OPTIV/SOURCE ZERO

This advisory from Optiv’s gTIC covers recent incidents related to Russian military operations in Ukraine and provides cybersecurity recommendations.

This advisory offers recommendations for organizations potentially affected by Russian state-sponsored activity in Ukraine.

We identified Ivy framework fileless attack techniques that execute undetected in Microsoft Office. Here's how with suggested security augmentations.

We identified Ivy framework fileless attack techniques that execute undetected in Microsoft Office. Here's how with suggested security augmentations.

This post discusses the creation of Azure test virtual machines and assigning an allowed IP address as part of a Power Automate cloud flow.

This video discusses Optiv's creation of Azure Resource Groups and Security Groups as part of a Power Automate Cloud Flow.

We leveraged Microsoft’s OAuth authorization flow for a phishing attack. Here’s step-by-step guidance on how to conduct it for security assessment.

Optiv researcher Dan Kiraly examines automated endpoint evaluations in the first technical video of a series.

Multiple CVEs involving Active Directory Certificate Services and a new NTLM relay attack can be chained to compromise an Active Directory domain.

Go365 performs user enumeration and password spraying attacks on organizations that use Office 365.

Optiv highlights the attack strategy of using forged Kerberos tickets to compromise a domain, and provides ways to defend against it.

Optiv highlights the attack strategy of using forged Kerberos tickets to compromise a domain, and provides ways to defend against it.