Blog

ResearchNovember 24, 2021
New PowerShortShell Stealer Exploits Recent Microsoft MSHTML Vulnerability to...
by Tomer Bar
Read Post
US Cert AlertsNovember 19, 2021
SafeBreach Hacker’s Playbook Updated for US-CERT Alert (AA21-321A) Iranian...
by Tomer Bar
Read Post
ProductNovember 11, 2021
Splunk and SafeBreach Makes MITRE ATT&CK® Work for You
by James Brodsky, Itzik Kotler
Read Post
Thought LeadershipNovember 02, 2021
Security Posture 101: Do You Know Who, Where and When, What’s It Doing?
by SafeBreach
Read Post
Thought LeadershipOctober 26, 2021
Security Posture 101: A Guide to IT Asset Inventory Thinking
by SafeBreach
Read Post
US Cert AlertsOctober 19, 2021
SafeBreach Hacker’s Playbook Updated for US-CERT Alert (AA21-291A) BlackMatter...
by Tomer Bar
Read Post
US Cert AlertsOctober 15, 2021
SafeBreach Hacker’s Playbook Updated for IL-CERT Alert (1389) DeepBlueMagic...
by Tomer Bar
Read Post
Thought LeadershipOctober 14, 2021
What Does Security Posture Really Mean
by SafeBreach
Read Post
ResearchOctober 11, 2021
Breaking Foudre Domain Generation Algorithm and Discovering Tonnerre Latest...
by Tomer Bar
Read Post
US Cert AlertsSeptember 23, 2021
Existing Coverage in SafeBreach Hacker’s Playbook for US-CERT Alert...
by Tomer Bar
Read Post
ResearchSeptember 14, 2021
Two New Tools and Techniques to Find, Fight 0-Days
by Tomer Bar
Read Post
ProductSeptember 01, 2021
Protecting Your Organization by Leveraging Threat Intelligence Powered Custom...
by Kaustubh Jagtap
Read Post
ProductAugust 19, 2021
Enhancing User Experience with SafeBreach Scenarios and Simplified Navigation
by Kaustubh Jagtap , Shira Akov
Read Post
ProductAugust 10, 2021
Automate Validation of Your Security Controls with SafeBreach & Cortex XSOAR
by Kaustubh Jagtap
Read Post
ResearchAugust 05, 2021
hAFL2 - The First Open-Source Hypervisor Fuzzer
by Peleg Hadar
Read Post
ProductJuly 27, 2021
Boosting Microsoft Defender for Endpoint Evaluation Lab with New Advanced...
by Kaustubh Jagtap
Read Post
Thought LeadershipJuly 22, 2021
Everyone Wants to Build a Cyber Range: Should You? Part 2
by Matthew Dobbs, Itzik Kotler
Read Post
US Cert AlertsJuly 20, 2021
Existing Coverage in SafeBreach Hacker’s Playbook for US-CERT Alert...
by Tomer Bar
Read Post
ProductJuly 13, 2021
The Importance of Security Control Context in Vulnerability Prioritization
by Kaustubh Jagtap
Read Post
ResearchJuly 05, 2021
SafeBreach Hacker’s Playbook Updated for CISA-FBI Advisory for MSPs and their...
by SafeBreach
Read Post
Thought LeadershipJune 03, 2021
What You Don’t Know Can Hurt You: Why it Pays to Get a Hacker’s Perspective
by SafeBreach
Read Post
US Cert AlertsMay 29, 2021
SafeBreach Hacker’s Playbook Updated for US-CERT Alert (AA21-148A)-...
by Tomer Bar
Read Post
Thought LeadershipMay 27, 2021
Everyone Wants to Build a Cyber Range: Should You?
by Matthew Dobbs, Itzik Kotler
Read Post
ProductMay 18, 2021
SafeBreach Operationalizes New MITRE v9 Techniques and Sub-techniques
by Kaustubh Jagtap
Read Post
ResearchMay 11, 2021
SafeBreach Hacker’s Playbook Updated for Darkside Ransomware Attacks
by SafeBreach
Read Post
Thought LeadershipApril 26, 2021
Hacking the COVID Cold Chain: A Health Care Sector Example of FAIR
by Itzik Kotler, Colin Connor
Read Post
US Cert AlertsApril 21, 2021
SafeBreach Hacker’s Playbook Updated for US-CERT Alert (AA21-110A)...
by Tomer Bar
Read Post
Thought LeadershipMarch 23, 2021
How Security Control Validation Helps Reduce Risk and Maximize Your Security...
by SafeBreach
Read Post
Thought LeadershipMarch 18, 2021
The Next-Gen Cyber Range: Bringing Incident Response Exercises to the Cloud
by Matthew Dobbs, Itzik Kotler
Read Post
US Cert AlertsMarch 04, 2021
SafeBreach Hacker’s Playbook Updated for US-CERT Alert (AA21-062A) Mitigate...
by Itzik Kotler
Read Post
US Cert AlertsFebruary 24, 2021
SafeBreach Hacker’s Playbook Updated for US-CERT Alert (AA21-055A) Web Shell...
by Itzik Kotler
Read Post
Thought LeadershipFebruary 20, 2021
What is Breach and Attack Simulation? The Power of Automated Security Control...
by SafeBreach
Read Post
US Cert AlertsFebruary 18, 2021
SafeBreach Hacker’s Playbook Updated for US-CERT Alert (AA21-048A) AppleJeus...
by Itzik Kotler
Read Post
Thought LeadershipFebruary 10, 2021
Smell the Attack? Sensory-Immersive Cyber Range Training for Industry 4.0
by Matthew Dobbs, Itzik Kotler, Limor Kessem
Read Post
ResearchFebruary 08, 2021
After Lightning Comes Thunder
by Tomer Bar and Checkpoint Research
Read Post
Thought LeadershipFebruary 05, 2021
Moving Threat Identification From Reactive to Predictive and Preventative
by Colin Connor, Itzik Kotler
Read Post
Thought LeadershipJanuary 29, 2021
Triage Attacks More Efficiently With AI for Cybersecurity
by Srini Tummalapenta, Itzik Kotler
Read Post
ProductJanuary 18, 2021
Using SafeBreach Flexible Dashboards to Enable Business
by Yotam Ben Ezra
Read Post
Thought LeadershipJanuary 14, 2021
Preparing a Client Environment for Threat Management
by Srini Tummalapenta, Itzik Kotler
Read Post
Thought LeadershipDecember 18, 2020
What is a White Hat Hacker?
by SafeBreach
Read Post
US Cert AlertsDecember 14, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Active Exploitation of...
by Itzik Kotler
Read Post
US Cert AlertsDecember 14, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert AA20-345A and Clop...
by Itzik Kotler
Read Post
ResearchDecember 10, 2020
Analyzing Patch Tuesday December 2020
by Eran Segal
Read Post
Thought LeadershipDecember 01, 2020
Building The Next Generation of Cyber Ranges with Targeted Chaos Engineering
by Matthew Dobbs, Itzik Kotler
Read Post
Thought LeadershipNovember 15, 2020
What Pentesting Is and Why It’s Not Enough
by SafeBreach
Read Post
ResearchNovember 12, 2020
The 3rd and probably final fix for the Print Spooler never ending bug
by Peleg Hadar
Read Post
Thought LeadershipOctober 29, 2020
Building A Threat Identification Program to Better Manage Risk: The Key Pillars
by Itzik Kotler, Colin Connor
Read Post
Thought LeadershipOctober 29, 2020
Threat Analysis: How the Rapid Evolution of Reporting Can Change Security
by Itzik Kotler, Colin Connor
Read Post
US Cert AlertsOctober 28, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert AA20-301A North Korean...
by Itzik Kotler
Read Post
US Cert AlertsOctober 23, 2020
SafeBreach Hacker's Playbook Coverage for US-CERT Alert AA20-296A and...
by Itzik Kotler
Read Post
Thought LeadershipOctober 21, 2020
Training Trainers: How IBM Uses Data Breach Simulations to Build Real-World...
by Srini Tummalapenta
Read Post
ResearchOctober 14, 2020
Security Advisory: Insecure Default Dial-In Settings for Zoom Enterprise Users
by Itzik Kotler
Read Post
US Cert AlertsOctober 07, 2020
SafeBreach Hacker's Playbook Coverage for US-CERT Alert AA20-280A Emotet Malware
by Itzik Kotler
Read Post
US Cert AlertsSeptember 25, 2020
SafeBreach Hacker's Playbook Coverage for US-CERT Alert AR20-268A Federal...
by Itzik Kotler
Read Post
US Cert AlertsSeptember 23, 2020
SafeBreach Hacker's Playbook Coverage for US-CERT Alert AA20-266A Lokibot...
by Itzik Kotler
Read Post
US Cert AlertsSeptember 16, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-259A) Iran-Based...
by Itzik Kotler
Read Post
US Cert AlertsSeptember 15, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-258A) Chinese...
by Itzik Kotler
Read Post
Thought LeadershipSeptember 09, 2020
Coordinating And Integrating Security Platforms Gives Cyber Teams Superpowers
by Corinna Krueger
Read Post
US Cert AlertsAugust 27, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-239A) FASTCash...
by Itzik Kotler
Read Post
Thought LeadershipAugust 26, 2020
Training with Chaos Engineering
by Megan Radogna, Itzik Kotler
Read Post
US Cert AlertsAugust 13, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert AA20-225A Malicious...
by Itzik Kotler
Read Post
Thought LeadershipAugust 03, 2020
Comprehensive Threat-Driven Security Operations Require Unification of Threat...
by Yotam Ben Ezra
Read Post
US Cert AlertsJuly 28, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-209A) Potential...
by Itzik Kotler
Read Post
ProductJuly 08, 2020
MITRE Sub-Techniques in SafeBreach
by Itzik Kotler
Read Post
Thought LeadershipJune 17, 2020
Chaos Engineering and Security: Upgrading Simulation Exercises For More...
by Matthew Dobbs, Itzik Kotler
Read Post
ResearchJune 12, 2020
How we bypassed CVE-2020-1048 Patch and got CVE-2020-1337
by Tomer Bar, Peleg Hadar
Read Post
Thought LeadershipMay 18, 2020
Refocusing Cybersecurity Best Practices on Security Hygiene
by Srini Tummalapenta, Itzik Kotler
Read Post
Thought LeadershipApril 25, 2020
SafeBreach Hacker's Playbook Updated for Maze Ransomware
by Itzik Kotler
Read Post
US Cert AlertsApril 22, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-107A) Continued...
by Itzik Kotler
Read Post
US Cert AlertsApril 17, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-106A) Guidance on...
by Itzik Kotler
Read Post
US Cert AlertsApril 09, 2020
SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-099A) COVID-19...
by Itzik Kotler
Read Post
Thought LeadershipApril 03, 2020
The Top 4 Security Validations For Managing A Remote Workforce
by Yotam Ben Ezra
Read Post
ProductFebruary 19, 2020
Using Breach and Attack Simulation to Effectively Prioritize Vulnerabilities
by Yotam Ben Ezra
Read Post
ProductFebruary 19, 2020
Using SafeBreach to stay on top of Cloud Native Security
by Yotam Ben Ezra
Read Post
ResearchFebruary 13, 2020
Atlassian Jira Server and Confluence Server - DLL Search-Order Hijacking -...
by Peleg Hadar
Read Post
ResearchFebruary 04, 2020
Realtek HD Audio Driver Package - DLL Preloading and Potential Abuses...
by Peleg Hadar
Read Post
ResearchJanuary 21, 2020
EFS Ransomware
by Amit Klein
Read Post
ResearchJanuary 20, 2020
Nahimic APO Software Component Driver (Deployed with MSI Computers) - DLL...
by Peleg Hadar
Read Post
US Cert AlertsJanuary 17, 2020
SafeBreach Labs delivers a spoofed signed certificate and MITM simulations for...
by Itzik Kotler
Read Post
ResearchJanuary 12, 2020
Teradici PcoIP Agents and Clients (Deployed with Amazon Workspaces) - Unquoted...
by Peleg Hadar
Read Post
ResearchJanuary 08, 2020
CISA Expects More Cyberattacks from Iran: How To Prepare
by Itzik Kotler
Read Post
ResearchDecember 17, 2019
ASUS ATK Package - Unquoted Search Path and Potential Abuses (CVE-2019-19235)
by Peleg Hadar
Read Post
ResearchDecember 17, 2019
Acer Quick Access - DLL Search-Order Hijacking and Potential Abuses...
by Peleg Hadar
Read Post
ResearchDecember 16, 2019
Intel Rapid Storage Technology Service - DLL Preloading and Potential Abuses...
by Peleg Hadar
Read Post
US Cert AlertsDecember 05, 2019
Hacker's Playbook Already Protects for Methods used in US-CERT Malware...
by Peleg Hadar
Read Post
ResearchDecember 02, 2019
Autodesk Desktop Application - Privilege Escalation to SYSTEM (CVE-2019-7365)
by Peleg Hadar
Read Post
ResearchDecember 02, 2019
Kaspersky Secure Connection - DLL Preloading and Potential Abuses...
by Peleg Hadar
Read Post
ResearchDecember 02, 2019
Trend Micro Security 16 - DLL Search-Order Hijacking and Potential Abuses...
by Peleg Hadar
Read Post
ResearchNovember 21, 2019
Code42 Server for Windows - DLL Search-Order Hijacking and Potential Abuses...
by Peleg Hadar
Read Post
ResearchNovember 21, 2019
Lenovo System Interface Foundation - DLL Preloading and Potential Abuses...
by Peleg Hadar
Read Post
ResearchNovember 15, 2019
Comodo Internet Security - DLL Preloading and Potential Abuses (CVE-2019-18215)
by Peleg Hadar
Read Post
ResearchNovember 15, 2019
NVIDIA GPU Display Drivers for Windows and GFE Software - DLL Preloading and...
by Peleg Hadar
Read Post
ResearchNovember 15, 2019
TeamViewer Windows Client (v11 to v14) - DLL Preloading and Potential Abuses...
by Peleg Hadar
Read Post
ResearchNovember 14, 2019
Symantec Endpoint Protection - Self-Defense Bypass and Potential Usages...
by Peleg Hadar
Read Post
ResearchNovember 12, 2019
McAfee - All Editions (MTP, AVP, MIS) - Self-Defense Bypass and Potential...
by Peleg Hadar
Read Post
US Cert AlertsNovember 01, 2019
Hacker's Playbook Updated with Methods for US-CERT Malware Analysis Report...
by Itzik Kotler
Read Post
Thought LeadershipOctober 23, 2019
Amazon Workspaces - Unquoted Search Path and Potential Abuses
by Peleg Hadar
Read Post
ResearchOctober 23, 2019
Maxthon Browser for Windows - Unquoted Search Path and Potential Abuses...
by Peleg Hadar
Read Post
ResearchOctober 21, 2019
Avast Antivirus / AVG Antivirus - DLL Preloading into PPL and Potential Abuses...
by Peleg Hadar
Read Post
ResearchOctober 21, 2019
Avira Antivirus 2019 (4 Services) - DLL Preloading and Potential Abuses...
by Peleg Hadar
Read Post
ProductOctober 18, 2019
SafeBreach integrates with Microsoft Defender ATP to maximize security
by Itzik Kotler
Read Post
ResearchOctober 10, 2019
HP Touchpoint Analytics - DLL Search-Order Hijacking - Potential Abuses...
by Peleg Hadar
Read Post
ResearchSeptember 20, 2019
Forcepoint VPN Client for Windows - Unquoted Search Path and Potential Abuses...
by Peleg Hadar
Read Post
ResearchAugust 27, 2019
Check Point Endpoint Security Initial Client for Windows - Privilege...
by Peleg Hadar
Read Post
ResearchAugust 21, 2019
BitDefender Antivirus Free 2020 - Privilege Escalation to SYSTEM
by Peleg Hadar
Read Post
ResearchAugust 14, 2019
Trend Micro Password Manager - Privilege Escalation to SYSTEM
by Peleg Hadar
Read Post
Thought LeadershipAugust 09, 2019
Comprehensive Guide to Process Injection Techniques + Detection Tool
by Itzik Kotler, Amit Klein
Read Post
Thought LeadershipAugust 05, 2019
The Massive Capital One Breach Post-Mortem: Three Lessons For Infosec Teams
by Itzik Kotler
Read Post
ProductJuly 31, 2019
We Are Launching SafeBreach GRID To Deliver The Four Key Requirements of BAS
by Yotam Ben Ezra
Read Post
Thought LeadershipJuly 31, 2019
The Ultimate Collection of Windows Process Injection Techniques: Black Hat...
by SafeBreach
Read Post
ProductJuly 29, 2019
The Four Critical Capabilities of Breach and Attack Simulation (BAS) Platforms
by Yotam Ben Ezra
Read Post
ResearchJune 21, 2019
OEM Software Puts Multiple Laptops At Risk
by Peleg Hadar
Read Post
US Cert AlertsMay 13, 2019
Hacker's Playbook Updated with Methods for US-CERT Alert AR19-129A
by Itzik Kotler
Read Post
US Cert AlertsApril 11, 2019
Hacker's Playbook Updated with Methods for US-CERT Alert AR19-100A
by Itzik Kotler
Read Post
ProductMarch 22, 2019
Hacker's Playbook Updated with Methods for LockerGoga
by Itzik Kotler
Read Post
US Cert AlertsMarch 18, 2019
Hacker's Playbook Updated with US-CERT Alert TA-18-086A
by Itzik Kotler
Read Post
ProductDecember 13, 2018
SafeBreach: BAS Product Overview and Insight
by SafeBreach
Read Post
US Cert AlertsJune 21, 2018
Hacker's Playbook Updated with Methods for BADCALL
by Itzik Kotler
Read Post
Thought LeadershipMay 01, 2018
Celebrating Women's Day, Every Day
by SafeBreach
Read Post
US Cert AlertsApril 20, 2018
Hacker's Playbook Updated with US-CERT Alert TA-18-106A
by Itzik Kotler
Read Post
US Cert AlertsMarch 16, 2018
Hackers Playbook Updated with Methods for US CERT Alert TA-18-074A
by Itzik Kotler
Read Post
ResearchMarch 15, 2018
Abusing Text Editors with Third Party Plugins
by SafeBreach
Read Post
ProductFebruary 05, 2018
Acting on Results Provided By Breach and Attack Simulation
by SafeBreach, SafeBreach
Read Post
Thought LeadershipJanuary 22, 2018
Breach and Attack Simulation Versus Pen Testing and Red Teaming
by SafeBreach
Read Post
Thought LeadershipJanuary 11, 2018
Meltdown and Spectre? Don't Waste your Time.
by SafeBreach
Read Post
US Cert AlertsJanuary 08, 2018
Hacker's Playbook Updated with Methods for Meltdown and Spectre
by Itzik Kotler
Read Post
Thought LeadershipDecember 14, 2017
Are You Making the Most From Your Next-Generation Firewalls?
by SafeBreach
Read Post
Thought LeadershipDecember 05, 2017
Hacker's Playbook Findings Report Third Edition
by SafeBreach
Read Post
Thought LeadershipNovember 22, 2017
Drive Security ROI: Optimize Configuration
by Guy Bejerano
Read Post
US Cert AlertsNovember 15, 2017
Hacker's Playbook Updated with Methods for US-CERT Alert TA17-318A/B Hidden...
by Itzik Kotler
Read Post
ProductNovember 06, 2017
Hacker's Playbook Updated with Methods for Silence Banking Trojan
by Itzik Kotler
Read Post
Thought LeadershipNovember 01, 2017
Five Common Questions on the General Data Protection Regulation (GDPR)
by SafeBreach
Read Post
Thought LeadershipOctober 30, 2017
Hacker's Playbook Updated with Methods for IoTroop/Reaper
by Itzik Kotler
Read Post
Thought LeadershipOctober 24, 2017
Hacker's Playbook Updated with Methods for Petya.A (Bad Rabbit) Ransomware...
by SafeBreach
Read Post
US Cert AlertsOctober 22, 2017
Hacker's Playbook Updated with Methods for US-CERT Alert TA17-293A
by Itzik Kotler
Read Post
Thought LeadershipSeptember 28, 2017
The New Cyber Terror: 0days
by Guy Bejerano
Read Post
Thought LeadershipSeptember 22, 2017
Equifax Breach: Three Data Breach Protection Measures Learned
by SafeBreach
Read Post
ProductSeptember 21, 2017
Hacker's Playbook Updated with Lukitus Methods
by Itzik Kotler
Read Post
Thought LeadershipSeptember 18, 2017
Equifax Lesson - Stop Hindsight Analysis, and Start Foresight Action
by SafeBreach
Read Post
Thought LeadershipSeptember 11, 2017
Hacker's Playbook Updated with Equifax Related Methods
by SafeBreach
Read Post
US Cert AlertsAugust 24, 2017
Hacker's Playbook Updated with DeltaCharlie (Additional HIDDEN COBRA) Methods
by Itzik Kotler
Read Post
Thought LeadershipJuly 30, 2017
Windows BITS Inject
by Dor Azouri
Read Post
Thought LeadershipJuly 27, 2017
Adventures of AV and the Leaky Sandbox
by Amit Klein, Itzik Kotler
Read Post
Thought LeadershipJuly 11, 2017
Building a Python BITS Server
by Dor Azouri
Read Post
Thought LeadershipJuly 11, 2017
The Petya Predicament: Proactively Predicting Problems
by Dor Azouri
Read Post
US Cert AlertsJune 20, 2017
Hacker's Playbook Updated with HIDDEN COBRA Methods
by SafeBreach
Read Post
Thought LeadershipJune 13, 2017
Hacker's Playbook Updated with JAFF Ransomware Methods
by SafeBreach
Read Post
US Cert AlertsJune 13, 2017
Hacker's Playbook Updated with PowerPoint Mouse-over Methods
by SafeBreach
Read Post
Thought LeadershipJune 08, 2017
What are Breach and Attack Simulation Technologies?
by Dor Azouri
Read Post
Thought LeadershipMay 17, 2017
WannaCry: Don't Believe the Hype
by SafeBreach
Read Post
ProductMay 15, 2017
Hacker's Playbook Updated with WannaCry Methods
by SafeBreach
Read Post
Thought LeadershipMay 09, 2017
Redleaves, in Springtime?
by SafeBreach
Read Post
Thought LeadershipMay 04, 2017
Ragnarok is Coming, Unless we Learn from the Past
by SafeBreach
Read Post
Thought LeadershipApril 18, 2017
Reducing Exposure Time with Breach Simulations
by SafeBreach
Read Post
Thought LeadershipApril 18, 2017
SafeBreach Partners with Mitre
by SafeBreach
Read Post
Thought LeadershipApril 07, 2017
PCI Compliant AND Secure
by SafeBreach
Read Post
Thought LeadershipMarch 22, 2017
Is Vulnerability Management Dead?
by SafeBreach
Read Post
Thought LeadershipMarch 08, 2017
Perspective on the New York Cybersecurity Regulations
by SafeBreach
Read Post
ProductFebruary 14, 2017
SafeBreach Announces Strategic Reseller Agreement with Hewlett Packard...
by SafeBreach
Read Post
ProductFebruary 07, 2017
SafeBreach Partners with Visa Threat Intelligence
by SafeBreach
Read Post
Thought LeadershipJanuary 30, 2017
From RSA Innovation Sandbox 2016 to Now
by SafeBreach
Read Post
Thought LeadershipNovember 16, 2016
SafeBreach, On2IT and the European General Data Protection Regulation
by SafeBreach
Read Post
Thought LeadershipSeptember 26, 2016
Getting Ahead of a Breach with a Predict and Respond solution
by SafeBreach
Read Post
ProductJuly 26, 2016
SafeBreach Raises $15M Series A
by Guy Bejerano
Read Post
ProductJuly 20, 2016
SafeBreach Selected As Finalist for Red Herring North America Top 100 Award
by SafeBreach
Read Post
Thought LeadershipJuly 18, 2016
What Will Your Opponent Think Tomorrow?
by SafeBreach
Read Post
Thought LeadershipJuly 05, 2016
Predicting Attacks - Lessons from The Game of Thrones
by SafeBreach
Read Post
Thought LeadershipMay 18, 2016
In Plain Sight: The Perfect Exfiltration
by Amit Klein
Read Post
Thought LeadershipMay 03, 2016
A Perspective on the Verizon Data Breach Investigations (DBIR) Report
by SafeBreach
Read Post
Thought LeadershipApril 27, 2016
Playing CyberWar Games To Win
by SafeBreach
Read Post
Thought LeadershipApril 08, 2016
SC Magazine First Look on SafeBreach
by SafeBreach
Read Post
Thought LeadershipMarch 30, 2016
Building a Proactive Framework to Securing the Business
by SafeBreach
Read Post
Thought LeadershipFebruary 24, 2016
Hacking Inward - Implementing Effective Cyber War Games
by Itzik Kotler
Read Post
Thought LeadershipFebruary 09, 2016
HTTP Response Splitting in Node.js - Root Cause Analysis
by Amit Klein
Read Post
Thought LeadershipJanuary 06, 2016
Why Software Security Is Hard
by Amit Klein
Read Post
ResearchDecember 02, 2015
I See Your True ECHO REQUEST Patterns (Pinging Data Awawy)
by Itzik Kotler
Read Post

Blog

New PowerShortShell Stealer Exploits Recent Microsoft MSHTML Vulnerability to...

SafeBreach Hacker’s Playbook Updated for US-CERT Alert (AA21-321A) Iranian...

Splunk and SafeBreach Makes MITRE ATT&CK® Work for You

Security Posture 101: Do You Know Who, Where and When, What’s It Doing?

Security Posture 101: A Guide to IT Asset Inventory Thinking

SafeBreach Hacker’s Playbook Updated for US-CERT Alert (AA21-291A) BlackMatter...

SafeBreach Hacker’s Playbook Updated for IL-CERT Alert (1389) DeepBlueMagic...

What Does Security Posture Really Mean

Breaking Foudre Domain Generation Algorithm and Discovering Tonnerre Latest...

Existing Coverage in SafeBreach Hacker’s Playbook for US-CERT Alert...

Two New Tools and Techniques to Find, Fight 0-Days

Protecting Your Organization by Leveraging Threat Intelligence Powered Custom...

Enhancing User Experience with SafeBreach Scenarios and Simplified Navigation

Automate Validation of Your Security Controls with SafeBreach & Cortex XSOAR

hAFL2 - The First Open-Source Hypervisor Fuzzer

Boosting Microsoft Defender for Endpoint Evaluation Lab with New Advanced...

Everyone Wants to Build a Cyber Range: Should You? Part 2

Existing Coverage in SafeBreach Hacker’s Playbook for US-CERT Alert...

The Importance of Security Control Context in Vulnerability Prioritization

SafeBreach Hacker’s Playbook Updated for CISA-FBI Advisory for MSPs and their...

What You Don’t Know Can Hurt You: Why it Pays to Get a Hacker’s Perspective

SafeBreach Hacker’s Playbook Updated for US-CERT Alert (AA21-148A)-...

Everyone Wants to Build a Cyber Range: Should You?

SafeBreach Operationalizes New MITRE v9 Techniques and Sub-techniques

SafeBreach Hacker’s Playbook Updated for Darkside Ransomware Attacks

Hacking the COVID Cold Chain: A Health Care Sector Example of FAIR

SafeBreach Hacker’s Playbook Updated for US-CERT Alert (AA21-110A)...

How Security Control Validation Helps Reduce Risk and Maximize Your Security...

The Next-Gen Cyber Range: Bringing Incident Response Exercises to the Cloud

SafeBreach Hacker’s Playbook Updated for US-CERT Alert (AA21-062A) Mitigate...

SafeBreach Hacker’s Playbook Updated for US-CERT Alert (AA21-055A) Web Shell...

What is Breach and Attack Simulation? The Power of Automated Security Control...

SafeBreach Hacker’s Playbook Updated for US-CERT Alert (AA21-048A) AppleJeus...

Smell the Attack? Sensory-Immersive Cyber Range Training for Industry 4.0

After Lightning Comes Thunder

Moving Threat Identification From Reactive to Predictive and Preventative

Triage Attacks More Efficiently With AI for Cybersecurity

Using SafeBreach Flexible Dashboards to Enable Business

Preparing a Client Environment for Threat Management

What is a White Hat Hacker?

SafeBreach Hacker's Playbook Updated for US-CERT Active Exploitation of...

SafeBreach Hacker's Playbook Updated for US-CERT Alert AA20-345A and Clop...

Analyzing Patch Tuesday December 2020

Building The Next Generation of Cyber Ranges with Targeted Chaos Engineering

What Pentesting Is and Why It’s Not Enough

The 3rd and probably final fix for the Print Spooler never ending bug

Building A Threat Identification Program to Better Manage Risk: The Key Pillars

Threat Analysis: How the Rapid Evolution of Reporting Can Change Security

SafeBreach Hacker's Playbook Updated for US-CERT Alert AA20-301A North Korean...

SafeBreach Hacker's Playbook Coverage for US-CERT Alert AA20-296A and...

Training Trainers: How IBM Uses Data Breach Simulations to Build Real-World...

Security Advisory: Insecure Default Dial-In Settings for Zoom Enterprise Users

SafeBreach Hacker's Playbook Coverage for US-CERT Alert AA20-280A Emotet Malware

SafeBreach Hacker's Playbook Coverage for US-CERT Alert AR20-268A Federal...

SafeBreach Hacker's Playbook Coverage for US-CERT Alert AA20-266A Lokibot...

SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-259A) Iran-Based...

SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-258A) Chinese...

Coordinating And Integrating Security Platforms Gives Cyber Teams Superpowers

SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-239A) FASTCash...

Training with Chaos Engineering

SafeBreach Hacker's Playbook Updated for US-CERT Alert AA20-225A Malicious...

Comprehensive Threat-Driven Security Operations Require Unification of Threat...

SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-209A) Potential...

MITRE Sub-Techniques in SafeBreach

Chaos Engineering and Security: Upgrading Simulation Exercises For More...

How we bypassed CVE-2020-1048 Patch and got CVE-2020-1337

Refocusing Cybersecurity Best Practices on Security Hygiene

SafeBreach Hacker's Playbook Updated for Maze Ransomware

SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-107A) Continued...

SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-106A) Guidance on...

SafeBreach Hacker's Playbook Updated for US-CERT Alert (AA20-099A) COVID-19...

The Top 4 Security Validations For Managing A Remote Workforce

Using Breach and Attack Simulation to Effectively Prioritize Vulnerabilities

Using SafeBreach to stay on top of Cloud Native Security

Atlassian Jira Server and Confluence Server - DLL Search-Order Hijacking -...

Realtek HD Audio Driver Package - DLL Preloading and Potential Abuses...

EFS Ransomware

Nahimic APO Software Component Driver (Deployed with MSI Computers) - DLL...

SafeBreach Labs delivers a spoofed signed certificate and MITM simulations for...