5 min read
Why You Need to Start Threat Hunting Within Your Network
Written by Andrew Oesterheld and Todd Welfelt
Read More
Threat Intelligence Research
Read our latest threat intelligence, produced by our team of battle-hardened analysts and experts.
1 min read
CVE-2024-3400: Palo Alto Networks PAN-OS Zero-Day Under Active Exploitation
Palo Alto Networks released a security bulletin detailing a new critical command injection vulnerability in their PAN-OS software, tracked as...
4 min read
Cyber Threat Intelligence Briefing - April 8, 2024
This week, we dive into a new SSH xz backdoor discovered in a popular Linux distribution and how to protect your organization from an HTTP/2 CONTINUATION...
10 min read
How PacketWatch Network Monitoring Foiled an Initial Access Broker
On January 1, 2024, the PacketWatch team prevented a cyberattack by detecting early signs of malicious activity in a client's network. We uncovered an...
4 min read
Cyber Threat Intelligence Briefing - March 25, 2024
This week, we share a new tactic from DarkGate to look out for and a vulnerability roundup.
5 min read
Cyber Threat Intelligence Briefing - March 11, 2024
This week, we cover lessons learned from the recent Microsoft Security and Midnight Blizzard statement, X's new feature's privacy risk, and a...
4 min read
Cyber Threat Intelligence Briefing - February 26, 2024
This week, we continue to cover the ConnectWise ScreenConnect vulnerabilities and United Healthcare Optum Breach and include a vulnerability roundup.
1 min read
Two ConnectWise ScreenConnect Critical RCE Vulnerabilities
ConnectWise recently released a security bulletin disclosing two new vulnerabilities in their ScreenConnect platform.
1 min read
CVE-2024-21413: Microsoft Outlook Critical RCE
As part of this month's Patch Tuesday, Microsoft released a fix for a critical vulnerability affecting multiple Outlook versions.
5 min read
Cyber Threat Intelligence Briefing - February 12, 2024
Welcome back for another bi-weekly threat intelligence report from PacketWatch. This week, we cover the VexTrio traffic broker, Kasseika BYOVD, and a...