The Cyber Threat Perspective

By SecurIT360

Step into the ever-evolving world of cybersecurity with the offensive security group from SecurIT360. We’re bringing you fresh content from our journeys into penetration testing, threat research an

... more

· Technology

5

1414 ratings

Download on the App Store

Download on the App Store

Get it on Google Play

FAQs about The Cyber Threat Perspective:

How many episodes does The Cyber Threat Perspective have?

The podcast currently has 198 episodes available.

The Cyber Threat Perspective episodes:

June 10, 2022June 10th 2022 CTP Week in Review: Dogwalk - Qakbot - Follina - ESXi Ransomware
In this week's review:
A DFIR Report with no Ransomware and no Cobalt Strike
Path Traversal & MOTW Bypass - DIAGCAB Windows Zero-day aka "Dogwalk"
Linux version of Black Basta ransomware targets VMware ESXi servers
TA570 Qakbot (Qbot) tries CVE-2022-30190 (Follina) exploit (ms-msdt)
Blog: https://offsec.blog/
Youtube: https://www.youtube.com/channel/UCCWmudG_CTNAFBaV48vIcfw
Twitter: https://twitter.com/cyberthreatpov
Work with Us: https://securit360.com
Blog: https://offsec.blog/
Youtube: https://www.youtube.com/@cyberthreatpov
Twitter: https://x.com/cyberthreatpov

Follow Spencer on social ⬇
Spencer's Links: https://go.spenceralessi.com/links

Work with Us: https://securit360.com | Find vulnerabilities that matter, learn about how we do internal pentesting here.
...more
24min
June 03, 2022June 3rd 2022 – Cyber Threat Perspective – Week in Review
In this week's review:
Microsoft Diagnostics Tool Remote Code Execution Zero Day
New Windows Search zero-day added to Microsoft protocol nightmare
Vendor Refuses to Remove Backdoor Account That Can...
Over 3.6 million exposed MySQL servers on IPv4 and IPv6 |...
APTs Overwhelmingly Share Known Vulnerabilities Rather Than Attack O-Days
Blog: https://offsec.blog/
Youtube: https://www.youtube.com/channel/UCCWmudG_CTNAFBaV48vIcfw
Twitter: https://twitter.com/cyberthreatpov
Work with Us: https://securit360.com
Blog: https://offsec.blog/
Youtube: https://www.youtube.com/@cyberthreatpov
Twitter: https://x.com/cyberthreatpov

Follow Spencer on social ⬇
Spencer's Links: https://go.spenceralessi.com/links

Work with Us: https://securit360.com | Find vulnerabilities that matter, learn about how we do internal pentesting here.
...more
29min
May 31, 2022 Threat Intel Flash Briefing May 31st 2022 - Follina - CVE-2022-30190
The sky IS NOT falling with this one. Is it important? Yes. Does it highlight an area that's under-researched and likely contains additional attack vectors and techniques? Absolutely.

Resources
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30190
https://doublepulsar.com/follina-a-microsoft-office-code-execution-vulnerability-1a47fce5629e
https://www.huntress.com/blog/microsoft-office-remote-code-execution-follina-msdt-bug
https://github.com/NVISOsecurity/nviso-cti/blob/master/advisories/29052022%20-%20msdt-0-day.md
John Hammond's Excellent CVE-2022-30190 Video

Blog: https://offsec.blog/
Youtube: https://www.youtube.com/channel/UCCWmudG_CTNAFBaV48vIcfw
Twitter: https://twitter.com/cyberthreatpov
Blog: https://offsec.blog/
Youtube: https://www.youtube.com/@cyberthreatpov
Twitter: https://x.com/cyberthreatpov

Follow Spencer on social ⬇
Spencer's Links: https://go.spenceralessi.com/links

Work with Us: https://securit360.com | Find vulnerabilities that matter, learn about how we do internal pentesting here.
...more
18min
May 27, 2022May 27th 2022 – Cyber Threat Perspective – Week in Review
In This Weeks Review
PDF Malware Is Not Dead Yet
Detecting & Preventing Rogue Azure Subscriptions
Python and PHP Library Updated with 'Extra' Features by a "Security Researcher"
2022 Verizon Data Breach Investigations Report
Zoom: Remote Code Execution with XMPP
Exploit released for critical VMware auth bypass bug
Blog: https://offsec.blog/
Youtube: https://www.youtube.com/channel/UCCWmudG_CTNAFBaV48vIcfw
Twitter: https://twitter.com/cyberthreatpov
Work with Us: https://securit360.com
Blog: https://offsec.blog/
Youtube: https://www.youtube.com/@cyberthreatpov
Twitter: https://x.com/cyberthreatpov

Follow Spencer on social ⬇
Spencer's Links: https://go.spenceralessi.com/links

Work with Us: https://securit360.com | Find vulnerabilities that matter, learn about how we do internal pentesting here.
...more
34min
May 20, 2022May 20th, 2022 - Cyber Threat Perspective - Week in Review
In This Weeks Review
Gootloader & Gootkit Analysis by DFIR Report and Red Canary
Authenticated PetitPotam Lives On (CVE-2022-26925)
The Hunter Becomes the Hunted: Evicting the Adversary
Spoofing SaaS Vanity URLS for Social Engineering Attacks
Blog: https://offsec.blog/
Youtube: https://www.youtube.com/channel/UCCWmudG_CTNAFBaV48vIcfw
Twitter: https://twitter.com/cyberthreatpov
Work with Us: https://securit360.com

Blog: https://offsec.blog/
Youtube: https://www.youtube.com/@cyberthreatpov
Twitter: https://x.com/cyberthreatpov

Follow Spencer on social ⬇
Spencer's Links: https://go.spenceralessi.com/links

Work with Us: https://securit360.com | Find vulnerabilities that matter, learn about how we do internal pentesting here.
...more
22min
May 13, 2022May 13th, 2022 - Cyber Threat Perspective - Week in Review
In This Weeks Review
Threat Actor using Windows Event Logs for "fileless" Malware
CVE-2022-1388 - F5 BIG-IP PoC Released
CVE-2021-22600 - Privilege Escalation Bug In The Linux Kernel
CVE-2022-26925 - A Windows LSA Spoofing Vulnerability (PetitPotam)
CVE-2022–26923 - Another ADCS Domain Privilege Escalation
Blog: https://offsec.blog/
Youtube: https://www.youtube.com/channel/UCCWmudG_CTNAFBaV48vIcfw
Twitter: https://twitter.com/cyberthreatpov
Work with Us: https://securit360.com

Blog: https://offsec.blog/
Youtube: https://www.youtube.com/@cyberthreatpov
Twitter: https://x.com/cyberthreatpov

Follow Spencer on social ⬇
Spencer's Links: https://go.spenceralessi.com/links

Work with Us: https://securit360.com | Find vulnerabilities that matter, learn about how we do internal pentesting here.
...more
19min
May 06, 2022May 6th, 2022 - Cyber Threat Perspective - Week in Review
In this week's review:
Detecting SharpHound using Decoys
UNC3524: Eye Spy on Your Email | Mandiant
The New Initial Access Trend: ZIPs, ISOs & LNKs
Unauthenticated RCE in F5 BIG-IP CVE-2022-1388
Blog: https://offsec.blog/
Youtube: https://www.youtube.com/channel/UCCWmudG_CTNAFBaV48vIcfw
Twitter: https://twitter.com/cyberthreatpov
Work with Us: https://securit360.com
Blog: https://offsec.blog/
Youtube: https://www.youtube.com/@cyberthreatpov
Twitter: https://x.com/cyberthreatpov

Follow Spencer on social ⬇
Spencer's Links: https://go.spenceralessi.com/links

Work with Us: https://securit360.com | Find vulnerabilities that matter, learn about how we do internal pentesting here.
...more
28min
April 27, 2022 Threat Intel Flash Briefing - Kerberos Relaying to Local SYSTEM
There exists a universal no-fix local privilege escalation in Windows domain environments where LDAP signing is not enforced (the default settings). Thanks to the research and open source tools of several researchers, it's now trivial to elevate to SYSTEM on most Windows Operating Systems.

Resources:
https://github.com/Dec0ne/KrbRelayUp
https://googleprojectzero.blogspot.com/2021/10/using-kerberos-for-authentication-relay.html
https://github.com/cube0x0/KrbRelay
https://github.com/Dec0ne/KrbRelayUp

Social:
https://twitter.com/cyberthreatpov
https://www.youtube.com/channel/UCCWmudG_CTNAFBaV48vIcfw
Blog: https://offsec.blog/
Youtube: https://www.youtube.com/@cyberthreatpov
Twitter: https://x.com/cyberthreatpov

Follow Spencer on social ⬇
Spencer's Links: https://go.spenceralessi.com/links

Work with Us: https://securit360.com | Find vulnerabilities that matter, learn about how we do internal pentesting here.
...more
24min

FAQs about The Cyber Threat Perspective:

How many episodes does The Cyber Threat Perspective have?

The podcast currently has 198 episodes available.

More shows like The Cyber Threat Perspective

Global News Podcast by BBC World Service

Global News Podcast

7,585 Listeners

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

372 Listeners

Risky Business by Patrick Gray

Risky Business

372 Listeners

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

651 Listeners

CyberWire Daily by N2K Networks

CyberWire Daily

1,020 Listeners

Click Here by Recorded Future News

Click Here

416 Listeners

Darknet Diaries by Jack Rhysider

Darknet Diaries

8,055 Listeners

Cybersecurity Today by Jim Love

Cybersecurity Today

180 Listeners

Hacking Humans by N2K Networks

Hacking Humans

314 Listeners

CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

CISO Series Podcast

189 Listeners

Security Noise by TrustedSec

Security Noise

19 Listeners

Defense in Depth by David Spark, Steve Zalewski, Geoff Belknap

Defense in Depth

74 Listeners

Cyber Security Headlines by CISO Series

Cyber Security Headlines

139 Listeners

Hacker And The Fed by Chris Tarbell & Hector Monsegur

Hacker And The Fed

169 Listeners

Entra.Chat by Merill Fernando

Entra.Chat

4 Listeners