New Era of Cyber Attacks – Know Thy Adversary
In February 2014 at the RSA Conference, my colleague George Kurtz and I presented a session titled “Hacking Exposed: Day of Destruction.”…
Unprecedented Announcement by FBI Implicates North Korea in Destructive Attacks
There is a curse that is purported to translate to an old Chinese Proverb - “May you live in interesting times.” These…
Malware-Free Intrusions: Adversary Tricks and CrowdStrike Treats
‘Tis the season for trick-or-treating, so I thought it might be a good time to share some of the new tricks we’re…
CrowdStrike Discovers Use of 64-bit Zero-Day Privilege Escalation Exploit (CVE-2014-4113) by Hurricane Panda
Every once in a while an adversary does something unique or interesting that really captures our attention. The majority of the remote…
CrowdStrike ShellShock Scanner – New Community Tool
A large number of ShellShock online vulnerability scanners have been released since the bug disclosure on September 24. These tools can be…
Deep in Thought: Chinese Targeting of National Security Think Tanks
For some time now, CrowdStrike has been working with a number of national security think tanks and human rights organizations on a…
*NEW* Community Tool: CrowdStrike Heartbleed Scanner
Since last week, several researchers and security companies have released free web-based scanners for the OpenSSL Heartbleed (CVE-2014-0160) vulnerability independently revealed on…
Actionable Indicators for Detection of Signs of Compromise from Target-related Breaches
A lot of press stories and blogs have been written about the Target breach in the last month after Brian Krebs broke…