#InitialAccess

1 week ago

WinGet can be more than a package manager. We show how .𝚠𝚒𝚗𝚐𝚎𝚝 configs + a self-referencing LNK become a viable initial access payload when Microsoft Store is enabled. Includes detection queries & mitigation tips.
blog.compass-security.com/2026/03/wing...
#RedTeam #Windows #LOLBins #InitialAccess

4 3 0 0

ReconBee

@reconbee.bsky.social

1 month ago

Initial access hackers switch to Tsundere Bot for ransomware attacks Tsundere Bot malware infections could result read more about Initial access hackers switch to Tsundere Bot for ransomware attacks

Initial access hackers switch to Tsundere Bot for ransomware attacks reconbee.com/initial-acce...

#hackers #initialaccess #TsundereBoat #ransomware #ransomwareattack

0 0 0 0

@cvedatabase.bsky.social

1 month ago

CVE-CVE-2019-11580 | CRITICAL Severity | CVEDatabase.com Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attackers who can send unauthenticated or ...

Osiris and 01flip ransomware are abusing old bugs like CVE-2019-11580 to gain initial access — are you still carrying unpatched “legacy” Atlassian in your environment? Look up the CVE at www.cvedatabase.com/cve/CVE-...

#Ransomware #InitialAccess #Atlassian #CVE201911580 #BlueTeam

0 0 0 0

CyberMaterial

@cybermaterial.bsky.social

1 month ago

Phishing Attack Installs LogMeIn RMM
Read More: buff.ly/X6vzAVV

#PhishingAttack #RMMAbuse #InitialAccess #SocialEngineering #CredentialTheft #EnterpriseSecurity #CyberThreats

0 0 0 0

CyberMaterial

@cybermaterial.bsky.social

1 month ago

New PDFsider Windows Malware Deployed
Read More: buff.ly/C7LWX1b

#PDFSider #WindowsMalware #Ransomware #InitialAccess #SocialEngineering #Backdoor #ThreatActors #CyberSecurity #Infosec

1 0 0 0

CyberMaterial

@cybermaterial.bsky.social

1 month ago

GootLoader Bypasses Security With ZIPs
Read More: buff.ly/3Uc6emB

#GootLoader #Malware #InitialAccess #Ransomware #CobaltStrike #Rhysida #WindowsSecurity #ThreatHunting #EDR #MalwareAnalysis #CyberDefense

0 0 0 0

TechNadu

@technadu.com

1 month ago

A recent court case highlights how initial access brokers operate behind the scenes of larger cyber incidents.

Selling early access to company networks lowers the barrier for later attacks and shifts risk upstream, long before ransomware or data theft becomes visible.

#CyberSecurity #InitialAccess

1 0 0 0

BlackCastle Cyber Security

@blackcastle-cyber.bsky.social

2 months ago

Abusing Microsoft ClickOnce as an Initial Access Primitive How ClickOnce deployment flows become a low-noise payload delivery channel inside trusted Windows execution paths.

Abusing ClickOnce as an initial access primitive. No exploit. No macro. Just a user click and trusted execution via dfsvc.exe.

blackcastle.com.au/blog/clickon...

#ClickOnce #InitialAccess #OffensiveSecurity #ThreatResearch #MalwareAnalysis #RedTeam #WindowsSecurity

0 0 0 0

GreyNoise

@greynoise.io

2 months ago

The Ransomware Ground Game: How A Christmas Scanning Campaign Will Fuel 2026 Attacks Over four days in December, one operator scanned the internet with 240+ exploits, logging confirmed vulnerabilities that could power targeted intrusions in 2026.

Ransomware starts with reconnaissance: we observed a recent large-scale scanning campaign validating exploitable systems, data that feeds the initial access market and shows up later in real attacks. 🕵️‍♀️

#GreyNoise #Ransomware #InitialAccess #IAB #Recon

2 2 0 0

MalWhere?

@malwhere.bsky.social

2 months ago

Allegedly stolen data ranges from GBs to multiple TBs, including defense files, aircraft manuals, health records, network configs, source code, and government contracts—posing serious security, privacy, and national security risks.
#Infosec #CloudSecurity #InitialAccess #Malware #DataLeaks

0 0 0 0

CyberMaterial

@cybermaterial.bsky.social

2 months ago

Infostealers Hijack Business Infrastructure
Read More: buff.ly/Q5Vykqd

#InfostealerCampaign #CredentialTheft #BusinessWebsiteHijack #MalwareDistribution #InitialAccess #CyberCrimeEcosystem #ThreatIntel

0 0 0 0

CyberMaterial

@cybermaterial.bsky.social

2 months ago

Cracked Software Spreads Loader Malware
Read More: buff.ly/4eMfgxD

#CountLoader #CrackedSoftwareMalware #MalwareLoader #InitialAccess #InfostealerDelivery #RATDeployment #ThreatCampaign #CyberCrime #EndpointSecurity

0 0 0 0

TechNadu

@technadu.com

7 months ago

Follow Us For more Expert interviews, tech insights, and VPN updates.

#Cybersecurity #CrowdStrike #ThreatIntelligence #AIsecurity #InitialAccess

0 0 0 0

অর্ঘ্য 🏏 📚 💻

@stringsvsatoms.bsky.social

1 year ago

China’s Salt Typhoon Spies Are Still Hacking Telecoms—Now by Exploiting Cisco Routers Despite high-profile attention and even US sanctions, the group hasn’t stopped or even slowed its operation, including the breach of two more US telecoms.

#China’s ‘#SaltTyphoon’ Hackers Exploit #CiscoRouters for #InitialAccess in Telecom #Espionage—Researchers warn the group is targeting global #TelecomNetworks to spy on data and communications.

🔗 www.wired.com/story/...

1 0 0 0

Koen Van Impe

@cudeso.bsky.social

1 year ago

Agencies now released guidance on digital forensics & monitoring for edge devices to boost threat detection & incident response. www.ncsc.gov.uk/guidance/gui... #initialaccess #ir

1 0 0 0

CyberTaters

@potato.software

1 year ago

Ransomware Groups Abuse Microsoft Services for Initial Access
www.securityweek.com/ransomware-g...

#Infosec #Security #Potatosecurity #CeptBiro #RansomwareGroups #MicrosoftServices #InitialAccess

0 0 0 0

Rene Robichaud

@neroqc.bsky.social

1 year ago

Ransomware Groups Abuse Microsoft Services for Initial Access Sophos warns of two ransomware groups abusing Microsoft 365 services and default configurations to contact internal enterprise users.

Ransomware Groups Abuse Microsoft Services for Initial Access
www.securityweek.com/ransomware-g...

#Infosec #Security #Cybersecurity #CeptBiro #RansomwareGroups #MicrosoftServices #InitialAccess

0 0 0 0

0xberserkr

@0xberserkr.bsky.social

2 years ago

TryHackMe | Cyber Security Training An online platform for learning and teaching cyber security, all through your browser.

The Lay of the Land - I have just completed this room! Check it out: tryhackme.com/room/thelayo...
#tryhackme #ActiveDirectory #InitialAccess #Network-basedSecuritySolutions #Host-basedSecuritySolutions #thelayoftheland via
@realtryhackme

1 0 0 0

0xberserkr

@0xberserkr.bsky.social

2 years ago

TryHackMe | Cyber Security Training An online platform for learning and teaching cyber security, all through your browser.

Weaponization - I have just completed this room! Check it out: tryhackme.com/room/weaponi...
#tryhackme #RedTeam #Scripting #WSH #HTA #VBA #PS #C2 #InitialAccess #PayloadDeliveryTechniques #powercat #PowerShell #weaponization via
@realtryhackme

1 0 0 0

Posts tagged #InitialAccess