Are Corporate VPNs Really on the Way Out? A decade ago corporate VPNs were everywhere, but they're struggling to find their place in a cloud-based world.

The Titan Stealer: Notorious Telegram Malware Campaign - Uptycs The Uptycs threat research team recently discovered a campaign involving the Titan Stealer malware, which is being marketed and sold by a threat actor (TA) through a Telegram channel for cybercrime purposes. The stealer is capable of stealing a variety of information from infected Windows machines, including credential data from browsers and crypto wallets, FTP client...

Password Best Practices 2023: How Things Have Changed With passwords currently top-of-mind for many, now might be a good time to talk about password choices. Despite some recent headlines, password managers are still a great idea and the strongest passwords are still the ones randomly generated by a password manager. At last word, LastPass vaults are still quite safe if a strong primary password was chosen....

Monitoring Millions of Workloads in AWS on the Cheap: How the Netflix Cyber Security Team uses Osquery 7k microservices. 2.5 million EC2 instances and containers per day. Immutable (except not always) infrastructure. What is this? A security professional’s nightmare?

Using Osquery Extensions to Detect Java Security Vulnerabilities at Scale People familiar with osquery know it is a powerful visibility tool. What’s even better is that you can use osquery extensions to extend functionality and solve complex problems. With the recent spate of vulnerabilities in Java software libraries, Uptycs developed <a href="https://github.com/uptycslabs/uptycs_osquery_extensions">an open-source extension...

Your Company's Bossware Could Get You in Legal Trouble Workplace surveillance tools are extremely popular. Some may also be illegal.

Kolide Announces Okta Device Trust Integration Kolide now integrates with Okta to block untrusted and non-compliant devices. Achieve 100% compliance through end-user driven remediation.

Kolide Announces Okta Device Trust Integration Kolide now integrates with Okta to block untrusted and non-compliant devices. Achieve 100% compliance through end-user driven remediation.

Presenting the Sensitive Data Report We're shining a light on one of cybersecurity's biggest blind spots.

Understanding Stealerium Malware and Its Evasion Techniques The Uptycs threat research team has recently identified an attack campaign that uses Stealerium, a type of stealer malware. It’s delivered through Microsoft Office attachments containing malicious macros. Once activated, it’s capable of stealing sensitive information such as network information, system information, screenshots and login credentials...

Denial of Service (DoS) and Arbitrary File Read Vulnerability in ImageMagick A critical security issue was recently uncovered in ImageMagick, the widely-used image manipulation software suite. It’s used by many websites, applications, and systems to process user-uploaded images and has been discovered to have zero-day vulnerabilities that can allow an attacker to execute malicious code.

Using Osquery Extensions to Detect Java Vulnerabilities at Scale People familiar with osquery know that it’s a powerful visibility tool. What’s even better is that osquery extensions enable you to broaden its functionality to solve complex problems.

Why We're Removing the "Unlock Mac With Apple Watch" Check We're mothballing this check but sharing our original query for those who want it.

Why We're Removing the "Unlock Mac With Apple Watch" Check We're mothballing this check but sharing our original query for those who want it.

How to Use Kolide to Patch Vulnerable Macs How to use Kolide to rapidly patch recent high-severity macOS vulnerabilities CVE-2023-23514 and CVE-2023-23529.

Q4 Quarterly Threat Bulletin The Uptycs Threat Research Team regularly monitors the TTPs (tactics, techniques and procedures) of the latest malware using our threat intelligence sources and systems. Organizations can use this bulletin as a tool to evaluate and form a more robust detection and protection posture against the latest threats in Windows, Linux and macOS platforms.

The History, Evolution, and Controversies of Zero Trust Zero Trust is an idea with endless permutations. For security pros, that's a blessing and a curse.

Cryptocurrency Entities at Risk: Threat Actor Uses Parallax RAT for Infiltration Parallax RAT (aka, ParallaxRAT) has been distributed through spam campaigns or phishing emails (with attachments) since December 2019. The malware performs malicious activities such as reading login credentials, accessing files, keylogging, remote desktop control, and remote control of compromised machines.

LastPass Security Breach 2022: What We Know Now TL;DR   A threat actor ran a sustained data theft campaign that lasted for over 75 days (2.5 months) and resulted in the exposure of an undisclosed number of customer passwords and sensitive data The attacker leveraged valid credentials stolen from one of four senior DevOps engineers to access a shared cloud-storage environment, initially making it...

Malvertising on Google Ads: It's Hiding in Plain Site Criminals are disguising malware as popular software, so users need to think twice before clicking the download button.

National Cybersecurity Strategy: Top Takeaways Watch Now: "White House Cybersecurity Briefing - Top Takeaways for Cybersecurity Pros", a LinkedIn Live Event featuring Jack Roehrig, Crystal Poenish, and Richard Stiennon. (Note: this event was Live on March 9th, 2023 on LinkedIn: <a...

ChatGPT and Cybersecurity: What Security Pros Need To Know - Uptycs ChatGPT is garnering a lot of attention lately. There’s been a surge of blogs and articles touting its positive capabilities: copywriting, code writing, virtual assistants, customer support bots, contract writing, et al. The list is broad in scope. But there’s also been a lot of fear, uncertainty, and doubt (FUD) around ChatGPT and AI in general. Cybersecurity...

Big Changes to Our macOS Agent We recently made a few critical updates to our agent for macOS: we started shipping an app bundle; we changed the Apple account that signs the binary and package; and lastly, the way to grant Kolide Full Disk Access has changed.

Big Changes to Our macOS Agent We recently made a few critical updates to our agent for macOS: we started shipping an app bundle; we changed the Apple account that signs the binary and package; and lastly, the way to grant Kolide Full Disk Access has changed.