Cyber Threat Intelligence

---

Interlock Ransomware Analysis, Simulation, and Mitigation - CISA Alert AA25-203A Hüseyin Can Yüceel Picus Security, 2025-07-28 00:00:00 Link Archive Link

---

CVE-2025-5777: Citrix Bleed 2 Memory Leak Vulnerability Explained Hüseyin Can Yüceel Picus Security, 2025-07-09 00:00:00 Link Archive Link

---

Inside the Shadows: Understanding Active Iranian APT Groups Hüseyin Can Yüceel Picus Security, 2025-06-24 00:00:00 Link Archive Link

---

Russian Unit 26165 Targets Western Logistics and Technology Companies Hüseyin Can Yüceel Picus Security, 2025-05-23 00:00:00 Link Archive Link

---

CVE-2025-31324: SAP NetWeaver Remote Code Execution Vulnerability Explained Hüseyin Can Yüceel Picus Security, 2025-04-28 00:00:00 Link Archive Link

---

CVE-2025-32433: Erlang/OTP SSH Remote Code Execution Vulnerability Explained Hüseyin Can Yüceel Picus Security, 2025-04-18 00:00:00 Link Archive Link

---

CVE-2025-22457: Ivanti Remote Code Execution Vulnerability Explained Hüseyin Can Yüceel Picus Security, 2025-04-09 00:00:00 Link Archive Link

---

IngressNightmare: Ingress NGINX Remote Code Execution Vulnerability Explained Hüseyin Can Yüceel Picus Security, 2025-03-25 00:00:00 Link Archive Link

---

CVE-2025-29927: Next.js Middleware Bypass Vulnerability Explained Hüseyin Can Yüceel Picus Security, 2025-03-24 00:00:00 Link Archive Link

---

Medusa Ransomware Analysis, Simulation, and Mitigation - CISA Alert AA25-071A Hüseyin Can Yüceel Picus Security, 2025-03-14 00:00:00 Link Archive Link

---

Ghost (Cring) Ransomware Analysis, Simulation, and Mitigation - CISA Alert AA25-050A Hüseyin Can Yüceel Picus Security, 2025-02-20 00:00:00 Link Archive Link

---

Microsoft Active Directory Domain Services CVE-2025-21293 Vulnerability Explained Hüseyin Can Yüceel Picus Security, 2025-02-17 00:00:00 Link Archive Link

---

Palo Alto CVE-2024-0012 and CVE-2024-9474 Vulnerabilities Explained Hüseyin Can Yüceel Picus Security, 2024-11-20 Link Archive Link

---

RansomHub Ransomware Analysis, Simulation, and Mitigation - CISA Alert AA24-242A Hüseyin Can Yüceel Picus Security, 2024-08-30 Link Archive Link

---

Andariel: North Korean APT Group Targets Military and Nuclear Programs Hüseyin Can Yüceel Picus Security, 2024-07-26 Link Archive Link

---

APT40: Leviathan Targets Asia-Pacific Countries for Cyber Espionage Hüseyin Can Yüceel Picus Security, 2024-07-10 Link Archive Link

---

CVE-2024-24919: Check Point Security Gateways Zero-Day Vulnerability Explained Hüseyin Can Yüceel Picus Security, 2024-06-03 Link Archive Link

---

Black Basta Ransomware Analysis, Simulation, and Mitigation - CISA Alert AA24-131A Hüseyin Can Yüceel Picus Security, 2024-05-13 Link Archive Link

---

Akira Ransomware Analysis, Simulation and Mitigation- CISA Alert AA24-109A Hüseyin Can Yüceel Picus Security, 2024-04-22 Link Archive Link

---

CVE-2024-3400: Palo Alto PAN-OS Command Injection Vulnerability Explained Hüseyin Can Yüceel Picus Security, 2024-04-18 Link Archive Link

---

CVE-2024-27198 and CVE-2024-27199: JetBrains TeamCity Authentication Bypass Vulnerabilities Explained Hüseyin Can Yüceel Picus Security, 2024-03-06 Link Archive Link

---

Phobos Ransomware Analysis, Simulation and Mitigation- CISA Alert AA24-060A Hüseyin Can Yüceel Picus Security, 2024-03-01 Link Archive Link

---

LockBit Returns: Lessons Learned From Operation Cronos Hüseyin Can Yüceel Picus Security, 2024-02-27 Link Archive Link

---

CVE-2024-20253: Cisco Unified Comms Remote Code Execution Vulnerability Hüseyin Can Yüceel Picus Security, 2024-01-26 Link Archive Link

---

CVE-2023-22527: Another OGNL Injection Leads to RCE in Atlassian Confluence Hüseyin Can Yüceel Picus Security, 2024-01-23 Link Archive Link

---

Ivanti CVE-2023-46805 and CVE-2024-21887 Zero-Day Vulnerabilities Actively Exploited Hüseyin Can Yüceel Picus Security, 2024-01-20 Link Archive Link

---

Androxgh0st Malware Targets Cloud Services - CISA Alert AA24-016A Hüseyin Can Yüceel Picus Security, 2024-01-17 Link Archive Link

---

Play Ransomware Analysis, Simulation and Mitigation- CISA Alert AA23-352A Hüseyin Can Yüceel Picus Security, 2023-12-19 Link Archive Link

---

CVE-2023-42793: CozyBear Targets Software Developers Exploiting JetBrains TeamCity Hüseyin Can Yüceel Picus Security, 2023-12-14 Link Archive Link

---

CISA Alert AA23-341A: Star Blizzard Targets NATO Countries with Spearphishing Attacks Hüseyin Can Yüceel Picus Security, 2023-12-08 Link Archive Link

---

CVE-2023-26360: Adobe ColdFusion Servers Exploited for Initial Access Hüseyin Can Yüceel Picus Security, 2023-12-06 Link Archive Link

---

CVE-2023-4966: LockBit Exploits Citrix Bleed in Ransomware Attacks Hüseyin Can Yüceel Picus Security, 2023-11-23 Link Archive Link

---

CVE-2023-1671: Sophos Command Injection Vulnerability Exploited in the Wild Hüseyin Can Yüceel Picus Security, 2023-11-22 Link Archive Link

---

Scattered Spider: Leveraging Social Engineering for Extortion - CISA Alert AA23-320A Hüseyin Can Yüceel Picus Security, 2023-11-17 Link Archive Link

---

CVE-2023-46747: F5 BIG-IP Unauthenticated Remote Code Execution Vulnerability Hüseyin Can Yüceel Picus Security, 2023-10-27 Link Archive Link

---

CVE-2023-20198: Actively Exploited Cisco IOS XE Zero-Day Vulnerability Hüseyin Can Yüceel Picus Security, 2023-10-20 Link Archive Link

---

AvosLocker Ransomware Continues to Target US - CISA Alert AA23-284A Hüseyin Can Yüceel Picus Security, 2023-10-12 Link Archive Link

---

CVE-2023-4911: Looney Tunables - Local Privilege Escalation Vulnerability Hüseyin Can Yüceel Picus Security, 2023-10-09 Link Archive Link

---

Rhysida Ransomware Explained: Tactics, Techniques, and Procedures Hüseyin Can Yüceel Picus Security, 2023-10-03 Link Archive Link

---

BlackTech APT Group Targets US and Japan - CISA Alert AA23-270A Hüseyin Can Yüceel Picus Security, 2023-09-28 Link Archive Link

---

CVE-2023-29357: SharePoint Server Privilege Escalation Vulnerability Hüseyin Can Yüceel Picus Security, 2023-09-28 Link Archive Link

---

Snatch Ransomware Explained - CISA Alert AA23-263A Hüseyin Can Yüceel Picus Security, 2023-09-21 Link Archive Link

---

CVE-2023-20269: Akira Ransomware Exploits Cisco ASA Vulnerability Hüseyin Can Yüceel Picus Security, 2023-09-11 Link Archive Link

---

CISA Alert AA23-250A: Nation-State APT Actors Exploit CVE-2022-47966 and CVE-2022-42475 Hüseyin Can Yüceel Picus Security, 2023-09-08 Link Archive Link

---

CISA Alert AA23-242A: Operation Duck Hunt - Taking Down QakBot Botnet Hüseyin Can Yüceel Picus Security, 2023-08-31 Link Archive Link

---

CVE-2023-2868: Barracuda ESG Vulnerability Actively Exploited by UNC4841 Hüseyin Can Yüceel Picus Security, 2023-07-31 Link Archive Link

---

Truebot Botnet Adopts New Techniques for Data Exfiltration - CISA Alert AA23-187A Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2023-07-08 Link Archive Link

---

CVE-2023-34362: CL0P Ransomware Exploits MOVEit Transfer SQLi Vulnerability Hüseyin Can Yüceel Picus Security, 2023-06-09 Link Archive Link

---

Volt Typhoon: The Chinese APT Group Abuse LOLBins for Cyber Espionage Hüseyin Can Yüceel Picus Security, 2023-06-01 Link Archive Link

---

BianLian Ransomware Analysis - The Rise of Exfiltration-based Extortion Hüseyin Can Yüceel Picus Security, 2023-05-17 Link Archive Link

---

CVE-2023-27350 PaperCut Vulnerability Exploited by Bl00dy Ransomware - CISA Alert AA23-131A Hüseyin Can Yüceel Picus Security, 2023-05-12 Link Archive Link

---

CISA Alert AA23-129A: Operation MEDUSA - Dismantling of Snake Implant Hüseyin Can Yüceel Picus Security, 2023-05-10 Link Archive Link

---

3CX Desktop App Supply Chain Attack (SmoothOperator) Analysis Hüseyin Can Yüceel Picus Security, 2023-03-31 Link Archive Link

---

CISA Alert AA23-075A: The Latest LockBit Ransomware Variant - LockBit 3.0 Hüseyin Can Yüceel Picus Security, 2023-03-17 Link Archive Link

---

CVE-2023-21716: Microsoft Word Remote Code Execution Exploit Explained Hüseyin Can Yüceel Picus Security, 2023-03-07 Link Archive Link

---

CISA Alert AA23-061A: Royal Ransomware Analysis, Simulation and TTPs Hüseyin Can Yüceel Picus Security, 2023-03-04 Link Archive Link

---

CISA Alert AA23-039A: ESXiArgs Ransomware targets vulnerable ESXi servers Hüseyin Can Yüceel Picus Security, 2023-02-23 Link Archive Link

---

CVE-2022-39952: FortiNAC Remote Code Execution Exploit Explained Hüseyin Can Yüceel Picus Security, 2023-02-22 Link Archive Link

---

CISA Alert AA23-040A: Maui and HolyGhost Ransomware Target Critical Infrastructure Hüseyin Can Yüceel Picus Security, 2023-02-11 Link Archive Link

---

ProxyNotShell: CVE-2022-41040 and CVE-2022-41082 Exploits Explained Sıla Özeren and Hüseyin Can Yüceel Picus Security, 2022-11-18 Link Archive Link

---

CISA Alert AA22-320A - Iranian APT Actors Target US Federal Network Hüseyin Can Yüceel Picus Security, 2022-11-17 Link Archive Link

---

VMware Cloud Foundation CVE-2021-39144 Vulnerability Exploitation Explained Hüseyin Can Yüceel Picus Security, 2022-11-07 Link Archive Link

---

LV Ransomware Analysis and Simulation Hüseyin Can Yüceel Picus Security, 2022-10-27 Link Archive Link

---

Daixin Team Targets Healthcare Organizations with Ransomware Attacks Hüseyin Can Yüceel Picus Security, 2022-10-24 Link Archive Link

---

Apache Commons Text CVE-2022-42889 Vulnerability Exploitation Explained Hüseyin Can Yüceel Picus Security, 2022-10-18 Link Archive Link

---

FARGO Ransomware Analysis and Simulation Hüseyin Can Yüceel Picus Security, 2022-10-11 Link Archive Link

---

CISA Alert AA22-277A - Impacket and CovalentStealer Used to Steal Sensitive Data Hüseyin Can Yüceel Picus Security, 2022-10-07 Link Archive Link

---

CISA Alert AA22-264A - Iranian HomeLand Justice APT Group's TTPs Hüseyin Can Yüceel Picus Security, 2022-10-03 Link Archive Link

---

Conti Ransomware Group Hüseyin Can Yüceel Picus Security, 2022-08-22 Link Archive Link

---

Hive Ransomware Group Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2022-08-22 Link Archive Link

---

Black Basta Ransomware Gang Hüseyin Can Yüceel Picus Security, 2022-08-22 Link Archive Link

---

Vice Society Ransomware Group Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2022-08-22 Link Archive Link

---

Clop Ransomware Gang Hüseyin Can Yüceel Picus Security, 2022-08-22 Link Archive Link

---

BlackCat Ransomware Gang Hüseyin Can Yüceel Picus Security, 2022-08-22 Link Archive Link

---

LockBit Ransomware Gang Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2022-08-22 Link Archive Link

---

AvosLocker Ransomware Group Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2022-08-22 Link Archive Link

---

Snatch Ransomware Gang Hüseyin Can Yüceel Picus Security, 2022-08-22 Link Archive Link

---

Zeppelin Ransomware Analysis, Simulation, and Mitigation Hüseyin Can Yüceel Picus Security, 2022-08-13 Link Archive Link

---

H0lyGh0st - North Korean Threat Group Strikes Back With New Ransomware Hüseyin Can Yüceel and Sıla Özeren Picus Security, 2022-07-29 Link Archive Link

---

Maui Ransomware: North Korean Threat Actors Attack Healthcare Sector Hüseyin Can Yüceel Picus Security, 2022-07-07 Link Archive Link

---

MedusaLocker Ransomware Analysis, Simulation, and Mitigation Hüseyin Can Yüceel Picus Security, 2022-07-01 Link Archive Link

---

Actively Exploited Atlassian Confluence Zero-Day CVE-2022-26134 Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2022-06-03 Link Archive Link

---

Microsoft Office CVE-2022-30190 Vulnerability (Follina) Exploitation Hüseyin Can Yüceel Picus Security, 2022-05-30 Link Archive Link

---

Simulating and Preventing F5 BIG-IP CVE-2022-1388 RCE Exploits Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2022-05-18 Link Archive Link

---

Spring4Shell: Spring Core Remote Code Execution Vulnerability Hüseyin Can Yüceel Picus Security, 2022-03-31 Link Archive Link

---

Linux “Dirty Pipe” CVE-2022-0847 Vulnerability Exploitation Explained Hüseyin Can Yüceel and Furkan Göksel Picus Security, 2022-03-24 Link Archive Link

---

The LAPSUS$ Group - A Chaotic Start of Ransomware-free Extortion Hüseyin Can Yüceel Picus Security, 2022-03-23 Link Archive Link

---

Leaked Tools, TTPs, and IOCs Used by Conti Ransomware Group Hüseyin Can Yüceel Picus Security, 2022-03-04 Link Archive Link

---

TTPs and Malware used by MuddyWater Cyber Espionage Group Hüseyin Can Yüceel and Erdem Küçükmustafa Picus Security, 2022-03-01 Link Archive Link

---

HermeticWiper Destructive Malware Attacks Targeting Ukraine Hüseyin Can Yüceel Picus Security, 2022-02-25 Link Archive Link

---

TTPs used by BlackByte Ransomware Targeting Critical Infrastructure Hüseyin Can Yüceel Picus Security, 2022-02-21 Link Archive Link

---

Lockbit 2.0 Ransomware: TTPs Used in Emerging Ransomware Campaigns Hüseyin Can Yüceel Picus Security, 2022-02-11 Link Archive Link

---

Picus Threat Library Is Updated for Jester Stealer Trojan Malware Hüseyin Can Yüceel Picus Security, 2022-02-04 Link Archive Link

---

PwnKit: PolKit’s pkexec CVE-2021-4034 Vulnerability Exploitation Hüseyin Can Yüceel Picus Security, 2022-01-28 Link Archive Link

---

TTPs used by DEV-0586 APT Group in WhisperGate Attack Targeting Ukraine Hüseyin Can Yüceel Picus Security, 2022-01-17 Link Archive Link

---

Picus Threat Library Is Updated for Flagpro Malware of BlackTech Group Hüseyin Can Yüceel Picus Security, 2022-01-14 Link Archive Link

---

TTPs and IOCs Used by MuddyWater APT Group in Latest Attack Campaign Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2022-01-13 Link Archive Link

---

Simulating and Preventing Cyber Attacks to Critical Infrastructure Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2022-01-12 Link Archive Link

---

Picus Threat Library Is Updated for Trojans Targeting Banks in Latin America Hüseyin Can Yüceel Picus Security, 2021-12-27 Link Archive Link

---

4-Step Quick Mitigation Plan for Log4j Attacks Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2021-12-27 Link Archive Link

---

The Log4j Vulnerability Remediation with WAF and IPS Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2021-12-16 Link Archive Link

---

4-Step Immediate Mitigation for Log4j Attacks (Log4Shell) Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2021-12-16 Link Archive Link

---

Simulating and Preventing CVE-2021-44228 Apache Log4j RCE Exploits Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2021-12-10 Link Archive Link

---

Cyber Security Trends

---

The Most Common Security Weaknesses: CWE Top 25 and OWASP Top 10 Hüseyin Can Yüceel Picus Security, 2023-07-14 Link Archive Link

---

Top Vulnerabilities Actively Exploited by Chinese State-Sponsored APT Actors Hüseyin Can Yüceel Picus Security, 2022-11-02 Link Archive Link

---

The CISA Recommended Method to Validate Security Controls Hüseyin Can Yüceel and Süleyman Özarslan Picus Security, 2022-09-27 Link Archive Link

---

Emerging Cyber Threats of June 2022 Hüseyin Can Yüceel Picus Security, 2022-07-18 Link Archive Link

---

Emerging Cyber Threats of May 2022 Hüseyin Can Yüceel Picus Security, 2022-06-21 Link Archive Link

---

Key Threats and Cyber Risks Facing Financial Services and Banking Firms in 2022 Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2022-03-24 Link Archive Link

---

10 Lessons Learned from the Top Cyber Threats of 2021 Hüseyin Can Yüceel Picus Security, 2022-01-10 Link Archive Link

---

Concepts and Best Practices

---

BAS vs Automated Pentesting: Validating Real-World Exploitability Hüseyin Can Yüceel Picus Security, 2025-05-29 00:00:00 Link Archive Link

---

From Alert Fatigue to Action: SOC Optimization in Healthcare Hüseyin Can Yüceel Picus Security, 2025-05-28 00:00:00 Link Archive Link

---

BAS vs Automated Pentesting: Evidence-Based Metrics for Compliance Hüseyin Can Yüceel Picus Security, 2025-05-28 00:00:00 Link Archive Link

---

BAS vs Automated Pentesting: Validating Detection and Blue Team Readiness Hüseyin Can Yüceel Picus Security, 2025-05-27 00:00:00 Link Archive Link

---

BAS vs Automated Pentesting: Security Baselining and Configuration Drift Hüseyin Can Yüceel Picus Security, 2025-05-26 00:00:00 Link Archive Link

---

BAS vs Automated Pentesting: Scaling Red Team Operations with Automation Hüseyin Can Yüceel Picus Security, 2025-05-24 00:00:00 Link Archive Link

---

BAS vs Automated Pentesting: Safe Testing in Production Hüseyin Can Yüceel Picus Security, 2025-05-23 00:00:00 Link Archive Link

---

BAS vs Automated Pentesting: Maximizing ROI from Security Controls Hüseyin Can Yüceel Picus Security, 2025-05-16 00:00:00 Link Archive Link

---

Why Healthcare Needs Exposure Validation, Not Just Assessment Hüseyin Can Yüceel Picus Security, 2025-05-15 00:00:00 Link Archive Link

---

BAS vs Automated Pentesting: Finding Security Gaps and Improving Posture Hüseyin Can Yüceel Picus Security, 2025-05-15 00:00:00 Link Archive Link

---

BAS vs Automated Pentesting: Threat-Informed Defense Against Emerging Threats Hüseyin Can Yüceel Picus Security, 2025-05-14 00:00:00 Link Archive Link

---

Checklist for Exposure Validation Solutions in CTEM Hüseyin Can Yüceel Picus Security, 2025-04-25 00:00:00 Link Archive Link

---

Security Validation with MITRE ATT&CK Hüseyin Can Yüceel Picus Security, 2025-04-07 00:00:00 Link Archive Link

---

Breach and Attack Simulation: A Must-Have for Modern Cybersecurity Strategies Hüseyin Can Yüceel Picus Security, 2025-02-28 00:00:00 Link Archive Link

---

Top 5 Benefits of Implementing Exposure Validation Hüseyin Can Yüceel Picus Security, 2024-11-25 Link Archive Link

---

The Role of Adversarial Exposure Validation in CTEM Hüseyin Can Yüceel and Süleyman Özarslan Picus Security, 2024-09-18 Link Archive Link

---

Defending Against Credential Access Attacks: Harnessing the Power of MITRE D3FEND Decoy Objects Burcu Demiralp and Hüseyin Can Yüceel Picus Security, 2023-12-20 Link Archive Link

---

Improving Detection Coverage on Atlassian with Splunk Detection Rules İlker Küçücük and Hüseyin Can Yüceel Picus Security, 2023-11-03 Link Archive Link

---

AWS Cloud Security Best Practices: Logging and Monitoring Cloud Activity Hüseyin Can Yüceel Picus Security, 2023-10-06 Link Archive Link

---

AWS Cloud Security Best Practices: Identity and Access Management Hüseyin Can Yüceel Picus Security, 2023-10-06 Link Archive Link

---

AWS Cloud Security Best Practices: Cyber Asset Management Hüseyin Can Yüceel Picus Security, 2023-10-06 Link Archive Link

---

Securing macOS: A Closer Look At Built-In macOS Application Security Fatih Erdoğan and Hüseyin Can Yüceel Picus Security, 2023-07-31 Link Archive Link

---

Ransomware Prevention Best Practices for Banks and Financial Firms Hüseyin Can Yüceel Picus Security, 2023-05-12 Link Archive Link

---

5 Reasons Why You Need to Validate Security of Linux and macOS Endpoints Hüseyin Can Yüceel Picus Security, 2023-01-02 Link Archive Link

---

Boost Your Threat Detection with Picus Detection Rule Validation Hüseyin Can Yüceel Picus Security, 2023-01-02 Link Archive Link

---

Why You Need to Validate Detection Rules Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2023-01-02 Link Archive Link

---

WAF Bypass Using JSON-Based SQL Injection Attacks Hüseyin Can Yüceel Picus Security, 2022-12-13 Link Archive Link

---

A Data Driven Comparison of Open Source Adversary Emulation Tools Hüseyin Can Yüceel Picus Security, 2022-10-13 Link Archive Link

---

Ten Key Criteria for Choosing the Right Breach and Attack Simulation Solution Hüseyin Can Yüceel Picus Security, 2022-08-01 Link Archive Link

---

Ransomware Attack Detection and Prevention in the Final Phase of the Attack Lifecycle Hüseyin Can Yüceel Picus Security, 2022-06-09 Link Archive Link

---

Purple Team Automation with Breach and Attack Simulation (BAS) Hüseyin Can Yüceel Picus Security, 2022-05-09 Link Archive Link

---

Ransomware Detection and Prevention in the Late Phase of the Lifecycle Hüseyin Can Yüceel Picus Security, 2022-04-13 Link Archive Link

---

What Is Purple Teaming and Why Do You Need It in Your Security Operations? Hüseyin Can Yüceel Picus Security, 2022-04-11 Link Archive Link

---

How to Detect Ransomware Attacks in the Early Warning Phase Hüseyin Can Yüceel and Oğuzcan Pamuk Picus Security, 2022-03-30 Link Archive Link

---

Ransomware Prevention and Detection in the Initial Phase of Attack Lifecycle from the Defender’s Perspective Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2022-03-17 Link Archive Link

---

The Ransomware Attack Lifecycle from the Defender’s Perspective Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2022-03-10 Link Archive Link

---

3 Ransomware Trends You Need to Know in 2022: RaaS, Multiple Extortion, IABs Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2022-01-20 Link Archive Link

---

How to Detect Parent PID (PPID) Spoofing Attacks Hüseyin Can Yüceel and Eren Karabacak Picus Security, 2022-01-19 Link Archive Link

---

MITRE ATT&CK

---

MITRE ATT&CK T1005 Data from Local System Hüseyin Can Yüceel Picus Security, 2025-04-09 00:00:00 Link Archive Link

---

MITRE ATT&CK T1562.012 Impair Defenses: Disable or Modify Linux Audit System Hüseyin Can Yüceel Picus Security, 2025-04-07 00:00:00 Link Archive Link

---

MITRE ATT&CK T1562.011 Impair Defenses: Spoof Security Alerting Hüseyin Can Yüceel Picus Security, 2025-04-04 00:00:00 Link Archive Link

---

MITRE ATT&CK T1562.010 Impair Defenses: Downgrade Attack Hüseyin Can Yüceel Picus Security, 2025-04-03 00:00:00 Link Archive Link

---

MITRE ATT&CK T1056 Input Capture Hüseyin Can Yüceel Picus Security, 2025-03-27 00:00:00 Link Archive Link

---

MITRE ATT&CK T1562.009 Impair Defenses: Safe Mode Boot Hüseyin Can Yüceel Picus Security, 2025-03-26 00:00:00 Link Archive Link

---

MITRE ATT&CK T1562.008 Impair Defenses: Disable or Modify Cloud Logs Hüseyin Can Yüceel Picus Security, 2025-03-24 00:00:00 Link Archive Link

---

MITRE ATT&CK T1562.007 Impair Defenses: Disable or Modify Cloud Firewall Hüseyin Can Yüceel Picus Security, 2025-03-21 00:00:00 Link Archive Link

---

MITRE ATT&CK T1562.006 Impair Defenses: Indicator Blocking Hüseyin Can Yüceel Picus Security, 2025-03-20 00:00:00 Link Archive Link

---

MITRE ATT&CK T1562.004 Impair Defenses: Disable or Modify System Firewall Hüseyin Can Yüceel Picus Security, 2025-03-18 00:00:00 Link Archive Link

---

MITRE ATT&CK T1562.002 Impair Defenses: Disable Windows Event Logging Hüseyin Can Yüceel Picus Security, 2025-03-17 00:00:00 Link Archive Link

---

MITRE ATT&CK T1562.001 Impair Defenses: Disable or Modify Tools Hüseyin Can Yüceel Picus Security, 2025-03-14 00:00:00 Link Archive Link

---

MITRE ATT&CK T1562.003 Impair Defenses: Impair Command History Logging Hüseyin Can Yüceel Picus Security, 2025-03-12 00:00:00 Link Archive Link

---

MITRE ATT&CK T1055.015 Process Injection: ListPlanting Hüseyin Can Yüceel Picus Security, 2025-03-11 00:00:00 Link Archive Link

---

MITRE ATT&CK T1055.005 Process Injection: Thread Local Storage Hüseyin Can Yüceel Picus Security, 2025-03-06 00:00:00 Link Archive Link

---

MITRE ATT&CK T1055.003 Process Injection: Thread Execution Hijacking Hüseyin Can Yüceel Picus Security, 2025-03-05 00:00:00 Link Archive Link

---

MITRE ATT&CK T1055.012 Process Injection: Process Hollowing Hüseyin Can Yüceel Picus Security, 2025-03-04 00:00:00 Link Archive Link

---

MITRE ATT&CK T1055.011 Process Injection: Extra Window Memory Injection Hüseyin Can Yüceel Picus Security, 2025-03-03 00:00:00 Link Archive Link

---

MITRE ATT&CK T1055.009 Process Injection: Proc Memory Hüseyin Can Yüceel Picus Security, 2025-02-28 00:00:00 Link Archive Link

---

MITRE ATT&CK T1055.008 Process Injection: Ptrace System Calls Hüseyin Can Yüceel Picus Security, 2025-02-27 00:00:00 Link Archive Link

---

MITRE ATT&CK T1055.004 Process Injection: Asynchronous Procedure Call Hüseyin Can Yüceel Picus Security, 2025-02-26 00:00:00 Link Archive Link

---

MITRE ATT&CK T1055.002 Process Injection: Portable Executable Injection Hüseyin Can Yüceel Picus Security, 2025-02-25 00:00:00 Link Archive Link

---

MITRE ATT&CK T1055.001 Process Injection: DLL Injection Hüseyin Can Yüceel Picus Security, 2025-02-24 00:00:00 Link Archive Link

---

MITRE ATT&CK T1555 Credentials from Password Stores Hüseyin Can Yüceel Picus Security, 2025-02-10 00:00:00 Link Archive Link

---

MITRE ATT&CK T1547 Boot or Logon Autostart Execution Hüseyin Can Yüceel Picus Security, 2024-04-08 Link Archive Link

---

MITRE ATT&CK T1071 Application Layer Protocol Hüseyin Can Yüceel Picus Security, 2024-04-05 Link Archive Link

---

T1047 Windows Management Instrumentation of the MITRE ATT&CK Framework Hüseyin Can Yüceel Picus Security, 2023-05-24 Link Archive Link

---

T1018 Remote Service Discovery of the MITRE ATT&CK Framework Hüseyin Can Yüceel Picus Security, 2023-05-12 Link Archive Link

---

T1021 Remote Services of the MITRE ATT&CK Framework Hüseyin Can Yüceel Picus Security, 2023-05-09 Link Archive Link

---

Top 5 Ransomware ATT&CK Techniques Hüseyin Can Yüceel Picus Security, 2022-10-14 Link Archive Link

---

The System Information Discovery Technique Explained - MITRE ATT&CK T1082 Hüseyin Can Yüceel Picus Security, 2022-06-09 Link Archive Link

---

Virtualization/Sandbox Evasion - How Attackers Avoid Malware Analysis Hüseyin Can Yüceel Picus Security, 2022-06-09 Link Archive Link

---

The Top 4 MITRE ATT&CK Techniques from CISA’s RVA Report and Picus Red Report Hüseyin Can Yüceel Picus Security, 2022-06-01 Link Archive Link

---

Masquerading Attacks Explained - MITRE ATT&CK T1036 Hüseyin Can Yüceel Picus Security, 2022-05-11 Link Archive Link

---

Scheduled Task/Job - The Most Used MITRE ATT&CK Persistence Technique Hüseyin Can Yüceel Picus Security, 2022-04-18 Link Archive Link

---

The MITRE ATT&CK T1027 Obfuscated Files or Information Technique Hüseyin Can Yüceel Picus Security, 2022-04-05 Link Archive Link

---

The MITRE ATT&CK T1003 OS Credential Dumping Technique and Its Adversary Use Hüseyin Can Yüceel Picus Security, 2022-03-23 Link Archive Link

---

T1218 Signed Binary Proxy Execution of the MITRE ATT&CK Framework Hüseyin Can Yüceel Picus Security, 2022-03-11 Link Archive Link

---

T1055 Process Injection of the MITRE ATT&CK Framework Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2022-02-23 Link Archive Link

---

T1059 Command and Scripting Interpreter of the MITRE ATT&CK Framework Hüseyin Can Yüceel Picus Security, 2022-02-17 Link Archive Link

---

MITRE ATT&CK T1490 Inhibit System Recovery - The Ransomware’s Favorite Hüseyin Can Yüceel Picus Security, 2022-02-02 Link Archive Link

---

The Most Common Ransomware TTP - MITRE ATT&CK T1486 Data Encrypted for Impact Süleyman Özarslan and Hüseyin Can Yüceel Picus Security, 2022-01-26 Link Archive Link

---

The Top Ten MITRE ATT&CK Techniques Hüseyin Can Yüceel Picus Security, 2020-05-13 Link Archive Link

---