1. PoolParty Process Injection Techniques - SafeBreach's Alon Leviev unveiled eight ingenious methods designed to execute code within Windows systems, skillfully evading detection by EDR systems.

2. COLDRIVER's Tactical Evolution - The threat actor COLDRIVER, also known as Star Blizzard, SEABORGIUM, and more, intensifies its credential theft operations, deploying deceptive domains and sophisticated evasion tactics.

3. Lazarus Group's Espionage Continues - Operation Blacksmith, orchestrated by the Lazarus Group, targets Log4j vulnerabilities to deploy RATs, revealing a strategic shift in their espionage activities.

In this episode:

• Okta Breach Aftermath: Explore the aftermath of Okta's recent breach, delving into post-breach threat actor activity and its impact on a multitude of customers, highlighting potential risks of phishing and social engineering.
• Google Chrome Zero-Day: Discuss the recent zero-day vulnerability in Google Chrome, emphasizing the importance of updating to Chrome version 119.0.6045.199 to mitigate potential risks.
• Municipal Water Authority Cyberattack: Uncover the cyberattack on the Municipal Water Authority in Aliquippa, Pennsylvania, by the Cyber Av3ngers group, emphasizing the criticality of securing programmable logic controllers (PLCs) in water facilities.
• Exposed Kubernetes Secrets: Address the warning issued by Aqua Security regarding exposed Kubernetes secrets in public repositories, affecting Fortune 500 companies and exposing weak credentials.
• Diverse Threat Landscape: Highlight the evolving cyber threat landscape, encompassing breaches, targeted attacks, and exposed vulnerabilities, emphasizing the importance of staying informed and proactive.

Stay tuned to Cyber Citadel for proactive measures and insights against the constantly evolving cybersecurity landscape.

In this episode:

Week of November 20th 2023 Latest News: LummaC2's Trigonometry Evasion, CISA's KEV Catalog Updates, NetSupportRAT Surge.

Stay Informed, stay vigilant, and stay secured