Check out a recent finding by one of our own, Naveen Sunkavally. CVE-2022-28219 is an unauth RCE for ManageEngine ADAudit Plus.

This XXE -> Deserialization chain often leads to host compromise as well as priv'd AD creds. Check out the blog post and POC: https://www.horizon3.ai/red-team-blog-cve-2022-28219

Project Nemesis - Russia's doxxing project of the Ukrainian military.

IDS report from @elisethoma5

https://www.isdglobal.org/digital_dispatches/project-nemesis-and-the-new-frontiers-of-informational-warfare/

I've spent months investigating cryptocurrency schemes run by sanctioned individuals connected to the pro-Russian militia in Donetsk. At the time, I thought it might be hard to convince people it mattered.

Then the #UkraineWar started.

@Cen4infoRes https://www.info-res.org/post/report-the-separatist-s-guide-to-circumventing-sanctions