Dave·20h agoAnatomy of the Binance hacks.Binance has been hacked 3 times by APT. What have we learnt so far?
Prabhjot Singh Chandhar·Oct 17NO_PUBKEY, a 403, and a Dead Repo: A Bad apt Update StoryI had a rough apt update session the other day. What started as one error turned into a small chain of them, some real and some just noise…
Mahim Avi·Oct 3How to scan systems with THOR lite scanner during compromise assessment and incident responseIn this post, I tried to consolidate information's of thor-lite that I think will be helpful for IR folks.
Mees van Wickeren·Aug 20Another North Korean fake profile and fake company clusterLet’s kick it off with a profile that keeps coming up while looking at a bunch of other North Korean profiles which ties into the cluster…
Luca Padovan·Aug 17I Stopped Memorizing apt and snap Syntax: Meet pkgtuiAn htop-style terminal UI for managing Linux packages without wrestling command flags
QUIRSO GmbH·Aug 17The great clean-up jobA newly published cleanup tool connected to the intrusion set behind QUIRSO’s recent vCenter investigation.
Patrik Žák·Aug 16Attackers Only Need 48 Hours: A Summary of the CrowdStrike Threat Hunting Report 202648 hours. That’s all attackers need — in 88% of cases, a vulnerability with a publicly available exploit is attacked within two days of the…
QUIRSO GmbH·Aug 14Global Exploitation of CVE-2026–59310 by Suspected Chinese-Nexus APT & Related CVE-2026–59309…QUIRSO’s Incident Response team recently investigated a VMware vCenter compromise that uncovered a coordinated, global exploitation…
Ziad Saad·Aug 9NightSpire APT: WHO WHEN WHY CASE OPENED!The ransomware landscape has never been static. New groups emerge, disappear, rebrand, and evolve their operations almost continuously …
InGiVeRbyTanin Srivaraphong·Jul 31The repository ‘http://dl.google.com/linux/chrome/deb stable InRelease’ is not signed.Recently, I’ve encountered a challenge with my aging CircleCI pipeline used for deploying our legacy application. The issue arises whenever…
