Overview While conducting research into a recent N-able N-central authentication bypass vulnerability (CVE-2026-18577), Rapid7 Labs discovered two new vulnerabilities affecting the latest version of N-central.…
Python script to extract the payload from EMOTET samples. Download emotet-configuration-extractor.tar.gz For information on the EMOTET malware check out the following resources: Getting started Docker…
Python script to extract the configuration and payload from BLISTER samples. Download blister-config-extractor.tar.gz Getting Started This tool provides a Python module and command line tool…
Staying up-to-date on the current state of security and understanding the implications of today’s growing threat landscape is critical to my role as CISO at…
On May 27, 2022, the nao_sec independent security research group shared a VirusTotal link to a weaponized Microsoft Office document revealing a previously unknown vulnerability…
Python script to extract the payload from NETWIRE samples. Download netwire-configuration-extractor.tar.gz For information on the NETWIRE malware check out the following resources: Getting started Docker…
Cyber attacks on corporate networks were up 50% in 2021, and it’s expected that 2022 will see more of the same. Elastic Endpoint Security includes…
Dynamic-link library (DLL) image loads is one of the noisiest types of event in Windows, which may discourage defenders from using it for detection engineering…
It is becoming more common that adversary attacks consist of more than a standalone executable or script. Advanced attacker techniques, like “living off the land”…
Preamble Credential Access consists of techniques for stealing credentials like cookies, API keys, and passwords. It is one of the top critical tactics that is…
