Live Webinar
TRU
Intelligence Briefing
Tuesday, April 11, 2023
11:00 AM - 11:45 AM ET | 8:00 - 8:45 AM PT | 3:00 - 3:45 PM GMT | 4:00 - 4:45 PM BST
TRU
Join us on April 11th for this month’s TRU Intelligence Briefing. Our Threat Response Unit (TRU) will review:
-
Threat Landscape: A review of recently observed malware by eSentire’s Security Operation Center (SOC) such as Emotet, GuLoader, PlugX and notable vulnerabilities impacting Microsoft (CVE-2023-21716), Fortinet (CVE-2022-41328), and GoAnywhere (CVE-2023-0669)*
-
A brief geopolitical update related to cyber activity attributed to North Korean actors, including the recent 3CX supply chain compromise
-
NTLM Relay Zero-day Vulnerability (CVE-2023-23397): Background on the vulnerability, details on real-world exploitation, and how we expect the vulnerability to be targeted going forward
-
Tactical Threat Response (TTR) – CVE-2023-23397: Detection and recommendations
Don’t miss out on this opportunity to ask our industry-renowned TRU team your most pressing questions during the live Q&A.
Register now to reserve your spot!
*Topics subject to change based on evolving threat landscape
Featured Speakers
Spence Hutchinson
Staff Threat Intelligence Researcher
JR DePre
Red Team Technical Manager
Paul Aitken
Threat Intelligence Researcher
Featured Resource
Notorious Russian Gang and Affiliates Increase Ransomware Attacks Against Europe
While Conti leaders may have shut down operations as a formal entity in May 2022, that did not stop two affiliate groups, BlackByte and Black Basta, from making headlines.
Download this report to learn more about:
- Notable ransomware attacks deployed by BlackByte and Black Basta, and the subsequent impact on victim organisations
- An analysis of Conti’s history, including how the ransomware group has evolved and the state of their operations
- Insights and recommendations from TRU on how to defend your organisation from this cyber threat
Previous Webinars
Join eSentire's Threat Response Unit (TRU) as they discuss the latest attacks observed by our Security Operations Center (SOC).
Download this webinar to learn more about:
- Threat Landscape: A review of recently observed malware by the SOC such as Qakbot, GootLoader, and SocGholish and notable vulnerabilities impacting FortiNAC (CVE-2022-39952), Carbon Black (CVE-2023-20858), and ZK Framework (CVE-2022-36537)
- A brief update on cyberattacks related to ongoing geopolitical tensions
- Rise of OneNote Abuse: How OneNote is being leveraged for malware delivery and the recent increase in this tactic
- Tactical Threat Response (TTR) – OneNote: New detections created to identify OneNote abuse and recommendations for identifying similar attacks
Join eSentire's Threat Response Unit (TRU) as they discuss the latest attacks observed by our Security Operations Center (SOC).
Download this webinar to learn more about:
- Threat Landscape: A review of recently observed malware by the SOC such as GootLoader, Qakbot, and More_Eggs and notable vulnerabilities impacting VMware (CVE-2022-31706, CVE-2022-31704), Zoho (CVE-2022-47966), and Git (CVE-2022-23521, CVE-2022-41903)
- A brief update on cyberattacks related to ongoing hybrid war in Ukraine, including recent wiper attacks
- ChatGPT – Myths & Malware: Overview on what ChatGPT is, its impact on cybersecurity, eSentire’s response, and predictions for the future
- Tactical Threat Response (TTR) – Fortinet Authentication Bypass Vulnerability (CVE-2022-40684): Overview on threat hunts, specifically on the exploitation of the Fortinet Authentication Bypass Vulnerability