Optiv's gTIC team provides a prioritized software and services list that covers exploitation trends and vulnerabilities in popular Apache frameworks.

Dompdf versions 1.2.0 are vulnerable to RCE attacks. Web applications that use the dompdf library for pdf generation and reference the remote CSS file....

EDR hooking has become a major part of an adversary’s ability to successfully compromise an endpoint system. Hooking is a technique that alters the....

Do you think that simple tools like Gaussian blurs can safely redact sensitive content in your online images? See Optiv's solution to the....

Optiv's® Global Threat Intelligence Center (gTIC) observed, collected, and analyzed multiple data points and information derived from Optiv's own....

Spear phishing is a social engineering activity intended to simulate a realistic attack scenario with the intent of bypassing technical security....

What if queries could be written in one language and translated into over 20 others? This would reduce the learning curve to request specific....

This post highlights different tools and approaches for testing thick client applications for vulnerabilities.

This post explains how to use YARA rules differently by targeting only the files that apply to the rules being used to improve scan results.

Palo Alto Networks is expanding the options for organizations that need to secure and manage branch office connectivity and remote workers.

Netskope’s instance awareness allows customers to reduce risk by filling a void left by traditional secure web gateways and next-gen firewalls.

This advisory from Optiv’s gTIC covers recent incidents related to Russian military operations in Ukraine and provides cybersecurity recommendations.