Hot Topics

GuidePoint Security
The Guiding Point | GuidePoint Security

So-Phish-ticated Attacks

So-Phish-ticated Attacks

| | GRIT, GRIT Blog, Incident Response & Threat Intelligence, Ransomware
August 27, 2024 Authors: Rui Ataide, Hermes Bojaxhi The GuidePoint Research and Intelligence Team (GRIT) has been tracking a highly […] ... Read More
The Guiding Point | GuidePoint Security
Update from the Ransomware Trenches

Update from the Ransomware Trenches

| | Blog, GRIT Blog, Incident Response & Threat Intelligence, Ransomware, Threat Intel, Threat Research
Authors: Rui Ataide, Hermes Bojaxhi GuidePoint’s DFIR team is frequently called upon to respond to Ransomware incidents. While many such […] ... Read More
The Guiding Point | GuidePoint Security
WWDMD – What Would Dade Murphy Do? – Reconnaissance & Intelligence Collection for External Penetration Tests

WWDMD – What Would Dade Murphy Do? – Reconnaissance & Intelligence Collection for External Penetration Tests

| | SBN News
Author: Matthew McCorkleSupporting Author: Heather FettySpecial Thanks: George Raileanu, Katelin Shaffer, Rose Pineau Introduction This article is written for the […] ... Read More
The Guiding Point | GuidePoint Security
Leveraging Escalation Attacks in Penetration Testing Environments – Part 1

Leveraging Escalation Attacks in Penetration Testing Environments – Part 1

| | Blog, Cybersecurity, Technical, Vulnerability Management & Penetration Testing
Authors: George Raileanu and Eugene Mar Introduction Together we aim to explore vulnerabilities within Active Directory Certificate Services (AD CS), […] ... Read More
The Guiding Point | GuidePoint Security
Introduction to tmux

Leveraging Escalation Attacks in Penetration Testing Environments – Part 2

| | Blog, Cybersecurity, Technical, Vulnerability Management & Penetration Testing
Authors: George Raileanu and Eugene Mar In this post, we’ll cover the two most common ESC attacks we encounter on […] ... Read More
The Guiding Point | GuidePoint Security
A Crash Course in Hardware Hacking Methodology: The Ones and Zeros

A Crash Course in Hardware Hacking Methodology: The Ones and Zeros

| | Blog, Cybersecurity, Internet of things, iot, Threat & Attack Simulation, Vulnerability Management & Penetration Testing
Author: Nathan Keys The Internet-of-Things (IoT) has quickly and seamlessly become woven into the fabric of our daily existence. With […] ... Read More
The Guiding Point | GuidePoint Security
SCCM Exploitation: Account Compromise Through Automatic Client Push & AD System Discovery 

SCCM Exploitation: Account Compromise Through Automatic Client Push & AD System Discovery 

| | Blog, Cybersecurity, Penetration Testing, pentesting, SCCM, Security Research, Threat & Attack Simulation, Vulnerability Management & Penetration Testing
Author: Marshall Price, Senior Security Consultant TL;DR: The following conditions can lead to compromise of the SCCM client push account […] ... Read More
The Guiding Point | GuidePoint Security
The CMMC Proposed Rule is Out – Now What?

The CMMC Proposed Rule is Out – Now What?

| | Blog, Cybersecurity, Governance, Risk & Compliance, PCI, PCI DSS
What is CMMC? NIST Special Publication 800-171 (110 requirements) was first published in 2016 with an implementation requirement date of […] ... Read More
The Guiding Point | GuidePoint Security
FS-ISAC: FinCyber Today

Quarterly GRIT Ransomware Report – Q2 2023

| | Blog, Cybersecurity, GRIT, GRIT Blog, Incident Response & Threat Intelligence, Ransomware, Report
With the second quarter of 2023 behind us, it’s time to talk about GRIT’s findings from April, May, and June. […] ... Read More
The Guiding Point | GuidePoint Security
FS-ISAC: FinCyber Today

Quarterly GRIT Ransomware Report – Q1 2023

| | Blog, Cybersecurity, GRIT, GRIT Blog, Incident Response & Threat Intelligence, Ransomware, Report
With the close of 2023’s first quarter, we’re publishing GRIT’s findings and research from the first three months of the […] ... Read More
The Guiding Point | GuidePoint Security

Application Security Check Up