Tag

#Post-Exploitation

9 published stories tagged with Post-Exploitation.

highData BreachesAug 5, 2026·3 min read

Hackers run khunt post-exploitation toolkit from Oracle database

A corporate network was breached via a vulnerable search engine endpoint in a public-facing Java application running Apache Tomcat.

highRansomwareMay 8, 2026·4 min read

Brief: Warlock ransomware post-exploitation activity shows need for dwell-time hunting

Dark Reading listed Warlock ransomware post-exploitation coverage. Defenders should hunt for lateral movement, credential access, and tooling before ransomware detonation.

highRansomwareMay 8, 2026·4 min read

Defender Guidance: Warlock ransomware post-exploitation activity shows need for dwell-time hunting

Dark Reading listed Warlock ransomware post-exploitation coverage. Defenders should hunt for lateral movement, credential access, and tooling before ransomware detonation.

highRansomwareMay 8, 2026·4 min read

Detection Notes: Warlock ransomware post-exploitation activity shows need for dwell-time hunting

Dark Reading listed Warlock ransomware post-exploitation coverage. Defenders should hunt for lateral movement, credential access, and tooling before ransomware detonation.

highRansomwareMay 8, 2026·4 min read

Risk Brief: Warlock ransomware post-exploitation activity shows need for dwell-time hunting

Dark Reading listed Warlock ransomware post-exploitation coverage. Defenders should hunt for lateral movement, credential access, and tooling before ransomware detonation.

highThreat IntelligenceMay 8, 2026·4 min read

Brief: Tomiris updates Havoc-based tooling and tactics

Dark Reading reported Tomiris activity involving Havoc tooling and tactical changes. Defenders should monitor for C2 frameworks and post-exploitation behavior.

highThreat IntelligenceMay 8, 2026·4 min read

Defender Guidance: Tomiris updates Havoc-based tooling and tactics

Dark Reading reported Tomiris activity involving Havoc tooling and tactical changes. Defenders should monitor for C2 frameworks and post-exploitation behavior.

highThreat IntelligenceMay 8, 2026·4 min read

Detection Notes: Tomiris updates Havoc-based tooling and tactics

Dark Reading reported Tomiris activity involving Havoc tooling and tactical changes. Defenders should monitor for C2 frameworks and post-exploitation behavior.

highThreat IntelligenceMay 8, 2026·4 min read

Risk Brief: Tomiris updates Havoc-based tooling and tactics

Dark Reading reported Tomiris activity involving Havoc tooling and tactical changes. Defenders should monitor for C2 frameworks and post-exploitation behavior.