September 2026 Microsoft Patch Tuesday
104Critical 860Important 0Moderate 0Low Microsoft addresses 964 CVEs, smashing July’s release as the largest Patch Tuesday release. This month’s updates include patches for two zero-days…
Category: ThreatIntelligence-IncidentResponse
Top 4 Questions For Evaluating Exposure Management Platform
Executive Summary Exposure management platforms are increasingly evaluated based on post-detection actions rather than detection itself. This piece sets out four questions to ask when…
AI SIEM Search | Huntress
Every Security Information and Event Management (SIEM) solution on the market makes the same quiet assumption: that you know at least one query language, and…
Cobalt Strike Beacon Extractor | Elastic Security Labs
Python script that collects Cobalt Strike memory data generated by security events from an Elasticsearch cluster, extracts the configuration from the CS beacon, and writes…
CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)
Overview While conducting research into a recent N-able N-central authentication bypass vulnerability (CVE-2026-18577), Rapid7 Labs discovered two new vulnerabilities affecting the latest version of N-central.…
EMOTET Configuration Extractor | Elastic Security Labs
Python script to extract the payload from EMOTET samples. Download emotet-configuration-extractor.tar.gz For information on the EMOTET malware check out the following resources: Getting started Docker…
BLISTER Configuration Extractor | Elastic Security Labs
Python script to extract the configuration and payload from BLISTER samples. Download blister-config-extractor.tar.gz Getting Started This tool provides a Python module and command line tool…
Elastic’s 2022 Global Threat Report: A roadmap for navigating today’s growing threatscape
Staying up-to-date on the current state of security and understanding the implications of today’s growing threat landscape is critical to my role as CISO at…
Vulnerability summary: Follina, CVE-2022-30190 | Elastic Security Labs
On May 27, 2022, the nao_sec independent security research group shared a VirusTotal link to a weaponized Microsoft Office document revealing a previously unknown vulnerability…
NETWIRE Configuration Extractor | Elastic Security Labs
Python script to extract the payload from NETWIRE samples. Download netwire-configuration-extractor.tar.gz For information on the NETWIRE malware check out the following resources: Getting started Docker…
Automating the Security Protections rapid response to malware
Cyber attacks on corporate networks were up 50% in 2021, and it’s expected that 2022 will see more of the same. Elastic Endpoint Security includes…