Advanced Search
Search Results
2169 total results found
4.5.1.0
FeaturesOpenSSL is now used for TLS communication.This should sidestep issues on older OS versions that are no longer being patched for newer TLS requirements.FixesImproved parsing support for non compliant Authenticode signatures.MD5 Hashesservice.exe = b198...
Web Application 12.25
FeaturesAdded the new AI Firewall Management page found in the Operations tabDLL VisualizationAdded ability to view related module loads for Extortion Responses, Process Creations, Process Injections, and Identity AccessesA new column was added to these pages ...
Middleware 12.25
FeaturesAdded new endpoints for DLL Visualization on the dashboard for viewing related untrusted module loads for Extortion Responses, Process Creations, Process Injections, and Identity AccessesUpdated the Extortion Response and Identity Access endpoints for ...
4.5.1.2
FeaturesDropped legacy certificate validating that relied on builtin, slow Windows libraries.Added ability to keep logs on uninstall.MD5 Hashesservice.exe = fe8a70286926dba3b6277a9cdf446c38 CCRRSecMon.sys (Windows10) = d4e458f3960a7b1c4b6d06ce4d062f1e C...
4.5.2.1
FeaturesBroad release of reports for Fortress AI accessFixesOptimization of Cyber Crucible kernel operations not using Windows APIs to counteract increased latency in some Windows environments by approximately 20%.MD5 Hashesservice.exe = 6ddad1f20f43e8ba799b5...
4.5.2.2
FixesOptimization of Cyber Crucible kernel operations via avoidance of problematic windows event and data bus core OS capabilities.MD5 Hashesservice.exe = a4bfeca13496d47c8b91121a5da2b3b8 CCRRSecMon.sys (Windows10) = 042d39305b91caff229605c3a043a24b C...
4.5.3.0
FeaturesFortressAIAdded notifications when a policy violation is reportedIntegration with Windows Notification CenterAdded a GUI to view policy notification historyAdded simulate modeCyber Crucible CoreConfigurable asynchronous DLL analytics for machines with ...
4.5.3.1
FeaturesFortressAIDetects attempts to bypass policy controls through the use of screenshots.Cyber Crucible CoreSupports reinitializing an agent’s identity without requiring a full redeployment. This fixes situations where a machine with Cyber Crucible installe...
4.5.3.2
FeaturesFortressAINoneCyber Crucible CoreKernel Buffer Operation EnhancementThe driver leverages buffers to temporarily store telemetry that is ultimately sent to the customer dashboard. This activity is distinct from behavioral model population or operations...
What is a fileless (in-memory) attack?
Short answer: A fileless attack is one that never writes a program to disk. The attacker injects malicious code directly into the memory of a legitimate, trusted process and builds their payload there. Because no file is ever created, security tools that scan ...
What is hacker automation, and why does it break traditional defenses?
Short answer: Hacker automation is the use of scripts, AI, and robotic process automation to run every stage of an attack at machine speed. An automated attack can infiltrate a machine, steal data, and delete its own in-memory tools in seconds — far faster tha...
Why do automated attacks target the same locations on every computer?
Short answer: Attackers don't know anything about your specific environment, so their automation is written against locations that exist on virtually every machine — user profile folders, drive letters, and application data directories. That predictability is ...
What is an infostealer, and why is session-token theft so dangerous?
Short answer: An infostealer is malware built to grab digital identity material — passwords, session tokens, API keys, and VPN credentials — and exfiltrate it fast. A stolen session token is dangerous because it often bypasses passwords and multi-factor authen...
What are Living-off-the-Land (LotL) attacks, and why does application whitelisting fail against them?
Short answer: Living-off-the-Land attacks use software that is already installed and already trusted — system utilities, administrative tools, browsers — rather than introducing new malicious files. Application whitelisting fails because the attacker is operat...
What is a System32 DLL in-memory attack?
Short answer: It's an attack that infects the core Windows code libraries (System32 DLLs) while they are running in memory. Because nearly every application and security tool depends on those libraries to function, compromising them gives an attacker near-tota...
Why doesn't malware always activate in a security testing lab?
Short answer: Attackers design malware to stay dormant unless it receives a validation signal from a live command-and-control (C2) server they control. By the time a sample reaches a malware database, the C2 infrastructure has usually moved — so researchers ar...
How is Cyber Crucible different from EDR, XDR, and MDR?
Short answer: EDR, XDR, and MDR are detection-and-response tools: they observe an attack, generate an alert, and rely on a human or a cloud service to decide what to do. Cyber Crucible is a prevention tool: it decides autonomously on the endpoint and stops the...
Does Cyber Crucible replace my EDR, or work alongside it?
Short answer: Either. Cyber Crucible is designed to run alongside existing EDR, XDR, and MDR tools without conflict, and many customers deploy it that way. It also works as a standalone prevention layer if you decide to reduce your stack. Running alongside you...