NewsGreyNoise
Introducing Tactics: See What Adversaries Do After They’re Inside
Teaser from the source
GreyNoise Tactics gives anyone running a Deception Sensor visibility into what adversaries do after initial compromise, automatically mapping qualifying sessions to the MITRE ATT&CK framework.
This is the RSS-feed teaser. Read the full article at the original source.
Read at GreyNoiseMore on Introducing
Other advisories
- Not ratedosv:CLEANSTART-2024-TB77881website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational function
- Not ratedosv:ECHO-c4ce-3570-7d06Vulnerability is in libheif's HEIF sequence parser (Box_stsz::parse in libheif/sequences/seq_boxes.cc, plus track.cc / chunk.cc). This sequence / ISOBMFF track parsing was added in v1.20.0; v1.19.8 — the version we ship — has no sequences/ directory and no Box_stsz at all (verified: no such file or symbol in the v1.19.8 source), so the vulnerable code is not present. The GHSA lists "affected >= 1.19.0", but that range is imprecise: the introducing commit 58c21087 is not in the v1.19.8 tag.
Other news entries
- GitHub Launches npm Firewall to Block Malicious Packages Before InstallationNewsThe Hacker News
- Leveraging GenAI for Simplifying Zero Trust and Accelerating Threat Defense in VMware vDefendNewsVMware Security Advisories
- Anthropic introduces zero-retention AI safety monitoring for enterprisesNewsCSO Online
- OpenClaw rolls out system-wide overhaul, updates security controls across agent platformNewsCSO Online
- Android 17 adds ECH support to make web browsing harder to trackNewsBleepingComputer
- A New Way to Navigate GreyNoiseNewsGreyNoise
- GitHub and PyPI Time-based Policies Aim to Improve Supply Chain SecurityNewsSANS NewsBites
- Google adds Android protection against AI deepfake scam callsNewsBleepingComputer
Source: https://www.greynoise.io/blog/introducing-tactics-see-what-adversaries-do-after-they-are-inside
ID