⏰ Last chance to register for the ThreatOps Challenge: Capture-the-Flag!
Investigate attack scenarios and compete with peers in a virtual CTF designed for cybersecurity practitioners across retail, hospitality, and travel.
@rhisac.org
@rhisac.org⏰ Last chance to register for the ThreatOps Challenge: Capture-the-Flag!
Investigate attack scenarios and compete with peers in a virtual CTF designed for cybersecurity practitioners across retail, hospitality, and travel.
@infosecbot.bsky.socialA Little More Logic in Splunk: Introducing SPL2’s if Command
https://
detect.fyi/a-little-more-
logic-in-splunk-introducing-spl2s-if-command-a2c53901f9b5
…
#blueteam #threathunting
— from @ipurple (https://x.com/ipurple/status/2110289984611615104)
@lobst3r.bsky.socialBlue Team, heads up!
In questo articolo presento una versione, migliorata e al passo coi tempi, di sysmon.
Presento tutte le modifiche effettuate e vi lascio il link al file xml pronto da scaricare e usare.
blog.lobsec.com/2026...
@nile11.bsky.socialTony Kirtley Leads IBM X-Force Incident Response Team
..................
https://nile1.com/tony-kirtley-leads-ibm-x-force-incident-response-team/
..................
#cyberBreaches #cyberResiliency #ibmSecurity #ibmX-force #incidentResponse #missouriCyberTeam #missouriNationalGuard #threatHunting #to
@bizbln.bsky.socialZimbra CVE-2023-34192 exposed networks via email, root access, OAuth theft. Secure your mail now! #CyberSecurity #Zimbra #CVE202334192 #EmailSecurity #ThreatHunting #Infosec
@tp-security.bsky.social3/ 3. timeout.exe making network connections: later stages inject .NET into it.
4. Scheduled tasks created minutes after a RunMRU write.
ATT&CK T1204.004 / T1059.005 / T1055 / T1053.005.
Harden: remove Run from Start via GPO where unused, PowerShell script block logging. #ThreatHunting
@focusedhunts.netWe are summarizing weekly OSINT channels to give a recap with actions for the worst of the evils.
No cost, no ads, and free RSS feed
@cyberveille-ch.bsky.social📢 Unified Threat Hunting Process : méthodologie structurée pour les programmes de threat hunting
Cet article présente un Unified Threat Hunting Process développé par un Lead Threat Hunter pour construire un programme de…
🔴 vérification factuelle basse
#méthodologie #ThreatHunting #Cyberveille
@cyberveille-ch.bsky.social📢 Japon : initiative nationale de threat hunting sur les infrastructures critiques pour 2027
Cet article présente l'initiative japonaise de threat hunting actif sur les infrastructures critiques, prévue dans le cadre…
🔴 vérification factuelle basse
#ThreatHunting #DéfenseCyberActive #Cyberveille
@davidjbianco.bsky.socialIf you're attending the SANS DFIR Summit, @letswastetime.bsky.social and I are giving a workshop: "Know Normal, Catch Abnormal: Hands-On Baseline Hunting". It's a sample of our new FOR668 #ThreatHunting class, hot off the presses and free with admission!
@cl0qsearch.bsky.socialC2 beaconing writeups are gold — jitter, beacon interval, and weird-but-valid HTTP patterns are what most detections miss. Thanks for publishing real wire data, not just IOCs. #threathunting
@thedailytechfeed.comCutting phishing response time takes visibility, structure, and threat intelligence pivots. #Phishing #SOC #ThreatHunting #IncidentResponse #Cybersecurity #IOCs #SecurityTech #SOCAutomation https://thedailytechfeed.com/3-steps-soc-teams-need-to-investigate-phishing-faster/
@davidjbianco.bsky.socialWhew! @letswastetime.bsky.social and I just turned in our new #ThreatHunting course to SANS. Can't wait to finally get this in front of students!
@zachzang.bsky.socialThreat hunting starts with a hypothesis, not an alert
It's human-led investigation for attacker activity your automated detection already missed.
#GCED #ThreatHunting #CyberSecurity #SOC
Full GCED explanation, free: https://navyduck.com/giac/gced/q218-soc-team-wants-implement-threat
@letswastetime.bsky.social
@inferlume.bsky.socialActive zero days breach Cisco email gateways, Check Point servers, F5 controllers, and identity planes.
Read full Inferlume report here: inferlume.com/reports/dail...
#CyberThreatIntelligence #ZeroDay #VulnerabilityManagement #IncidentResponse #ThreatHunting #NetworkSecurity
@helpnetsecurity.comHalf of threat hunters say bad data is their biggest problem
📖 Read more: www.helpnetsecurity.com/2026/09/25/s...
#cybersecurity #cybersecuritynews #threathunting #infosec #SOC #DFIR @sansinstitute.bsky.social
@inferlume.bsky.socialCritical edge zero days hit Cisco, F5, and Arista, while EvilTokens phishing collapses after 12000 breaches.
Full Inferlume Report: inferlume.com/reports/dail...
#CyberThreatIntelligence #ZeroDay #VulnerabilityManagement #ThreatHunting #IncidentResponse #InfoSec
@thedailytechfeed.comInteractive sandboxing exposes the phishing behavior static scans miss—redirects, scripts, fake CAPTCHAs revealed. #Phishing #Sandboxing #Cybersecurity #SOC #ThreatHunting #SecurityTools thedailytechfeed.com/why-sandboxi...
@mandy9519brar91.bsky.socialWhat if a breach happened—and your security tools never alerted you?
A quick guide on what businesses should look for in a threat analytics provider:
#ThreatAnalytics #CISO #InfoSec #SynergyIT #Cybersecurity #ThreatDetection #ThreatAnalytics #SOC #ThreatHunting #BusinessSecurity #USITServices
