Advanced nation-state threat actors like Volt Typhoon avoid traditional malware downloads, instead "living off the land" by misusing legitimate built-in administrative tools like PowerShell and WMI. By disguising malicious actions inside normal network administration traffic, adversaries pre-position themselves within critical infrastructure and enterprise networks undetected. This episode examines behavioral detection techniques and baseline monitoring to catch stealthy lateral movement before operational impact occurs.
Week 2 Bonus Code: ' CALLBACK '
Week 3 Bonus Code: ' PASSKEYS '
Week three is open now, and the theme is identity and passkeys. The prize is a Nitrokey 3 plus $50 in CISO Marketplace credit. Your first submission adds 25 entries to the NitroPhone draw, and code PASSKEYS adds three more at https://cyberaware.win/c/PASSKEYS Entries close October 31st.
Buy Nitrokey direct: https://securitygadgets.shop/nitrokey
Enter free: https://cyberaware.win
Bonus entries (+25 for your first submission): https://cyberaware.win/community
No purchase necessary. Rules: https://cyberaware.win/rules
Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/
#CyberAwareWin #CybersecurityAwarenessMonth
No comments yet. Be the first to say something!