threat-intelligence
5 posts found
Defending Entra ID Against Device Code Flow Abuse
A practical security checklist for defending Microsoft Entra ID and Microsoft 365 environments against RFC 8628 OAuth device code phishing and token capture att…
Bitcoin Core Vulnerability Policy: Fast-Lane Fixes for Automated Audits
Bitcoin Core revised its security policy to drop long disclosure embargoes for easily discoverable bugs. Here is why automated code analysis forced the change a…
Stadia RAT Workstation Triage: An Inspection Checklist for Stolen Credential Incidents
Stadia RAT combines StealC credential theft with hidden desktop access and interactive shells. Use this 10-point triage checklist to inspect Windows endpoints b…
Hardware Interdiction: How Display Sniffers Defeat Certified Silicon
How hardware signer tampering evolved from local fault injection in 2018 to autonomous LTE implants draining seed phrases during device setup.
North Korea’s $11M Crypto Job Interview Scheme: How Remote Hiring Became an Attack Vector
Seven U.S. intelligence agencies tied a $11M cryptocurrency theft to North Korean recruitment fraud. Fake job interviews, credential harvesting, and cryptocurre…