Intro and Situational Awareness

ScreenConnect Vulnerability Exploited to Deploy BabyShark Variant

KTA248 PIKABOT and NTLM Stealing Campaigns

KTA014 Targets Cloud Based Infrastructure

Malware Spotlight: NETSUPPORT

Ransomware Roundup

Intro and Situational Awareness

CVE-2024-3400 PAN-OS Vulnerability Update

Malware Spotlight: GAMARUE

PuTTY SSH Client vulnerability

Ransomware Roundup

Intro and Situational Awareness

Threat Actor Adds Backdoor to XZ Library

New Tycoon Two-Factor Authentication (2FA) Phishing Kit Campaign

Go Loader Pushes RHADAMANTHYS Stealer

Malware Spotlight: STRELASTEALER

Ransomware Roundup

Intro and Situational Awareness

Threat Actors Leverage AI Tools for Initial Access

MagicDot Used for Monitoring Bypass

GitHub Comments Abused to Disseminate Malware

Malware Spotlight: QUASARRAT

Ransomware Roundup

Intro and Situational Awareness

Ivanti Zero-Days

Critical Vulnerabilities in GitLab

Patch Tuesday

Scamming via "Hacking Back" Offerings

Malware Spotlight: LUMMASTEALER

X Accounts Compromised as Part of CLINKSINK Drainer

Ransomware Roundup

Introduction

About

Agenda

What is Threat Intelligence?

Terminologies

Stages of Cyber Threat Intelligence

Characterstic of Threat Intelligence

Benefits of Cyber Threat Intelligence

Miter Att&ck

Benefits of Cyber Threat Intelligence

Organization Objective for Threat

How can Threat Intelligence Help Organizations

Types of Threat Intelligence

Threat Intelligence Generation

Role of Threat Analyst

OSINT Frame Work

Responsibilities of Cyber Threat Analyst

End

Intro and Situational Awareness

Microsoft Patch Tuesday Addresses 64 Issues

Fortinet Vulnerability Roundup

Magnet Goblin (KTA297) One-day Vulnerability

Malware Spotlight: ICENOVA

Ransomware Roundup

Intro and Situational Awareness

Microsoft and Hewlett Packard Enterprise Disclose Attacks By KTA014 (APT29)

(Out of Band) Authentication Bypass in Fortra GoAnywhere MFT

Remote Code Execution Vulnerability in Jenkins

Apple Struggles To Protect Users From Malware with Xprotect

KASSEIKA Employing Bring Your Own Vulnerable Driver

Malware Spotlight: PRIVATELOADER

Researchers Discover Billions of Exposed Credentials

Ransomware Roundup

What does Anomali do?

What does Anomali provide?

Who are Anomali’s customers?

Anomali’s services

Intro and Situational Awareness

JetBrains TeamCity Vulnerabilities Exploited

QEMU Used as C2 Tunnelling Tool

Malware Spotlight: WOGRAT

Ransomware Roundup

Intro and Situational Awareness

(Out of Band) Two Zero-Day Vulnerabilities Impacting 3 Ivanti Products

Ivanti Patches Available Following Delay and Widespread Exploitation

POC Exploit Released for CVE-2023-35636, Allowing NTLM Hash Theft via Outlook

Malware Spotlight: WHITESNAKE

Local Privilege Elevation Vulnerability Discovered in Glibc

Ransomware Roundup

Intro and Situational Awareness

ConnectWise Vulnerabilities

Patch Tuesday

Increased Targeting of Organization Executives

RASPBERRYROBIN Advances with Early Windows Exploit Access

Malware Spotlight: BUMBLEBEE LOADER

Ransomware Roundup

Intro and Situational Awareness

AKIRA Observed Exploiting Legacy Cisco Vulnerability

MIGO Malware Targets Redis Servers

Vulnerable Code Present in Third-Party Salesforce Apex Applications

Malware Spotlight: RHADAMANTHYS

Ransomware Roundup