Using Osquery to Implement a Zero-Trust Control Plane Your application developers work with your company's most valuable intellectual property and have access to your most sensitive systems. What's the expectation as to how their laptops are configured? How can you ensure that DevOps machines are securely configured before developers gain access to critical resources? In this session, Uma Unni explains how Stripe uses <a...

HookSpoofer: The Modified Open Source Stealer Bundlers Making the Rounds Research by: Shilpesh Trivedi and Tejaswini Sandapolla   Uptycs threat research team has discovered a new Infostealer with keylogging and clipper capabilities named HookSpoofer spread by multiple bundlers. A bundler is a collection of two or more files combined together in a single package. The stealer spread by these bundlers is new on various cybercrime forums, comes with...

Skill Up Free Courses and Resources for Cybersecurity Let’s talk about certs, baby…

Taking the leap into cybersecurity: My very nonlinear journey It took me a long time to find my way to my current happy existence, with a fulfilling career in cybersecurity. It was not an easy road and definitely not a direct route.

Hunting BatLoader Malware with Uptycs Contributed by: Nandakumar KJ & Josh Lemon

Women in Cybersecurity: Challenges, Successes, &amp; Plans for the Future March is Women’s History Month so we’re taking this opportunity to chat about the challenges that women face in the cybersecurity industry, and celebrate the journeys some of us have taken to get here.

2023's Least and Most Secure Authentication Methods Passkeys, Dongles, or Biometrics? What's the right mix to build hacker-proof MFA?

CNAPP: Gartner® Market Guide for 2023 - 6 Key Takeaways The Uptycs unified CNAPP and XDR platform was named as a representative vendor in the 2023 Gartner® Market Guide for Cloud-Native Application Protection Platforms (CNAPP).  Here are our top five takeaways from the 39-page report:

MacStealer: A modern macOS-based stealer sold on the dark web Research by Shilpesh Trivedi and Pratik Jeware Uptycs has already identified three Windows-based malware families that use Telegram this year, including Titan Stealer, <a...

Introducing the Kolide Desktop App We've launched a cross-platform desktop app to keep users informed about their device status

Introducing the Kolide Desktop App We've launched a cross-platform desktop app to keep users informed about their device status

The Humans Behind Kolide: Sam Schuna The Humans Behind Kolide series features interview-style blog posts with the humans who build our product and make it work. Get a behind-the-scenes look at who we are and the culture at Kolide.

Uptycs at RSA Cybersecurity Conference 2023 RSA 2023 is an opportunity for us to become stronger together. After all, cybersecurity is a collaborative endeavor that requires a united front to reduce risk, protect company assets, and prevent security gaps.  We’re proud to support the 2023 RSA...

3CX Supply Chain Cyber Attack: Analysis of Windows and macOS - Uptycs Research by: Tejaswini Sandapolla, Pratik Jeware and Karthickkumar K   Supply chain attacks have increased in recent years. A watershed incident occurred in December 2020...

I Used to Think CDR was a Silly Acronym - Uptycs Today, straight from Jack’s desk, I confess: I thought I knew CDR front to back (I didn’t).

MITRE ATT&amp;CK Framework and osquery: Scientific Detection – Uptycs Traditional detection techniques are based on indicators of compromise (IOCs). The problem with this method is that many attacks can slip through the cracks; attackers can fairly easily change IOCs, like IP addresses and file hashes, to avoid detection. What they can’t change so easily are behaviors—their tactics, techniques, and procedures (TTPs) used in...

The Importance of Cybersecurity in M&amp;A Due Diligence Mergers and Acquisitions From a Cybersecurity Perspective

The Unholy Marriage of AWS IAM Roles and Instance Profiles – Uptycs TL;DR   EC2 instances continue to use role credentials for up to six hours—even after removing a role from the instance profile. Swapping roles can result in credential discrepancies of up to 54 minutes. Forcing a credential refresh requires deleting the role, revoking sessions for more than six hours, stopping/starting the instance, or associating a new instance profile...

The Future of Containers and Kubernetes Security Thinking Strategically About Containers in 2023 The future of containers and Kubernetes in 2023 and beyond is extremely bright. The cloud native landscape increasingly relies on containers to build, deploy, and run production-ready workloads. Security teams need solutions that enable, rather than hinder, these full lifecycles. The number of k8s project adopters...

Zaraza Bot Credential Stealer Targets Browser Passwords - Uptycs The Uptycs threat research team has identified a new variant of credential stealing malware, dubbed Zaraza bot, that uses telegram as its command and control. Zaraza is the Russian word for infection.  Zaraza bot targets a large number of web browsers and is being actively distributed on a Russian Telegram...

Uptycs Adds Identity Risk Capabilities for Kubernetes RBAC Security Uptycs is announcing new capabilities that simplify, monitor, and secure role-based access control (RBAC) for Kubernetes deployments today at Kubecon EU. Uptycs seamlessly plugs into your Kubernetes control plane to capture and normalize real-time data for threat hunting, vulnerability management, compliance enforcement, asset inventory, and now RBAC telemetry as well.

Cyber Espionage in India: Decoding APT-36's New Linux Malware Campaign The Uptycs threat research team has discovered a new Linux malware, Poseidon, deployed by the APT-36 group, also known as Transparent Tribe. This Pakistan-based advanced persistent threat group is notorious for targeting Indian government organizations, military personnel, and defense contractors.

The Guide to Kolide's Okta Integration Here's how Kolide fits into Okta's authentication flow, and how Okta fits into Kolide's device security solution.

Cybersecurity for Startups: Essential Strategies &amp; Tips Startups are exciting ventures, aren’t they? There is so much going on in these little powerhouses of innovation and productivity. Sadly, cybersecurity is too often not on their radar when making those crucial first business decisions.  I want to thank Chris Castaldo, CISO of Crossbeam, for joining Uptycs in our Cybersecurity Standup this week to share...

Shift Up Security: The Era of Cybersecurity Point Solutions is Over Companies have long touted “shift left” as a quality control approach to preempt and prevent bugs early during software development. And when developers “shift right” they test software later on, in post-production, to discover new, unexpected issues that may have escaped earlier detection. What if I told you that the most important cybersecurity...

Secure Your Endpoint Devices with Uptycs Otto M8 Slack Integration What is Otto M8? Uptycs Otto M8 is a friendly security robot that helps your users secure their endpoint devices. It's part of the Uptycs Unified CNAPP & XDR platform, which helps organizations reduce risk and prioritize responses to security threats, vulnerabilities, and misconfigurations.

The Real-World Challenges of Patch Management IT teams spend much of their time and resources keeping employee devices patched. So why are they still constantly playing catch-up?