XM Cyber Advisory – Follina, CVE-2022-30190, Zero Day
On May 27, a new zero day critical vulnerability called Follina was discovered by the nao_sec security research team. The vulnerability resides in malicious…
Chaining together Active Directory attack techniques to give your organization the edge against attackers
Debuting at RSA 2022 we will show the industry how we can link the use of Active Directory (AD) into the entire attack path,…
Decrypting VMware Workstation Passwords for Fun
Overview At XM Cyber, we have been hard at work on the techniques that attackers use against your VMware environments. What you’re about to…
Our security is only as strong as our ability to manage it: The necessity of Attack Path Management for the Hybrid Cloud
Now it’s no secret businesses have ramped up and driven the adoption of the cloud faster than any period previously. One of the key…
The XM Cyber 2022 Attack Path Management Impact Report
The industry’s first annual attack path management research report is here! The XM Cyber research team analyzed nearly 2 million entities to bring insights…
5 Ways to Make Attack Path Management More Manageable
Effective cybersecurity can be distilled to a single idea: Protect your most business critical assets. Protecting your most critical assets, in turn, can be…
XM Cyber Advisory – Spring4Shell, Zero Day
Overview On March 30, A new zero day critical vulnerability was leaked in another open source software library. The vulnerability affects Spring Framework which…
New Privilege Escalation Techniques are Compromising your Google Cloud Platform
In this research you’ll discover some of the common attack techniques used in Google Cloud Platform (GCP) to better understand how an attacker exploits…
See All Ways: How to Overcome the Big Disconnect in Cybersecurity
Today’s reality in cybersecurity is that, with the right combination of tools, you may be able to see all kinds of misconfigurations … and…
10 ways to gain control over Azure function app sites
Pen-testers! Red-teamers! We’ve prepared a bucket of new Azure techniques, specifically about Azure function app sites. In this blog, we’ll show you new approaches…
Choosing Attack Path Management Over Security Control Validation When Shopping for Breach & Attack Simulation
Breach and Attack Simulation is gaining lots of hype today. Yet simulating attacks can mean many different things and serve many different use cases….
Go Beyond Log4Shell and See the Entire Attack Path
We understand the facts: The most common open-source library (Java) has already been identified with 3 CVEs and counting, with over 3 million attacks…
){kind=icon}
){kind=icon}
){kind=icon}