Rozsiahle kybernetické útoky čoraz častejšie odhaľujú slabiny, ktoré mnohé organizácie dlhodobo podceňujú. Ich dopady sú vážne a pri incidentoch spojených s ransomvérom, či kybernetickou špionážou už nejde o improvizáciu, ale o systematický boj, kde rozhoduje chladná hlava a dôkladná príprava.
You have probably heard of the critical Windows Netlogon remote code execution vulnerability, tracked as CVE-2026-41089 with a 9.
The shifting threat landscape The vulnerability landscape has shifted in ways that most security programs have not caught up with.
During routine threat monitoring, we identified an active StealC loader. At first glance, it appeared to be a typical dropper - a binary responsible for fetching and launching the final stealer payload.
Our OSINT investigations over the past year have uncovered an alarming reality: login credentials from your employees are being traded, shared, and weaponized across the dark web and public breach databases.
Our Offensive Security team conducted phishing simulation campaigns across multiple client organizations throughout the year. The results reveal uncomfortable truths about human vulnerability to social engineering—and why technical controls alone aren’t enough.
Our offensive security department has completed comprehensive penetration testing and vulnerability assessments across numerous European enterprises over the past year.
This playbook dives deep into critical attack vectors, ranging from Kerberoasting and DCSync to complex ADCS privilege escalation techniques.
IstroSec Managed Defense tím v rámci svojich služieb ponúka službu threat-hunting, vďaka ktorej sme odhalili a včas mitigovali aktívnu kampaň útočníkov.