Stav Setty

security researcher @PaloAltoNtwks

[Unit 42 @Unit42_Intel]

The Jingle Thief campaign targets cloud-based service to maintain longterm persistence and, ultimately, conduct gift card fraud. This enables near-instant cash flow. Learn how the scheme works: https://t.co/Fn5w0IiPkz

[Unit 42 @Unit42_Intel]

From MSAs to dMSAs: Unit 42 traces the evolution of Managed Service Accounts and explains the BadSuccessor attack vector in Windows Server 2025. This article includes discussion of the PoC SharpSuccessor. https://t.co/vPdtVSP3LY

[Stav Setty @stavsetty]

Check out our latest research on LDAP-based attacks!

[Unit 42 @Unit42_Intel]

Cybercriminals can leverage the vendor-agnostic #LDAP for lateral movement and to target critical assets. Stay informed about the risks and learn how to detect and mitigate LDAP-based attacks. https://t.co/ys6TUst0cg

[Matt Zorich @reprise_99]

Hidden in the depths of the Microsoft Learn Docs are some really great Azure AD incident response playbooks covering phishing, password sprays, app consent grants and compromised & malicious apps, including some really great flow charts - https://t.co/1DN5eAVFIv

[Matt Zorich @reprise_99]

If you are investigating suspicious Office 365 activity, chances are you will be deep into the Unified Audit Log before you know it. One of our very smart @MicrosoftDART team members put together some tips for good UAL hunting - https://t.co/VV0Pn45dgi

[Elad Shamir @elad_shamir]

GMSA passwords aren’t what you think.

Read all about it in @YuG0rd’s post, where he dives into how gMSA passwords are generated and introduces the Golden GMSA attack.

https://t.co/chc379EdHY

[Pentest Laboratories @pentestlabltd]

📢 New Article Released!
📝 Domain Escalation - ShadowCoerce
https://t.co/U1m8ise69P
#pentestlaboratories #redteam #redteaming

[Stav Setty @stavsetty]

Excited to share our research and detection on the CVE-2021-42278 and CVE-2021-4487 Kerberos vulnerabilities with @cortexbypanw

https://t.co/wOfFKB31p1

[Cortex by Palo Alto Networks @cortexbypanw]

Learn how @cortexbypanw XDR detects the Kerberos noPac vulnerabilities - CVE-2021-42278 and CVE-42287 #cybersecurity #Security @PaloAltoNtwks https://t.co/osZ7RsnyJ6

[Irena Damsky Lahav 🇮🇱🇮🇱🇮🇱 @DamskyIrena]

Detecting the #Kerberos noPac Vulnerabilities with Cortex XDR https://t.co/oN9F7g9f0M
by the amazing @stavsetty and yes we are hiring! so come join her! @cortexbypanw @Unit42_Intel @PaloAltoNtwks

[Irena Damsky Lahav 🇮🇱🇮🇱🇮🇱 @DamskyIrena]

great hunting work on #log4j #Log4Shell from the @cortexbypanw team by @Mind0xP and @odedaw

https://t.co/ZzcSiZzfF2

[Mehmet Ergene @Cyb3rMonk]

Friendly reminder: You can detect NTLM relay attacks
https://t.co/XY4X5Bf1Hi

[Charlie Clark @exploitph]

A short and sweet addition to my previous post describing a couple more uses for the samaccountname impersonation bug:

https://t.co/6YtzwFUUo1

[Charlie Clark @exploitph]

So with some help from @_EthicalChaos_ I found a way to weaponise CVE-2021-42287/CVE-2021-42278 and more help from @4ndr3w6S we put some detections together:

https://t.co/FwQuI2DiPQ

[sam lau @samlau95]

hello world!
we're launching pandas tutor! it visualizes Python pandas code step-by-step: https://t.co/Kt9PClWEyX
(developed with my advisor philip guo)

[InfoSec Jupyterthon @jupyterthon]

🚨Now with us @shacharoitman with SSH Session Hijack Analytic

#infosecjupyterthon