React2Shell Exploits, CISA’s Brickstorm Warning, ShadyPanda’s Browser Weaponization

Resources: https://linktr.ee/ReliaQuestShadowTalk

Join host John along with systems security engineer Corey and intelligence analyst Hayden as they discuss:

• Chinese Threat Groups Exploiting the React2Shell Vulnerability (1:18)
• CISA Issues Alert on Persistent Brickstorm Backdoor Attacks (9:05)
• ShadyPanda Hackers Turn Millions of Browsers into Weapons (13:36)
• Storm-0249’s Shift to Targeted EDR Exploitation (20:09)

John Dilgen: Cyber Threat Intelligence Analyst at ReliaQuest, where he specializes in researching cyber threats impacting ReliaQuest customers. With a strong technical background, he previously served as an Incident Response Analyst and Trainer at ReliaQuest.

Corey Carter: Systems Security Engineer at ReliaQuest. A Florida native and former infantryman in the United States Marines, Corey holds a bachelor's degree in computer science with a specialization in information assurance. His experience as a detection researcher, security analyst, and threat hunter at ReliaQuest, combined with his military background, equips him with a unique perspective on cybersecurity challenges.

Hayden Evans: Cyber Threat Intelligence Analyst at ReliaQuest. He has experience in the F3EAD lifecycle and analyzing adversaries' TTPs to operationalize this information. He is also experienced with intrusion response, OSINT investigations, and offensive security.

Chapters

• 0:00 Intro
• 1:18 Chinese Threat Groups Exploiting the React2Shell Vulnerability
• 9:05 CISA Issues Alert on Persistent Brickstorm Backdoor Attacks
• 13:36 ShadyPanda Hackers Turn Millions of Browsers into Weapons
• 20:09 Storm-0429's Shift to Targeted EDR Exploitation
• 31:09 Outro