We’re excited to announce that Amazon Web Services (AWS) has completed the annual Dubai Electronic Security Centre (DESC) certification audit to operate as a Tier…
I. INTRODUCTION In previous articles, I demonstrated using Windows’ bind link feature to block or redirect Antivirus/EDR from accessing their executable folder. You can…
“And all Windows computers should already be restricted so that random, unsigned (not signed by the organization), PowerShell commands should not be allowed. Every organization and…
The MITRE Caldera for OT team introduced HVACSim, a software-only simulator that plugs into its open-source adversary emulation framework to lower the barriers to OT…
OT Insights CenterBringing Engineering on Board and Resetting IT Expectations Bringing Engineering on Board and Resetting IT Expectations Watch the webinar for a revealing deep…
Researchers from the ClearSky Team uncovered a targeted Russian cyber campaign against Ukraine, leveraging two previously unseen malware strains, BadPaw and MeowMeow. The attack begins…
OT Insights CenterWebinar: 2026 OT Cyber Threat Report Webinar: 2026 OT Cyber Threat Report In 2025, 57 cyber attacks caused real-world damage in heavy industry,…
For enterprises, being able to study data unlocks much more than new ways to make money. The modern enterprise tech stack is mind-bogglingly complex —…
Coruna is also notable for its use by three distinct hacking groups. Google first detected its use in February of last year in an operation…
Executive summary The January 2026 seizure of RAMP disrupted a major ransomware coordination hub, but it did not dismantle the ecosystem behind it. Instead, it…
Symantec researchers identified cyber activity linked to the Iranian advanced persistent threat group Seedworm across the networks of several U.S. organizations, with intrusions beginning in…
I. OVERVIEW Continuing the series of studies on exploiting the Bindlink API to tamper with Antivirus/EDRs. This time, I will use “bindflt.sys” to prevent…
