Threat Actors evade and target Sql servers
Microsoft Security Intelligence comes with a warning about an attack campaign targeting SQL servers and using a new approach to evade PowerShell monitoring. Threat actors are using sqlps.exe, a utility…
Adobe LoTL Classifier
Living-off-the-land (LotL) is used to describe attacks where malicious actors leverage legitimate software in an effort to avoid being detected. Adobe has released an open source tool, named LotL Classifier,…
Patch PowerShell to Fix WDAC Exploit
Microsoft announced a patch for PowerShell 7 that fixes two vulnerabilities allowing attackers to bypass WDAC (Windows Defender Application Control) enforcement and gain access to credentials written in plain text.…
PowerShell Nightmare
PowerShell provides a command-line shell, a framework, and a scripting language focused on automation for processing PowerShell cmdlets running on all major platforms, including Windows, Linux, and macOS combining with structural programming…