We recently published our latest Spotlight Report, which takes a long look into the vulnerabilities used by ransomware in real-world attacks against enterprises and state and local governments. This was a particularly interesting report to be a part of...

The process of dumping LSASS (Local Security Authority Subsystem Service) is not a new attack and is well known; however, this specific vector is interesting because all of the tools required to pull this off are already bundled with the Windows operating...

Ransomware is in the midst of a massive resurgence, and in most cases, enterprises are the prime target of attack. Unlike the more opportunistic and consumer-focused ransomware of the past, these newer campaigns have become more targeted, patient, and have...

Microsoft Windows Remote Desktop Protocol (RDP) is a built-in service that facilitates logging into the Windows GUI of another computer over the network, by default on TCP port 3389. On 14 May 2019, the public's attention was drawn toward patching the...

As threats have become more sophisticated and have increasingly turned to more adaptive and continuous approaches to security such as Gartner’s Adaptive Security Architecture. This model breaks security into the high-level categories of Prevent,...

This past week a serious vulnerability that affects some older versions of Windows, CVE-2019-0708, was disclosed for which Microsoft has produced a patch. This vulnerability in Remote Desktop Services (aka Terminal Services) could allow an...

At RiskSense, part of our mission is to remove the data overload that boils down to reducing the workload on security and IT teams. We take the thousands of vulnerabilities generated by scanners and distil it down to the handful of issues with...