STS Episode #4: WWHF, GCWN, and more

Show notes: https://seangoodwin.blog/sts004

Weekly Recap #6 – “Living off the Land”

I was recently reading the Internet Security Threat Report (ISTR) from Symantec put out July 2017 "Living off the land and fileless attack techniques" and wanted to call attention to this document, as many of the TTPs discussed seem to be just as relevant today. One of the TTPs that jumps out is what Symatec … Continue reading Weekly Recap #6 – “Living off the Land” →

ATM Jackpotting is Just a Symptom

This was originally posted as an INSIGHT for Wolf & Company, P.C. here. ATM Jackpotting attacks have been making the rounds through the news cycles, but much of the commentary has been missing the point: these attacks are merely a symptom of a bigger issue surrounding ATM management. Many of the controls organizations are implementing on … Continue reading ATM Jackpotting is Just a Symptom →

Weekly Recap #3

Earlier this week I was having an interesting conversation with a colleague in the Infosec industry, and the topic of "Is the internet broken beyond repair" came up. I don't mean to sound like a defeatist, but the internet was not designed for the current use-case. Each year there are all sorts of vendor research … Continue reading Weekly Recap #3 →