Active Exploits and Defender Tooling

Tools

GATO: Map Your CI/CD Attack Paths

Praetorian released GATO, a tool for mapping attack paths through GitHub repos and CI/CD systems. For teams with mature DevOps, this is a direct way to audit how a code change can lead to cloud compromise. Automates a scary manual process.

News

Symbiote Malware Masters Evasion Techniques

Researchers found new malware, Symbiote, that's notably good at evading analysis. If your threat hunting playbook is static, you're letting things like this lodge deep in your network. Time to simulate this behavior in your detection exercises.