OPTIV/SOURCE ZERO

This post highlights different tools and approaches for testing thick client applications for vulnerabilities.

This post explains how to use YARA rules differently by targeting only the files that apply to the rules being used to improve scan results.

Palo Alto Networks is expanding the options for organizations that need to secure and manage branch office connectivity and remote workers.

Netskope’s instance awareness allows customers to reduce risk by filling a void left by traditional secure web gateways and next-gen firewalls.

This advisory from Optiv’s gTIC covers recent incidents related to Russian military operations in Ukraine and provides cybersecurity recommendations.

This advisory offers recommendations for organizations potentially affected by Russian state-sponsored activity in Ukraine.

We identified Ivy framework fileless attack techniques that execute undetected in Microsoft Office. Here's how with suggested security augmentations.

We identified Ivy framework fileless attack techniques that execute undetected in Microsoft Office. Here's how with suggested security augmentations.

This post discusses the creation of Azure test virtual machines and assigning an allowed IP address as part of a Power Automate cloud flow.

This video discusses Optiv's creation of Azure Resource Groups and Security Groups as part of a Power Automate Cloud Flow.

We leveraged Microsoft’s OAuth authorization flow for a phishing attack. Here’s step-by-step guidance on how to conduct it for security assessment.

Optiv researcher Dan Kiraly examines automated endpoint evaluations in the first technical video of a series.