OSN April 9, 2021

Title: CISA Releases Post-Compromise Tool Aviary to Review Microsoft 365 Date Published: April 9, 2021 CISA releases post-compromise tool Aviary to review Microsoft 365 Excerpt: “Sparrow checks and installs the required PowerShell modules on the machine to analyze,...

OSN MARCH 22, 2021

Title: What Does the Florida Water Supply Incident Mean for ICS Cybersecurity? Date Published: March 22, 2021 https://isaautomation.medium.com/what-does-the-florida-water-supply-incident-mean-for-ics-cybersecurity-432cac6f39c7?source=rss——cybersecurity-5...

OSN MARCH 8, 2021

Title: Bazar Drops the Anchor Date Published: March 8, 2021 Bazar Drops the Anchor Excerpt: “In this case we started with a DocuSign themed Excel maldoc. The excel file failed to bring down the payload but to follow the infection chain we executed the follow on...

OSN MARCH 4, 2021

Title: DHS Orders Agencies to Urgently Patch or Disconnect Exchange Servers Date Published: March 4, 2021 https://www.bleepingcomputer.com/news/security/dhs-orders-agencies-to-urgently-patch-or-disconnect-exchange-servers/ Excerpt: “CISA “strongly”...

OSN March 3, 2021

Title: Microsoft Accuses China Over Email Cyber-Attacks Date Published: March 3, 2021 https://www.bbc.com/news/business-56261516 Excerpt: “Microsoft’s Threat Intelligence Centre attributed the attacks with “high confidence” to Hafnium, a group...