Skip To Main Content
project Timestamp on Muck Rack

project Timestamp

As seen in: Microsoft Learn Blog, DEV Community, Towards Data Science, SQL Server Central, Cyber Security News, Blog El Hacker, National Cyber Security, Malware.News, VPNCentral, CyberNoz and
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile

Get in touch with project

Contact project, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Is this you?

As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile

Articles

tracking CVE-2026-73570

|
By Device ProcessEvents, project Timestamp, Process CommandLine
| unSafe.
Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570 Microsoft Threat Intelligence identified and tracked exploitation of CVE-2026-73570, an unauthe 2026-9-30 14:0:0 Author: www.microsoft.com(查看原文) 阅读量:1 收藏 Microsoft Threat Intelligence identified and tracked exploitation of CVE-2026-73570, an unauthenticated OS command injection vulnerability in the Zimbra Collaboration Suite SNMP notification path.
Open in Who Shared View Duplicates (4) Issue with article?

Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments | #ransomware | #cybercrime

|
By Device ProcessEvents, project Timestamp, Process CommandLine
| National Cyber Security
Tactic Observed activity Microsoft Defender coverage Execution Storm-2570 delivers tools such as PsExec, Impacket, NetExec, and RDP batch scripts, to carry out post-compromise activity Microsoft Defender Antivirus – Behavior:Win32/PsexecRemote Microsoft Defender for Endpoint – Hands-on-keyboard attack involving multiple devices – Remote access software – Suspicious PowerShell command line – Suspicious PowerShell download or encoded command execution – Ransomware-linked threat actor detected...
Open in Who Shared Issue with article?

Microsoft Defender XDR Queries Can Miss Public Connections Logged as FourToSixMapping

|
By Device NetworkEvents, Where RemoteIptype, project Timestamp
| VPNCentral
Microsoft Defender XDR detection rules can miss public network connections when they filter the DeviceNetworkEvents table only for RemoteIPType == "Public". Some IPv4 connections made through IPv6-capable sockets appear under the separate FourToSixMapping classification. The connection events remain available in Defender XDR.
Open in Who Shared Issue with article?
See all 60 articles