Katlyn Gallo·Apr 8Member-onlyGetting Started with Cyber Threat IntelligenceQuick & Easy Strategies to Utilize CTI Within Your Cyber Defense Program — Cyber threat intelligence (CTI) is an essential component of any modern cyber defense program within an organization today. …Threat Intelligence11 min readThreat Intelligence11 min read
Katlyn Gallo·Feb 8Member-onlyPreparing for Killnet’s DDoS Attacks: What Healthcare Organizations Need to KnowDark Roast Intelligence Briefing — The Russian threat actor Killnet has been making headlines recently due to its involvement in a series of high-profile distributed denial-of-service (DDoS) attacks against the healthcare industry. …Cybersecurity5 min readCybersecurity5 min read
Katlyn Gallo·Feb 1Member-onlyAlbum Stealer Malware, RMM Software Attacks & Vulnerability Exploits Trending in the WildDark Roast Intelligence | February 1, 2023 — Welcome to this week’s edition of Roast Roast Intelligence. …Cybersecurity6 min readCybersecurity6 min read
Kamyar Kojouri·Dec 29, 2022The LastPass BreachDitch the vendor if you like, but don’t ditch the concept — Let me start by saying that LastPass’s response and disclosure process have been very disappointing so far. This article published by Wired, titled “Yes, It’s Time to Ditch LastPass” really sums up my thoughts on the matter. The vaults are out there somewhere, and the data dumps will most likely…Cybersecurity3 min readCybersecurity3 min read
Katlyn Gallo·Dec 22, 2022Member-onlyLight Roast 118: Intro to Cloud Security Posture ManagementThe Importance of CSPM & How to Implement It Within Your Organization. — This article was originally published on Built In. With the continued adoption of the cloud, cloud security has become quite the buzzword in the technology industry. Although information and cybersecurity concepts remain the same, new threats arise when companies migrate their technology to cloud platforms. The seemingly endless possibilities and…Light Roast6 min readLight Roast6 min read
Katlyn Gallo·Dec 18, 2022Member-onlyFormbook Malware, shaderz Python Package & Two Major Zero-DaysDark Roast Intelligence | December 18, 2022 — Welcome to this week’s edition of Roast Roast Intelligence. In this article, you’ll find an overview of two recent malware campaigns and two zero-day vulnerabilities that were hot topics last week. Formbook Malware is Still Here Formbook malware is a malware-as-a-service (MaaS) offering that’s been around since 2016, but it’s not one we hear of…Threat Intelligence7 min readThreat Intelligence7 min read
Katlyn Gallo·Nov 28, 2022Member-onlyCyberattack Against DraftKings, the Delivery of Qbot & a Google Chrome Zero-DayDark Roast Intelligence | November 28, 2022 — Welcome to this week’s edition of Dark Roast Intelligence. In this article, you’ll find overviews of a recent cyberattack on a sports betting organization, how threat actors are using a Windows zero-day vulnerability to deliver Qbot malware, and the latest vulnerability in Google Chrome. DraftKings Falls Victim to Credential Stuffing Attack On November 19th, many DraftKings customers…Dark Roast6 min readDark Roast6 min read
Katlyn Gallo·Nov 21, 2022Member-onlyAmazon RDS Data Exposure, Breach of a Federal Network & the Rise of DTrack MalwareDark Roast Intelligence | November 21, 2022 — Welcome to this week’s edition of Dark Roast Intelligence. In this article, you’ll find summaries of recent cyber events, overviews of trending malware variants and vulnerabilities, and key takeaways for those who wish to action on this information within their organizations. Amazon Relational Database: Sensitive Data Exposure On November 16, 2022, security researchers at Mitiga, a…Threat Intelligence6 min readThreat Intelligence6 min read
Katlyn Gallo·Nov 15, 2022Member-onlyIntroducing Dark Roast IntelligenceThe newest section of Dark Roast Security. — Dark Roast Security readers, Before I get into the purpose of this article, I want to thank you for your support over the last two years. If you would have told me back then that this blog would have upwards of 25,000 minutes read on average over three months time…Dark Roast5 min readDark Roast5 min read
Katlyn Gallo·Nov 10, 2022Member-onlyLight Roast 117: Intro to MFA FatigueWhat It Is and How to Avoid It. — This article was originally published on Built In. Multifactor authentication, or MFA, is a mechanism used to secure user accounts. Unsurprisingly, however, malicious actors have found ways to bypass it, making the technology merely a small obstacle for many attackers. Although many methods can bypass MFA, a technique called MFA…Light Roast6 min readLight Roast6 min read
