Stav Setty

The blog describes a Phishing campaign abusing a Vendor Email Compromise (VEC) Attack

Cortex XDR detects the Kerberos noPac vulnerabilities (CVE-2021-42278 and CVE-2021-42287) leveraging behavioral analytics.

Executive Summary The Cortex XDR Security Research Team recently observed “PowerShell without PowerShell” activity involving PowerShell commands and scripts that do not directly invoke the powershell.exe binary. PowerShell commands and scripts can …

Overview Palo Alto Networks' Unit 42 threat research team observed recent activity involving an advanced Visual Basic for Applications (VBA) technique, VBA-RunPE.  VBA-RunPE is an implementation of the RunPE technique in VBA. …