@jarekceborski Worth noting that depending on your Dependabot config it may open a pull-request with the compromised package (need to define a cooldown period).
Defenders know their environments better than anyone, but they haven't been able to truly capitalize on that knowledge in email — until today.
Sublime Platform is now generally available. Deploy in minutes using Docker, for free.
https://t.co/V3GrkEILGv
We couldn’t be more excited to share our Practical Guide to Incident Management! 🎉
Every company needs a plan for when things go wrong. Here it is – our years of collective knowledge & experience distilled into a practical guide.
What's your favourite chapter? Comment below👇
Update on cloud outage impacting ~400 customers. As part of scheduled maintenance our team ran a script to delete legacy data from a deprecated service. Instead of deleting the data the script erroneously deleted sites, and connected products, users, and 3rd party apps. (1/5)
Our continued investigation into the Solorigate attack has uncovered new details about the handover from the Solorigate DLL backdoor (SUNBURST) to the Cobalt Strike loader (TEARDROP, Raindrop, and others): https://t.co/eN7B11AfR8
Registration is now OPEN! Join @CrowdStrike's first-ever capture the flag event and test your skills tracking nation-state, eCrime and Hacktivist adversaries. The top 50 high scorers will win cool CrowdStrike swag! https://t.co/oG2ogfmbaj #ctf#cybersecurity
Want to exchange MLsec models in a readable text format like Yara? Or use them where heavyweight ML frameworks aren't available? Good news! Today Sophos AI is releasing YaraML, a tool for compiling sklearn binary classifiers to Yara for easy deployment! https://t.co/U82YyNXC3g
Supply Chain compromise of #SolarWinds provides Dark Halo actor with unauthorized remote access to select targets. @Volexity has also observed this group using novel methods to bypass 2FA. New research just posted to our blog: https://t.co/qAuOPRJo1o #threatintel#dfir#infosec