CYBERSECURITY BLOGS

CVSS measures technical severity; EPSS estimates near-term exploitation probability. Learn how to combine both with CISA KEV for risk-based patching and making right decesion.

Host discovery techniques in Nmap for penetration testing: ping sweep, TCP SYN/ACK ping, ICMP, UDP, ARP, and how to get past firewalls.

In this blog, we'll learn about the concept of DLL hijacking, a technique that attackers and pentesters alike use to gain unauthorized access to the system. We will learn what DLLs are and exploit the way Windows OS loads the DLL (Dynamic Link Libraries), along with practical implications for how attackers can leverage them.

APT42 emulation strategy, current IOCs, TTPs, and detection guidance.

APT29/Midnight Blizzard emulation strategy, current IOCs, TTPs, and detection guidance for the Russian SVR-backed threat actor.