Two Critical Vulnerabilities Discovered in JetBrains TeamCity

Incidense response team

Red Team

Vulnerabilities

Two Critical Vulnerabilities Discovered in JetBrains TeamCity

Rapid7 researchers have discovered two critical vulnerabilities in JetBrains TeamCity – a popular build management and continuous integration/delivery (CI/CD) server. Given the

Managing Vulnerabilities in the Digital Era

Incidense response team

MDR Team

Vulnerabilities

Managing Vulnerabilities in the Digital Era

The modern digital environment is constantly evolving. Today, security leaders of organizations of all sizes in all sectors are tasked with understanding and mitigating an

The Definitive Guide to Managing Cybersecurity Incidents

Cyber basics

Incidense response team

The Definitive Guide to Managing Cybersecurity Incidents

The success of a modern organization is increasingly influenced by its ability to manage cybersecurity incidents. Those with the right knowledge, processes, and infrastructure in

Anatomy of a Modern Ransomware Attack

Awareness

Cyber basics

Incidense response team

MDR Team

Anatomy of a Modern Ransomware Attack

Ransomware is a serious issue for companies all over the world. From SMBs and startups to multinational enterprises, this particular cybercrime affects organizations of all sizes

Cloud forensic analysis: all you need to know

Awareness

Cyber basics

Incidense response team

Cloud forensic analysis: all you need to know

What you need to know about the cloud forensic analysis process The shift towards the cloud is happening at an increasingly rapid rate, as businesses and organizations around the

Cybersecurity Protocols Every Organization Should Know

Awareness

Cyber basics

Incidense response team

MDR Team

Cybersecurity Protocols Every Organization Should Know

Regardless of the size of your organization, having the proper cyber attack response plan in place is crucial. The strategy has several important stages, including asset

Ransomware 101: How to Prevent, Detect, and Respond to a ransomware attack

Cyber basics

Incidense response team

Ransomware 101: How to Prevent, Detect, and Respond to a ransomware attack

As organizations digitalize, increased technological dependence requires them to embrace cybersecurity as a strategic

Testlink 1.9.20: Unrestricted file upload and SQL injection

Incidense response team

Testlink 1.9.20: Unrestricted file upload and SQL injection

Testlink is an open source, web based test management and test execution system written in PHP (a scripting language also known as an Hypertext

The rise of Emotet

Awareness

Incidense response team

Red Team

The rise of Emotet

Emotet is a multipurpose malware which is mainly distributed through spam mails. It was first spotted in 2014 and was designed to steal bank account

Execution – Powershell (T1086)

Incidense response team

Execution – Powershell (T1086)

Powershell is a commandline interface (CLI) with command and scripting capabilities. Its main targets are System Administrators to automate task and control

Initial Access – Drive-by Compromise (T1189)

Incidense response team

Red Team

Initial Access – Drive-by Compromise (T1189)

This post is the first of a series of posts that will provide a better understanding about the techniques used by adversaries to reach their tactical

In-depth Freemarker Template Injection

Incidense response team

In-depth Freemarker Template Injection

During a recent engagement, our AppSec team faced an interesting instance of limited Server Side Template Injection in

An unusual case of Client SQL Injection

Incidense response team

An unusual case of Client SQL Injection

It is widely known how dangerous using unsanitized data in SQL queries can

Recovering SQLCipher encrypted data with Frida

Incidense response team

Recovering SQLCipher encrypted data with Frida

Our AppSec team has faced the SQLCipher library during some recent security audits of mobile applications. According to their GitHub