Technical Blogs

Here I will provide a continuously updated list of all of the helpful technical blogs that I come across when doing my research. It will include blogs from known Cybersecurity organizations, corporations, etc. to blogs from individual researchers, analysts, red-teamers, etc. These blogs are more technical in nature and each organization/individual usually focuses on a specific aspect of Cybersecurity ranging from pentesting to detection engineering to in-depth malware analysis and reverse engineering.

If you use an RSS aggregator like Feedly, most if not all of these blogs would be great to include in your cybersecurity feed.

Technical Blogs:

Palo Alto - https://www.paloaltonetworks.com/blog/
Talos Intelligence - https://blog.talosintelligence.com/
ZScaler - https://www.zscaler.com/blogs?type=security-research
PT Security- https://www.ptsecurity.com/ww-en/analytics/pt-esc-threat-intelligence/
SecureWorks - https://www.secureworks.com/blog
Proofpoint - https://www.proofpoint.com/us/blog/threat-insight
Recorded Future - https://www.recordedfuture.com/blog
Harfang Lab - https://harfanglab.io/en/insidethelab/
Securelist - https://securelist.com/
Hunt & Hackett - https://www.huntandhackett.com/blog
Sekoia - https://blog.sekoia.io/category/research-threat-intelligence/
TrustedSec- https://trustedsec.com/blog
DfrLab - https://dfrlab.org/research/
Google Project Zero - https://googleprojectzero.blogspot.com/
WithSecure - https://labs.withsecure.com/publications
MdSec - https://www.mdsec.co.uk/knowledge-centre/insights/
Trellix - https://www.trellix.com/blogs/
TrendMicro - https://www.trendmicro.com/en_us/research.html
EclecticIQ - https://blog.eclecticiq.com/
BitDefender - https://www.bitdefender.com/blog/
Flatt Security - https://flatt.tech/research/
Elastic Security - https://www.elastic.co/security-labs
Red Canary - https://redcanary.com/blog/
Resecurity - https://www.resecurity.com/blog
Deep Instinct - https://www.deepinstinct.com/blog
Strike Ready - https://blog.strikeready.com/blog/
Huntress - https://www.huntress.com/blog
iVerify  - https://www.iverify.io/blog
Embee Research - https://www.embeeresearch.io/tag/intel/

Comments

Post a Comment

Popular posts from this blog

TryHackMe CTF Walkthrough - "Simple CTF"

Image
Note: This is a reupload of a CTF walkthrough from my original website which no longer exists. Tonight I'll be providing a writeup on the TryHackMe box "Simple CTF" similar to my writeup on Blue. TryHackMe is another great and incredibly educational site dedicated to teaching learners about offensive and defensive cybersecurity. As always, it's typical to start with a basic Nmap scan.  This is one of the typical Nmap scans that I like to run on TryHackMe and HacktheBox machines. It will take longer than most scans due to the enumeration being performed by the vulnerability script. Another I will typically run is - nmap -sC -sV -A x.x.x.x This is an aggressive service scan with default scripts enabled. Here we have quite a bit of output, the bulk of it being a list of CVE's for the specific version of Apache web server running on the target machine. As we can see, Port 21 (FTP), Port 80 (HTTP), and Port 2222 (SSH) are currently open on the target machine. We can al...
Read more

Malware Overview - ZeuS

Image
 Note: This is a reupload of my writeup of the history of the ZeuS malware from my original website. INTRODUCTION:  Image Source:  https://www.bankinfosecurity.com/zeus-banking-trojan-spawn-alive-kicking-a-10471 When discussing the history of malware, you are more than likely going to hear the same few names over and over again. Conficker, Welchia, ILOVEYOU, Stuxnet, Flame, CryptoLocker, Dridex, and even newer malware like WannaCrypt0r, Emotet, and Maze.  What is left behind but stands atop the lesser remembered malware of the last fifteen years in particular is the ZeuS or Zbot Trojan and its successor, the Gameover ZeuS Trojan. This will be a historical summary of the ZeuS and Gameover ZeuS Trojans, beginning from its initial discovery and ending in the current year.  I will be using a variety of sources for my analysis. This is NOT a technical analysis of the malware, simply a historical account. I plan on writing a full technical analysis of the ZeuS and Gam...
Read more

Group Overview - Evil Corp

Image
This will be my first post in a series of posts summarizing various cyber actors, including APTs, Cybercrime outfits, and Hacktivist groups. I will be mainly discussing the history of the group and their known and documented activities throughout their existence. I plan on making additional summaries of each group that will delve further into their TTPs and other technical information to compliment this summary. The first group I will be discussing is the Evil Corp cybercrime outfit. The group is also known to many by the name INDRIK SPIDER, which was coined by the Cybersecurity company CrowdStrike. I decided to write about the Evil Corp group first due to the fact that they are still very relevant in 2020, as just a few days ago, Symantec published a report discussing a widespread attempted ransomware attack against various U.S. companies carried out by the Evil Corp group earlier this month. Evil Corp is an extremely sophisticated threat actor. They are capable of developing their ow...
Read more