- Published
- Source
- D3 Security
- Filed under
- Automation, Malware & exploits
Black October: AI-found PHP2Shell was exploited before its patch, and many of the week's breaches began months earlier. What it asks of SOC teams.
Keeping malware out
- Keep operating systems, browsers and plugins patched – most malware arrives through known holes.
- Block macros and scripts from the internet, and let only approved software run where you can.
- Watch endpoint alerts for new persistence: scheduled tasks, services and run keys.
More helpNCSC: mitigating malware and ransomware attacks (opens in a new tab)
MyCyberWay training
Blue Team Engineer
Build the controls that stop the next one.
Blue Team Engineer: 28 live classes configuring identity, endpoint, email, network and cloud security in your own Azure and Microsoft Defender tenants – then evidencing it against CIS and NIST CSF, and defending every decision. For people with IT, cloud or SOC experience.
- Conditional Access, PIM and tiered admin
- CSPM, Azure Policy and a landing zone
- Detection engineering and SOAR playbooks
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
