Blog

ProductJanuary 18, 2021
Using SafeBreach Flexible Dashboards to Enable Business
by Yotam Ben Ezra
Read Post
US Cert AlertsDecember 14, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Active Exploitation of...
by Itzik Kotler
Read Post
US Cert AlertsDecember 14, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert AA20-345A and Clop...
by Itzik Kotler
Read Post
Vulnerability DisclosuresDecember 10, 2020
Analyzing Patch Tuesday December 2020
by Eran Segal
Read Post
Thought LeadershipDecember 01, 2020
Building The Next Generation of Cyber Ranges with Targeted Chaos Engineering
by Matthew Dobbs, Itzik Kotler
Read Post
Vulnerability DisclosuresNovember 12, 2020
The 3rd and probably final fix for the Print Spooler never ending bug
by Peleg Hadar
Read Post
Thought LeadershipOctober 29, 2020
Building A Threat Identification Program to Better Manage Risk: The Key Pillars
by Itzik Kotler, Colin Connor
Read Post
Thought LeadershipOctober 29, 2020
Threat Analysis: How the Rapid Evolution of Reporting Can Change Security
by Colin Connor, Itzik Kotler
Read Post
US Cert AlertsOctober 28, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert AA20-301A North Korean...
by Itzik Kotler
Read Post
US Cert AlertsOctober 23, 2020
SafeBreach Hacker's Playbook Coverage for US-CERT Alert AA20-296A and...
by Itzik Kotler
Read Post
Thought LeadershipOctober 21, 2020
Training Trainers: How IBM Uses Data Breach Simulations to Build Real-World...
by Srini Tummalapenta
Read Post
Vulnerability DisclosuresOctober 14, 2020
Security Advisory: Insecure Default Dial-In Settings for Zoom Enterprise Users
by Itzik Kotler
Read Post
US Cert AlertsOctober 07, 2020
SafeBreach Hacker's Playbook Coverage for US-CERT Alert AA20-280A Emotet Malware
by Itzik Kotler
Read Post
US Cert AlertsSeptember 25, 2020
SafeBreach Hacker's Playbook Coverage for US-CERT Alert AR20-268A Federal...
by Itzik Kotler
Read Post
US Cert AlertsSeptember 23, 2020
SafeBreach Hacker's Playbook Coverage for US-CERT Alert AA20-266A Lokibot...
by Itzik Kotler
Read Post
US Cert AlertsSeptember 16, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-259A) Iran-Based...
by Itzik Kotler
Read Post
US Cert AlertsSeptember 15, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-258A) Chinese...
by Itzik Kotler
Read Post
Thought LeadershipSeptember 09, 2020
Coordinating And Integrating Security Platforms Gives Cyber Teams Superpowers
by Corinna Krueger
Read Post
US Cert AlertsAugust 27, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-239A) FASTCash...
by Itzik Kotler
Read Post
Thought LeadershipAugust 26, 2020
Training with Chaos Engineering
by Megan Radogna, Itzik Kotler
Read Post
US Cert AlertsAugust 13, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert AA20-225A Malicious...
by Itzik Kotler
Read Post
Thought LeadershipAugust 03, 2020
Comprehensive Threat-Driven Security Operations Require Unification of Threat...
by Yotam Ben Ezra
Read Post
US Cert AlertsJuly 28, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-209A) Potential...
by Itzik Kotler
Read Post
ProductJuly 08, 2020
MITRE Sub-Techniques in SafeBreach
by Itzik Kotler
Read Post
Thought LeadershipJune 17, 2020
Chaos Engineering and Security: Upgrading Simulation Exercises For More...
by Matthew Dobbs, Itzik Kotler
Read Post
Vulnerability DisclosuresJune 12, 2020
How we bypassed CVE-2020-1048 Patch and got CVE-2020-1337
by Tomer Bar, Peleg Hadar
Read Post
Thought LeadershipMay 18, 2020
Refocusing Cybersecurity Best Practices on Security Hygiene
by Srini Tummalapenta, Itzik Kotler
Read Post
Thought LeadershipApril 25, 2020
SafeBreach Hacker's Playbook Updated for Maze Ransomware
by Itzik Kotler
Read Post
US Cert AlertsApril 22, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-107A) Continued...
by Itzik Kotler
Read Post
US Cert AlertsApril 17, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-106A) Guidance on...
by Itzik Kotler
Read Post
US Cert AlertsApril 09, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-099A) COVID-19...
by Itzik Kotler
Read Post
Thought LeadershipApril 03, 2020
The Top 4 Security Validations For Managing A Remote Workforce
by Yotam Ben Ezra
Read Post
ProductFebruary 19, 2020
Using Breach and Attack Simulation to Effectively Prioritize Vulnerabilities
by Yotam Ben Ezra
Read Post
ProductFebruary 19, 2020
Using SafeBreach to stay on top of Cloud Native Security
by Yotam Ben Ezra
Read Post
Vulnerability DisclosuresFebruary 13, 2020
Atlassian Jira Server and Confluence Server - DLL Search-Order Hijacking -...
by Peleg Hadar
Read Post
Vulnerability DisclosuresFebruary 04, 2020
Realtek HD Audio Driver Package - DLL Preloading and Potential Abuses...
by Peleg Hadar
Read Post
Vulnerability DisclosuresJanuary 21, 2020
EFS Ransomware
by Amit Klein
Read Post
Vulnerability DisclosuresJanuary 20, 2020
Nahimic APO Software Component Driver (Deployed with MSI Computers) - DLL...
by Peleg Hadar
Read Post
US Cert AlertsJanuary 17, 2020
SafeBreach Labs delivers a spoofed signed certificate and MITM simulations for...
by Itzik Kotler
Read Post
Vulnerability DisclosuresJanuary 12, 2020
Teradici PcoIP Agents and Clients (Deployed with Amazon Workspaces) - Unquoted...
by Peleg Hadar
Read Post
Vulnerability DisclosuresJanuary 08, 2020
CISA Expects More Cyberattacks from Iran: How To Prepare
by Itzik Kotler
Read Post
Vulnerability DisclosuresDecember 17, 2019
ASUS ATK Package - Unquoted Search Path and Potential Abuses (CVE-2019-19235)
by Peleg Hadar
Read Post
Vulnerability DisclosuresDecember 17, 2019
Acer Quick Access - DLL Search-Order Hijacking and Potential Abuses...
by Peleg Hadar
Read Post
Vulnerability DisclosuresDecember 16, 2019
Intel Rapid Storage Technology Service - DLL Preloading and Potential Abuses...
by Peleg Hadar
Read Post
US Cert AlertsDecember 05, 2019
Hacker's Playbook Already Protects for Methods used in US-CERT Malware...
by Peleg Hadar
Read Post
Vulnerability DisclosuresDecember 02, 2019
Autodesk Desktop Application - Privilege Escalation to SYSTEM (CVE-2019-7365)
by Peleg Hadar
Read Post
Vulnerability DisclosuresDecember 02, 2019
Kaspersky Secure Connection - DLL Preloading and Potential Abuses...
by Peleg Hadar
Read Post
Vulnerability DisclosuresDecember 02, 2019
Trend Micro Security 16 - DLL Search-Order Hijacking and Potential Abuses...
by Peleg Hadar
Read Post
Vulnerability DisclosuresNovember 21, 2019
Code42 Server for Windows - DLL Search-Order Hijacking and Potential Abuses...
by Peleg Hadar
Read Post
Vulnerability DisclosuresNovember 21, 2019
Lenovo System Interface Foundation - DLL Preloading and Potential Abuses...
by Peleg Hadar
Read Post
Vulnerability DisclosuresNovember 15, 2019
Comodo Internet Security - DLL Preloading and Potential Abuses (CVE-2019-18215)
by Peleg Hadar
Read Post
Vulnerability DisclosuresNovember 15, 2019
NVIDIA GPU Display Drivers for Windows and GFE Software - DLL Preloading and...
by Peleg Hadar
Read Post
Vulnerability DisclosuresNovember 15, 2019
TeamViewer Windows Client (v11 to v14) - DLL Preloading and Potential Abuses...
by Peleg Hadar
Read Post
Vulnerability DisclosuresNovember 14, 2019
Symantec Endpoint Protection - Self-Defense Bypass and Potential Usages...
by Peleg Hadar
Read Post
Vulnerability DisclosuresNovember 12, 2019
McAfee - All Editions (MTP, AVP, MIS) - Self-Defense Bypass and Potential...
by Peleg Hadar
Read Post
US Cert AlertsNovember 01, 2019
Hacker's Playbook Updated with Methods for US-CERT Malware Analysis Report...
by Itzik Kotler
Read Post
Thought LeadershipOctober 23, 2019
Amazon Workspaces - Unquoted Search Path and Potential Abuses
by Peleg Hadar
Read Post
Vulnerability DisclosuresOctober 23, 2019
Maxthon Browser for Windows - Unquoted Search Path and Potential Abuses...
by Peleg Hadar
Read Post
Vulnerability DisclosuresOctober 21, 2019
Avast Antivirus / AVG Antivirus - DLL Preloading into PPL and Potential Abuses...
by Peleg Hadar
Read Post
Vulnerability DisclosuresOctober 21, 2019
Avira Antivirus 2019 (4 Services) - DLL Preloading and Potential Abuses...
by Peleg Hadar
Read Post
ProductOctober 18, 2019
SafeBreach integrates with Microsoft Defender ATP to maximize security
by Itzik Kotler
Read Post
Vulnerability DisclosuresOctober 10, 2019
HP Touchpoint Analytics - DLL Search-Order Hijacking - Potential Abuses...
by Peleg Hadar
Read Post
Vulnerability DisclosuresSeptember 20, 2019
Forcepoint VPN Client for Windows - Unquoted Search Path and Potential Abuses...
by Peleg Hadar
Read Post
Vulnerability DisclosuresAugust 27, 2019
Check Point Endpoint Security Initial Client for Windows - Privilege...
by Peleg Hadar
Read Post
Vulnerability DisclosuresAugust 21, 2019
BitDefender Antivirus Free 2020 - Privilege Escalation to SYSTEM
by Peleg Hadar
Read Post
Vulnerability DisclosuresAugust 14, 2019
Trend Micro Password Manager - Privilege Escalation to SYSTEM
by Peleg Hadar
Read Post
Thought LeadershipAugust 09, 2019
Comprehensive Guide to Process Injection Techniques + Detection Tool
by Itzik Kotler, Amit Klein
Read Post
Thought LeadershipAugust 05, 2019
The Massive Capital One Breach Post-Mortem: Three Lessons For Infosec Teams
by Itzik Kotler
Read Post
ProductJuly 31, 2019
We Are Launching SafeBreach GRID To Deliver The Four Key Requirements of BAS
by Yotam Ben Ezra
Read Post
Thought LeadershipJuly 31, 2019
The Ultimate Collection of Windows Process Injection Techniques: Black Hat...
by SafeBreach
Read Post
ProductJuly 29, 2019
The Four Critical Capabilities of Breach and Attack Simulation (BAS) Platforms
by Yotam Ben Ezra
Read Post
Vulnerability DisclosuresJune 21, 2019
OEM Software Puts Multiple Laptops At Risk
by Peleg Hadar
Read Post
US Cert AlertsMay 13, 2019
Hacker's Playbook Updated with Methods for US-CERT Alert AR19-129A
by Itzik Kotler
Read Post
US Cert AlertsApril 11, 2019
Hacker's Playbook Updated with Methods for US-CERT Alert AR19-100A
by Itzik Kotler
Read Post
ProductMarch 22, 2019
Hacker's Playbook Updated with Methods for LockerGoga
by Itzik Kotler
Read Post
US Cert AlertsMarch 18, 2019
Hacker's Playbook Updated with US-CERT Alert TA-18-086A
by Itzik Kotler
Read Post
ProductDecember 13, 2018
SafeBreach: BAS Product Overview and Insight
by SafeBreach
Read Post
US Cert AlertsJune 21, 2018
Hacker's Playbook Updated with Methods for BADCALL
by Itzik Kotler
Read Post
Thought LeadershipMay 01, 2018
Celebrating Women's Day, Every Day
by SafeBreach
Read Post
US Cert AlertsApril 20, 2018
Hacker's Playbook Updated with US-CERT Alert TA-18-106A
by Itzik Kotler
Read Post
US Cert AlertsMarch 16, 2018
Hackers Playbook Updated with Methods for US CERT Alert TA-18-074A
by Itzik Kotler
Read Post
Vulnerability DisclosuresMarch 15, 2018
Abusing Text Editors with Third Party Plugins
by SafeBreach
Read Post
ProductFebruary 05, 2018
Acting on Results Provided By Breach and Attack Simulation
by SafeBreach, SafeBreach
Read Post
Thought LeadershipJanuary 22, 2018
Breach and Attack Simulation Versus Pen Testing and Red Teaming
Read Post
Thought LeadershipJanuary 11, 2018
Meltdown and Spectre? Don't Waste your Time.
Read Post
US Cert AlertsJanuary 08, 2018
Hacker's Playbook Updated with Methods for Meltdown and Spectre
by Itzik Kotler
Read Post
Thought LeadershipDecember 14, 2017
Are You Making the Most From Your Next-Generation Firewalls?
by SafeBreach
Read Post
Thought LeadershipDecember 05, 2017
Hacker's Playbook Findings Report Third Edition
by SafeBreach
Read Post
Thought LeadershipNovember 22, 2017
Drive Security ROI: Optimize Configuration
by Guy Bejerano
Read Post
US Cert AlertsNovember 15, 2017
Hacker's Playbook Updated with Methods for US-CERT Alert TA17-318A/B Hidden...
by Itzik Kotler
Read Post
ProductNovember 06, 2017
Hacker's Playbook Updated with Methods for Silence Banking Trojan
by Itzik Kotler
Read Post
Thought LeadershipNovember 01, 2017
Five Common Questions on the General Data Protection Regulation (GDPR)
by SafeBreach
Read Post
Thought LeadershipOctober 30, 2017
Hacker's Playbook Updated with Methods for IoTroop/Reaper
by Itzik Kotler
Read Post
Thought LeadershipOctober 24, 2017
Hacker's Playbook Updated with Methods for Petya.A (Bad Rabbit) Ransomware...
by SafeBreach
Read Post
US Cert AlertsOctober 22, 2017
Hacker's Playbook Updated with Methods for US-CERT Alert TA17-293A
by Itzik Kotler
Read Post
Thought LeadershipSeptember 28, 2017
The New Cyber Terror: 0days
by Guy Bejerano
Read Post
Thought LeadershipSeptember 22, 2017
Equifax Breach: Three Data Breach Protection Measures Learned
by SafeBreach
Read Post
ProductSeptember 21, 2017
Hacker's Playbook Updated with Lukitus Methods
by Itzik Kotler
Read Post
Thought LeadershipSeptember 18, 2017
Equifax Lesson - Stop Hindsight Analysis, and Start Foresight Action
by SafeBreach
Read Post
Thought LeadershipSeptember 11, 2017
Hacker's Playbook Updated with Equifax Related Methods
by SafeBreach
Read Post
US Cert AlertsAugust 24, 2017
Hacker's Playbook Updated with DeltaCharlie (Additional HIDDEN COBRA) Methods
by Itzik Kotler
Read Post
Thought LeadershipJuly 30, 2017
Windows BITS Inject
by Dor Azouri
Read Post
Thought LeadershipJuly 27, 2017
Adventures of AV and the Leaky Sandbox
by Amit Klein, Itzik Kotler
Read Post
Thought LeadershipJuly 11, 2017
Building a Python BITS Server
by Dor Azouri
Read Post
Thought LeadershipJuly 11, 2017
The Petya Predicament: Proactively Predicting Problems
by Dor Azouri
Read Post
US Cert AlertsJune 20, 2017
Hacker's Playbook Updated with HIDDEN COBRA Methods
by SafeBreach
Read Post
Thought LeadershipJune 13, 2017
Hacker's Playbook Updated with JAFF Ransomware Methods
by SafeBreach
Read Post
US Cert AlertsJune 13, 2017
Hacker's Playbook Updated with PowerPoint Mouse-over Methods
by SafeBreach
Read Post
Thought LeadershipJune 08, 2017
What are Breach and Attack Simulation Technologies?
by Dor Azouri
Read Post
Thought LeadershipMay 17, 2017
WannaCry: Don't Believe the Hype
by SafeBreach
Read Post
ProductMay 15, 2017
Hacker's Playbook Updated with WannaCry Methods
by SafeBreach
Read Post
Thought LeadershipMay 09, 2017
Redleaves, in Springtime?
by SafeBreach
Read Post
Thought LeadershipMay 04, 2017
Ragnarok is Coming, Unless we Learn from the Past
by SafeBreach
Read Post
Thought LeadershipApril 18, 2017
Reducing Exposure Time with Breach Simulations
by SafeBreach
Read Post
Thought LeadershipApril 18, 2017
SafeBreach Partners with Mitre
by SafeBreach
Read Post
Thought LeadershipApril 07, 2017
PCI Compliant AND Secure
by SafeBreach
Read Post
Thought LeadershipMarch 22, 2017
Is Vulnerability Management Dead?
by SafeBreach
Read Post
Thought LeadershipMarch 08, 2017
Perspective on the New York Cybersecurity Regulations
by SafeBreach
Read Post
ProductFebruary 14, 2017
SafeBreach Announces Strategic Reseller Agreement with Hewlett Packard...
by SafeBreach
Read Post
ProductFebruary 07, 2017
SafeBreach Partners with Visa Threat Intelligence
by SafeBreach
Read Post
Thought LeadershipJanuary 30, 2017
From RSA Innovation Sandbox 2016 to Now
by SafeBreach
Read Post
Thought LeadershipNovember 16, 2016
SafeBreach, On2IT and the European General Data Protection Regulation
by SafeBreach
Read Post
Thought LeadershipSeptember 26, 2016
Getting Ahead of a Breach with a Predict and Respond solution
by SafeBreach
Read Post
ProductJuly 26, 2016
SafeBreach Raises $15M Series A
by Guy Bejerano
Read Post
ProductJuly 20, 2016
SafeBreach Selected As Finalist for Red Herring North America Top 100 Award
by SafeBreach
Read Post
Thought LeadershipJuly 18, 2016
What Will Your Opponent Think Tomorrow?
by SafeBreach
Read Post
Thought LeadershipJuly 05, 2016
Predicting Attacks - Lessons from The Game of Thrones
by SafeBreach
Read Post
Thought LeadershipMay 18, 2016
In Plain Sight: The Perfect Exfiltration
by Amit Klein
Read Post
Thought LeadershipMay 03, 2016
A Perspective on the Verizon Data Breach Investigations (DBIR) Report
by SafeBreach
Read Post
Thought LeadershipApril 27, 2016
Playing CyberWar Games To Win
by SafeBreach
Read Post
Thought LeadershipApril 08, 2016
SC Magazine First Look on SafeBreach
by SafeBreach
Read Post
Thought LeadershipMarch 30, 2016
Building a Proactive Framework to Securing the Business
by SafeBreach
Read Post
Thought LeadershipFebruary 24, 2016
Hacking Inward - Implementing Effective Cyber War Games
by Itzik Kotler
Read Post
Thought LeadershipFebruary 09, 2016
HTTP Response Splitting in Node.js - Root Cause Analysis
by Amit Klein
Read Post
Thought LeadershipJanuary 06, 2016
Why Software Security Is Hard
by Amit Klein
Read Post
Vulnerability DisclosuresDecember 02, 2015
I See Your True ECHO REQUEST Patterns (Pinging Data Awawy)
by Itzik Kotler
Read Post

Blog

Using SafeBreach Flexible Dashboards to Enable Business

SafeBreach Hacker's Playbook Updated for US-CERT Active Exploitation of...

SafeBreach Hacker's Playbook Updated for US-CERT Alert AA20-345A and Clop...

Analyzing Patch Tuesday December 2020

Building The Next Generation of Cyber Ranges with Targeted Chaos Engineering

The 3rd and probably final fix for the Print Spooler never ending bug

Building A Threat Identification Program to Better Manage Risk: The Key Pillars

Threat Analysis: How the Rapid Evolution of Reporting Can Change Security

SafeBreach Hacker's Playbook Updated for US-CERT Alert AA20-301A North Korean...

SafeBreach Hacker's Playbook Coverage for US-CERT Alert AA20-296A and...

Training Trainers: How IBM Uses Data Breach Simulations to Build Real-World...

Security Advisory: Insecure Default Dial-In Settings for Zoom Enterprise Users

SafeBreach Hacker's Playbook Coverage for US-CERT Alert AA20-280A Emotet Malware

SafeBreach Hacker's Playbook Coverage for US-CERT Alert AR20-268A Federal...

SafeBreach Hacker's Playbook Coverage for US-CERT Alert AA20-266A Lokibot...

SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-259A) Iran-Based...

SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-258A) Chinese...

Coordinating And Integrating Security Platforms Gives Cyber Teams Superpowers

SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-239A) FASTCash...

Training with Chaos Engineering

SafeBreach Hacker's Playbook Updated for US-CERT Alert AA20-225A Malicious...

Comprehensive Threat-Driven Security Operations Require Unification of Threat...

SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-209A) Potential...

MITRE Sub-Techniques in SafeBreach

Chaos Engineering and Security: Upgrading Simulation Exercises For More...

How we bypassed CVE-2020-1048 Patch and got CVE-2020-1337

Refocusing Cybersecurity Best Practices on Security Hygiene

SafeBreach Hacker's Playbook Updated for Maze Ransomware

SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-107A) Continued...

SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-106A) Guidance on...

SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-099A) COVID-19...

The Top 4 Security Validations For Managing A Remote Workforce

Using Breach and Attack Simulation to Effectively Prioritize Vulnerabilities

Using SafeBreach to stay on top of Cloud Native Security

Atlassian Jira Server and Confluence Server - DLL Search-Order Hijacking -...

Realtek HD Audio Driver Package - DLL Preloading and Potential Abuses...

EFS Ransomware

Nahimic APO Software Component Driver (Deployed with MSI Computers) - DLL...

SafeBreach Labs delivers a spoofed signed certificate and MITM simulations for...

Teradici PcoIP Agents and Clients (Deployed with Amazon Workspaces) - Unquoted...

CISA Expects More Cyberattacks from Iran: How To Prepare

ASUS ATK Package - Unquoted Search Path and Potential Abuses (CVE-2019-19235)

Acer Quick Access - DLL Search-Order Hijacking and Potential Abuses...

Intel Rapid Storage Technology Service - DLL Preloading and Potential Abuses...

Hacker's Playbook Already Protects for Methods used in US-CERT Malware...

Autodesk Desktop Application - Privilege Escalation to SYSTEM (CVE-2019-7365)

Kaspersky Secure Connection - DLL Preloading and Potential Abuses...

Trend Micro Security 16 - DLL Search-Order Hijacking and Potential Abuses...

Code42 Server for Windows - DLL Search-Order Hijacking and Potential Abuses...

Lenovo System Interface Foundation - DLL Preloading and Potential Abuses...

Comodo Internet Security - DLL Preloading and Potential Abuses (CVE-2019-18215)

NVIDIA GPU Display Drivers for Windows and GFE Software - DLL Preloading and...

TeamViewer Windows Client (v11 to v14) - DLL Preloading and Potential Abuses...

Symantec Endpoint Protection - Self-Defense Bypass and Potential Usages...

McAfee - All Editions (MTP, AVP, MIS) - Self-Defense Bypass and Potential...

Hacker's Playbook Updated with Methods for US-CERT Malware Analysis Report...

Amazon Workspaces - Unquoted Search Path and Potential Abuses

Maxthon Browser for Windows - Unquoted Search Path and Potential Abuses...

Avast Antivirus / AVG Antivirus - DLL Preloading into PPL and Potential Abuses...

Avira Antivirus 2019 (4 Services) - DLL Preloading and Potential Abuses...

SafeBreach integrates with Microsoft Defender ATP to maximize security

HP Touchpoint Analytics - DLL Search-Order Hijacking - Potential Abuses...

Forcepoint VPN Client for Windows - Unquoted Search Path and Potential Abuses...

Check Point Endpoint Security Initial Client for Windows - Privilege...

BitDefender Antivirus Free 2020 - Privilege Escalation to SYSTEM

Trend Micro Password Manager - Privilege Escalation to SYSTEM

Comprehensive Guide to Process Injection Techniques + Detection Tool

The Massive Capital One Breach Post-Mortem: Three Lessons For Infosec Teams

We Are Launching SafeBreach GRID To Deliver The Four Key Requirements of BAS

The Ultimate Collection of Windows Process Injection Techniques: Black Hat...

The Four Critical Capabilities of Breach and Attack Simulation (BAS) Platforms

OEM Software Puts Multiple Laptops At Risk

Hacker's Playbook Updated with Methods for US-CERT Alert AR19-129A

Hacker's Playbook Updated with Methods for US-CERT Alert AR19-100A

Hacker's Playbook Updated with Methods for LockerGoga

Hacker's Playbook Updated with US-CERT Alert TA-18-086A

SafeBreach: BAS Product Overview and Insight

Hacker's Playbook Updated with Methods for BADCALL

Celebrating Women's Day, Every Day