintel

[Cyber Threat Intelligence Lab @cyberthreatlab]

Dozens of malware variants fight over unsecured IoT devices. In this week’s @acm_ccs, we present our findings on the ongoing battle over the Internet of Things, showing actor specialization, actors stealing devices from each other, and evolution over time

https://t.co/9DtlGlzvkQ

[ENISA @enisa_eu]

Breaking news📢: #ENISA has just published its 8th Threat Landscape report identifying & evaluating the top cyber threats from January 2019 to April 2020.

➡️Malware
⬆️Identity Theft
⬆️Phishing
⬆️Ransomware

Check out the full publication: https://t.co/wN9ukOtIxo #EnisaTL20

[Cyber Threat Intelligence Lab @cyberthreatlab]

What value does commercial #threatintel provide? Even when tracking the same threats, #CTI feeds show negligible overlap as this paper finds, raising the question of the visibility+coverage of the threat landscape
https://t.co/9gpbONaza2

[Cyber Threat Intelligence Lab @cyberthreatlab]

Is #CTI a product without a process? Lack of methodology, vendor transparency, sharing difficulties and accuracy is holding #threatintel back. This and more on current CTI challenges, see our article in the Journal of #Intelligence and CounterIntelligence https://t.co/jr6zZwwb5L

[Cyber Threat Intelligence Lab @cyberthreatlab]

Our quality evaluation of 1.3 million IoCs across 24 #CTI feeds shows malicious activity is active for avg. 21 days before being included, feeds show heavy bias and most IoCs will result in significant collateral damage. To increase your CTI posture, read: https://t.co/uYjPwqIJuJ

[Cyber Threat Intelligence Lab @cyberthreatlab]

This Thursday our team member Kris Oosthoek will give an interview on @BNR about his recent #CTI paper, where he analyzed the TTPs used in 36 hacks of #bitcoin exchanges between 2011-2019. https://t.co/ERPJsXV7KT

[Cryptocast @CryptocastNL]

Donderdag nemen @Misssbitcoin en @hmblank weer een Cryptocast op @BNR, met als gast @f00th0ld. Hij heeft onderzoek gedaan @tudelft naar #hacks van #exchanges: attack vector, #security, buit etc. Verslag zie link. Wie heeft er vragen over (eerst lezen ja)? https://t.co/pS7C9a4jXJ

[ENISA @enisa_eu]

Prof. Christian Doerr says “a successful #CTI programme has technical capabilities and is driven by the entire organisation: governance, people and technology are key assets” #CTI20 #threat #intelligence @DSMeu @Cybersec_EU

[Ruben Bouman @rubinatorz]

Nice publication from @f00th0ld and @cyberthreatlab: ATT&CK Techniques and Trends in Windows Malware (https://t.co/yESYmHfMAj).

Created an ATT&CK Navigator layer with DeTT&CT for this: https://t.co/N4oOB6xm5G

And also created a group YAML file:
https://t.co/WxOEKoZxnB

#CTI

[Cyber Threat Intelligence Lab @cyberthreatlab]

This Wed, our lab will present the evolution of 951 malware families over 10 years at #ATTACKcon. Join the talk on the livestream of @MITREattack where we show why automated malware analysis is an unsuited source for #threatintel by itself.
https://t.co/NfVFXYu6HF

[Cyber Threat Intelligence Lab @cyberthreatlab]

TTPs by a state actor - what we can learn from the #Mueller indictment in terms of #CTI #threatintel https://t.co/RajDSFaefX

[Cyber Threat Intelligence Lab @cyberthreatlab]

Excited to give a presentation on #CTI at the European CTI workshop in Brussels, organized by @enisa_eu! #threatintel #ctieu

[Cyber Threat Intelligence Lab @cyberthreatlab]

Richard Struse from MITRE makes the case at #OneConference for automation in #CTI generation and consumption; automatic, continuous emulated red teaming of your infrastructure will soon become an essential tool for organizations #Threatintel

[CyberSecurity@TUDelft @CyberSecTUDelft]

And also Christian Doerr @cyberthreatlab is present. It will be a full day and we are looking forward to seeing you there! #oneconference #cybersecurity

[Cyber Threat Intelligence Lab @cyberthreatlab]

Yesterday was the beginning of the #CTI course at #NISschool, where the CTI Lab opened the day with a lecture about what CTI is and why it is important. We are looking forward to more interesting talks and ideas that will be discussed today! #cybersecurity #ThreatIntel

[ENISA @enisa_eu]

Two days of intensive #NISSchool training sessions start today in Heraklion, with four available courses:
☑️IoT Security
☑️Incident handling
☑️Cyber Threat Intelligence
☑️Post-Quantum Cryptography. More info: https://t.co/SlqLmxofpF

[Cyber Threat Intelligence Lab @cyberthreatlab]

Today is the second day of the #NISschool, with very intereseting talks and speakers. Tomorrow will be the start of the Cyber Threat Intelligence course where experts will talk about the challenges that we face in #CTI at the moment and in the future. #ThreatIntel #cybersecurity

[Cyber Threat Intelligence Lab @cyberthreatlab]

Are you a student and interesting in learning about Cyber Threat Intelligence? Join the ENISA Summer School on Network and Information Security in the last week of September, featuring a two-day training on #CTI https://t.co/fpTIUo7dae #cyberthreatintelligence

[Cyber Threat Intelligence Lab @cyberthreatlab]

This week the First International Workshop on Cyber Threat Intelligence (WCTI) in Hamburg took place at #ares2018. 40 participants from academia, industry and government discuss latest innovations, big challenges and future directions in CTI https://t.co/BHq37yKDFe