OPTIV/SOURCE ZERO

We identified Ivy framework fileless attack techniques that execute undetected in Microsoft Office. Here's how with suggested security augmentations.

We identified Ivy framework fileless attack techniques that execute undetected in Microsoft Office. Here's how with suggested security augmentations.

This post discusses the creation of Azure test virtual machines and assigning an allowed IP address as part of a Power Automate cloud flow.

This video discusses Optiv's creation of Azure Resource Groups and Security Groups as part of a Power Automate Cloud Flow.

We leveraged Microsoft’s OAuth authorization flow for a phishing attack. Here’s step-by-step guidance on how to conduct it for security assessment.

Optiv researcher Dan Kiraly examines automated endpoint evaluations in the first technical video of a series.

Multiple CVEs involving Active Directory Certificate Services and a new NTLM relay attack can be chained to compromise an Active Directory domain.

Go365 performs user enumeration and password spraying attacks on organizations that use Office 365.

Optiv highlights the attack strategy of using forged Kerberos tickets to compromise a domain, and provides ways to defend against it.

Optiv highlights the attack strategy of using forged Kerberos tickets to compromise a domain, and provides ways to defend against it.

This article explores gaps that allow for the undetected execution of code on systems protected by Microsoft Defender Advanced Threat Protection.

We encourage clients to understand and adopt Palo Alto’s powerful credential theft prevention feature.