#living-off-the-land
8 stories taggedliving-off-the-land.
Intruder Sat Inside Thai Broadband Giant 3BB, Using Off-the-Shelf Admin Tool to Stay Hidden
A hacker held remote control of internal machines at one of Thailand's biggest internet providers by piggybacking on MeshCentral, a legitimate IT management tool, according to researchers at Hunt.io.
CISA Tells Defenders to Plant Fake Systems and Wait
New federal guidance walks security teams through using decoys, tripwires and fake credentials to spot attackers who look like legitimate users.
Hackers Are Hiding Malware Inside Node.js, and Windows Sees Nothing Wrong
Symantec says attackers have been abusing the legitimate Node.js runtime since February 2026 to slip past defences at governments, tech firms and hotel chains.
Phishing crews hijacked a legitimate IT tool to take over more than 450 computers
Attackers pushed fake Adobe files that quietly enrolled victim PCs into Faronics Deploy, then used it to install ScreenConnect for hands-on remote control.
Microsoft's Own Antivirus Driver Can Be Turned Into a Weapon at Boot
Check Point researchers show how BTR.sys, the trusted cleanup tool inside Microsoft Defender, can be steered to wipe files and registry keys before Windows even finishes starting.
Weekly Roundup: Trusted Software Turned Against Defenders, Plus a Critical Gogs Flaw
Signed drivers hijacked to kill antivirus, a code-execution bug in the Gogs source-code platform, and AI shortening the gap between disclosure and working exploit: this week's threats run on tools defenders already trust.
Your security tools stopped the obvious attack. They missed the sneaky one.
Picus Security's Blue Report 2026 finds defenses catch famous techniques reliably but let quieter variants walk straight through.
Non-Admin macOS Accounts Can Chain Native OS Features to Blind Endpoint Security Tools
No exploit required. Researchers found that standard user privileges are enough to chain macOS weaknesses and silently kill endpoint security agents without touching a vulnerability.