Tony Kirtley Leads IBM X-Force Incident Response Team
..................
https://nile1.com/tony-kirtley-leads-ibm-x-force-incident-response-team/
..................
#cyberBreaches #cyberResiliency #ibmSecurity #ibmX-force #incidentResponse #missouriCyberTeam #missouriNationalGuard #threatHunting #to

3/ 3. timeout.exe making network connections: later stages inject .NET into it.
4. Scheduled tasks created minutes after a RunMRU write.
ATT&CK T1204.004 / T1059.005 / T1055 / T1053.005.
Harden: remove Run from Start via GPO where unused, PowerShell script block logging. #ThreatHunting

We are summarizing weekly OSINT channels to give a recap with actions for the worst of the evils.

No cost, no ads, and free RSS feed

www.focusedhunts.com/blog/last-we...

#OSINT #LastWeekInThreats #ThreatHunting

📢 Unified Threat Hunting Process : méthodologie structurée pour les programmes de threat hunting

Cet article présente un Unified Threat Hunting Process développé par un Lead Threat Hunter pour construire un programme de…

🔴 vérification factuelle basse
#méthodologie #ThreatHunting #Cyberveille

📢 Japon : initiative nationale de threat hunting sur les infrastructures critiques pour 2027

Cet article présente l'initiative japonaise de threat hunting actif sur les infrastructures critiques, prévue dans le cadre…

🔴 vérification factuelle basse
#ThreatHunting #DéfenseCyberActive #Cyberveille

If you're attending the SANS DFIR Summit, @letswastetime.bsky.social and I are giving a workshop: "Know Normal, Catch Abnormal: Hands-On Baseline Hunting". It's a sample of our new FOR668 #ThreatHunting class, hot off the presses and free with admission!

www.sans.org/cyber-securi...

C2 beaconing writeups are gold — jitter, beacon interval, and weird-but-valid HTTP patterns are what most detections miss. Thanks for publishing real wire data, not just IOCs. #threathunting

Cutting phishing response time takes visibility, structure, and threat intelligence pivots. #Phishing #SOC #ThreatHunting #IncidentResponse #Cybersecurity #IOCs #SecurityTech #SOCAutomation https://thedailytechfeed.com/3-steps-soc-teams-need-to-investigate-phishing-faster/

Whew! @letswastetime.bsky.social and I just turned in our new #ThreatHunting course to SANS. Can't wait to finally get this in front of students!

Threat hunting starts with a hypothesis, not an alert

It's human-led investigation for attacker activity your automated detection already missed.

#GCED #ThreatHunting #CyberSecurity #SOC

Full GCED explanation, free: https://navyduck.com/giac/gced/q218-soc-team-wants-implement-threat

#threathunting #agenticai #thrunting #detectionengineering #THORcollective

Active zero days breach Cisco email gateways, Check Point servers, F5 controllers, and identity planes.

Read full Inferlume report here: inferlume.com/reports/dail...

#CyberThreatIntelligence #ZeroDay #VulnerabilityManagement #IncidentResponse #ThreatHunting #NetworkSecurity

Half of threat hunters say bad data is their biggest problem

📖 Read more: www.helpnetsecurity.com/2026/09/25/s...

#cybersecurity #cybersecuritynews #threathunting #infosec #SOC #DFIR @sansinstitute.bsky.social

Critical edge zero days hit Cisco, F5, and Arista, while EvilTokens phishing collapses after 12000 breaches.

Full Inferlume Report: inferlume.com/reports/dail...

#CyberThreatIntelligence #ZeroDay #VulnerabilityManagement #ThreatHunting #IncidentResponse #InfoSec

Interactive sandboxing exposes the phishing behavior static scans miss—redirects, scripts, fake CAPTCHAs revealed. #Phishing #Sandboxing #Cybersecurity #SOC #ThreatHunting #SecurityTools thedailytechfeed.com/why-sandboxi...

What if a breach happened—and your security tools never alerted you?
A quick guide on what businesses should look for in a threat analytics provider:
#ThreatAnalytics #CISO #InfoSec #SynergyIT #Cybersecurity #ThreatDetection #ThreatAnalytics #SOC #ThreatHunting #BusinessSecurity #USITServices

Integrating threat intelligence slashes SOC triage time and cuts burnout. #ThreatIntelligence #SOC #Cybersecurity #TIFeeds #SandboxAnalysis #ThreatHunting thedailytechfeed.com/threat-intel...

Malwoverview 8.2.0 is out:

github.com/alexandrebor...

To install it:

python -m pip install -U malwoverview[all]

New: --nist 6 lists all CVEs associated with a component

#malware #cybersecurity #informationsecurity #vulnerability #cve #threathunting #threatintelligence

Active 0-days hit Cisco ISE & Linux kernels, DPRK backdoors infiltrate developer workstations, & AI workflow exploits escalate. Full Inferlume Report: inferlume.com/reports/dail....

#CyberThreatIntelligence #VulnerabilityManagement #LinuxSecurity #ZeroDay #ThreatHunting #IncidentResponse