Episodes

  • From IDE to IDK. How JetBrains Became a Playground for Cyber Intruders

    From IDE to IDK. How JetBrains Became a Playground for Cyber Intruders
    Oct 5 2024
    This document provides aт analysis of the Exploiting JetBrains TeamCity CVE advisory, as detailed in the Defense.gov publication. The analysis delves into various critical aspects of cybersecurity, focusing on the exploitation of CVEs to gain initial access to networks, deployment of custom malware.

    This analysis serves as a valuable resource for cybersecurity professionals, software developers, and stakeholders in various industries, offering a detailed understanding of the tactics, techniques, and procedures (TTPs) employed by cyber actors. By providing a qualitative summary of the advisory, this document aims to enhance the cybersecurity posture of organizations, enabling them to better protect against similar threats and contribute to the collective defense against state-sponsored cyber espionage activities.


    Full content (all-in-one episodes)
    Show More Show Less
    25 mins
  • JetBrains. Edge Sword of Software Development II

    JetBrains. Edge Sword of Software Development II
    Oct 4 2024
    A non-obvious view of the benefits and drawbacks of using JetBrains related to cyber actors and NSA
    Show More Show Less
    2 mins
  • JetBrains. Edge Sword of Software Development

    JetBrains. Edge Sword of Software Development
    Oct 3 2024
    A balanced view of the benefits and drawbacks of using JetBrains tools, highlighting the security risks alongside their functionality.
    Show More Show Less
    1 min
  • JetBrains. The Unofficial Contributor to MITRE ATT&CK

    JetBrains. The Unofficial Contributor to MITRE ATT&CK
    Oct 2 2024
    How JetBrains vulnerabilities enriched the MITRE ATT&CK framework, providing new tactics and techniques for attackers.
    Show More Show Less
    2 mins
  • JetBrains. A Hacker's Best Friend

    JetBrains. A Hacker's Best Friend
    Oct 1 2024
    How JetBrains vulnerabilities became essential tools in the adversary's arsenal, much to CISA's dismay.
    Show More Show Less
    2 mins
  • JetBrains. The Lateral Movement Express

    JetBrains. The Lateral Movement Express
    Sep 30 2024
    An examination of how JetBrains vulnerabilities enabled swift lateral movement across networks, with CISA struggling to keep up.
    Show More Show Less
    1 min
  • JetBrains. Digging Tunnels in Cybersecurity

    JetBrains. Digging Tunnels in Cybersecurity
    Sep 29 2024
    How JetBrains vulnerabilities facilitated tunneling into compromised environments, with CISA left to fill in the gaps.
    Show More Show Less
    1 min
  • JetBrains. Network Exploration Made Easy

    JetBrains. Network Exploration Made Easy
    Sep 28 2024
    A look at how JetBrains vulnerabilities simplified network reconnaissance for attackers, much to CISA's frustration.
    Show More Show Less
    1 min