Cybersecurity Resource Center | Blog

Drowning in Alerts? CRITICALSTART, Microsoft Defender ATP Collaboration Will Reduce Alerts by 99%

The rapidly changing threat landscape poses numerous challenges for all enterprise organizations. Among those challenges is security infrastructures generating thousands of false-positive alerts, ...

The Rx for a Healthy Cybersecurity Strategy: A Look at CRITICALSTART Customer, Ardent Health Services

Of course, cybersecurity is a priority for businesses across all industries, but in healthcare, the urgency is on an entirely different plane. From doctors’ offices to outpatient clinics to ...

ManageEngine User Enumeration

Background: While conducting a penetration test of a client’s external network, I discovered a way to enumerate users’ in ManageEngine’s ADSelfService Plus application. This allows an ...

VMware Horizon Connection Server Information Disclosure

Background: While conducting a penetration test of a client’s external network, I discovered three separate instances of information disclosure in VMware’s Horizon Access Web Portal. An ...

The Pastebin Treasure Hunter

Introduction Malicious actors have multiple ways to share data they have stolen from websites or services. Some might post to popular forums to gain notoriety while others might post anonymously to ...

#BalanceForBetter: International Women’s Day 2019

This year’s International Women’s Day 2019 theme is #BalanceforBetter, a direct call-to-action to drive gender parity across the world. This year’s campaign hinges on the motto “the race is ...

Data is the New Source Code

The role of data in today’s business world cannot be overstated. Competitive intelligence is inextricably linked to the speed at which valuable data can be consumed and analyzed to yield important ...

Information Disclosure in JForum 2.1.X – Syntax

Background While conducting a penetration test for a customer, I encountered an unused developer forum using JForum version 2.1.8 and started looking for vulnerabilities within the ...

The Next Step of Social Engineering: Social Media Hoaxes

From Jonathan Swift’s fake almanac in 1708 to the modern Dihydrogen monoxide joke, hoaxes have been around for as long as humans have enjoyed deceiving each other for fun. The ease of communication ...

Abusing mshta.exe to Gain PowerShell Access

Background In my previous life, I spent a lot of time analyzing malware and figuring out how it worked in order to defend against it. One trend that has increased across the industry is the use of ...

Five Cybersecurity Predictions for 2019

2018 was another year of change in the cybersecurity industry. We’ve had some interesting conversations with customers, partners, providers, and analysts over the past twelve months, and we’re ...

One Month Later: The Marriott Data Breach – What You Should Do

Just over a month ago, Marriott International, one of the world’s largest hotel chains, announced that there was unauthorized access to the database, which contained guest information relating to ...

Naughty or Nice: Cybercriminals’ Latest Targeting Strategies During the Holiday Season

Economics of Christmas: The Joy of Shopping Retailers solicit most fervently on a handful of days throughout the year. Valentine’s Day, Mother’s Day, Independence Day, Back-to-School, and ...

Phishing Attacks Today: DRIDEX and URSNIF Are Back

On the morning of December 12th, 2018, the CRITICALSTART CYBERSOC began seeing the resurgence of a prolific phishing campaign. This campaign included malware variants such as DRIDEX & URSNIF, ...

A Commitment to Getting It Right: Palo Alto Networks’ Expedition Migration Tool

Background: During a recent penetration test for a client, I came across a tool called MigrationTool from Palo Alto Networks. The tool was littered with issues, like the unauthenticated disclosure of ...

Supporting Our Family: In Memory of Ricki Bateman

Today being the National Day of Giving, we come together to celebrate the gift of generosity and contribution. For CRITICALSTART, the day takes on special significance this year as we rally to ...

PRTG Network Monitor Privilege Escalation

Background: Recently I’ve seen a decent number of privilege escalations occurring on Windows due to permission issues and using symlinks. The work from Ryan Hanson from Atredis on the Cylance ...

Cybersecurity Resources

Drowning in Alerts? CRITICALSTART, Microsoft Defender ATP Collaboration Will Reduce Alerts by 99%

Law Firms Beware: Data Breaches on the Rise

The Last Watchdog Talks to CRITICALSTART About Radical Transparency

The Boy Who Cried “Alert”

The Rx for a Healthy Cybersecurity Strategy: A Look at CRITICALSTART Customer, Ardent Health Services

ManageEngine User Enumeration

VMware Horizon Connection Server Information Disclosure

The Pastebin Treasure Hunter

#BalanceForBetter: International Women’s Day 2019

Data is the New Source Code

Information Disclosure in JForum 2.1.X – Syntax

The Next Step of Social Engineering: Social Media Hoaxes

Abusing mshta.exe to Gain PowerShell Access

Five Cybersecurity Predictions for 2019

One Month Later: The Marriott Data Breach – What You Should Do

Naughty or Nice: Cybercriminals’ Latest Targeting Strategies During the Holiday Season

Phishing Attacks Today: DRIDEX and URSNIF Are Back

A Commitment to Getting It Right: Palo Alto Networks’ Expedition Migration Tool

Supporting Our Family: In Memory of Ricki Bateman

PRTG Network Monitor Privilege Escalation

Leave nothing to chance with CRITICALSTART MDR

SOLUTIONS

TEAMARES

RESOURCES

PARTNERS

ABOUT

CONTACT US

About Cookies On This Site

FREE EBOOK:

Reduce alerts by 99%. Learn how.

FREE EBOOK:

The impact of alert overload directly from analysts.