EpicDetect

Hi - Quick post why we made the platform :) epicdetect.io/blogs-and-news…

you don't freeze on day one because you didn't study enough. you freeze because your training never asked you to decide anything. read: epicdetect.io/blogs/why-most… #infosec #SOCanalyst

we built a skill tree for cybersecurity careers. start at "how computers work." branch into detection engineering, malware analysis, system administration. CompTIA A+, Network+, Security+ built in. it's called Atlas. come check it out as we build more. epicdetect.io #cybersecurity #blueteam

😊

Understanding the Windows PE Header and Section Table.

EpicDetect Adventures drops soon. story-driven SOC training. you join a team, triage alerts, analyze emails, hunt through logs. episode by episode, the incident gets worse. it's training that feels like work. the good kind. epicdetect.io #cybersecurity #blueteam

The main driver for an accelerated career in IT is obsessive focus on having a successful IT career. Your Netflix, Fantasy Football, YouTube Influencer addiction must not compete against this 1 focus.

WSL2 is a powerful attacker hideout because it runs as a separate Hyper-V VM, and defenders rarely monitor it. Daniel Mayer explains how attackers pivot into WSL2 and what it took to build tooling that works across WSL2 versions. Read more ⤵️ ghst.ly/45fPUma

Stop chasing static IoCs. 🛡️ Use TTP Analysis in Google TI to hunt smarter with MITRE ATT&CK. #GoogleTIMondays #ThreatHunting

Daily Security+ practice question! Try not to Google It! What documentation must be updated when security-related changes are made? #comptia #study #epicdetect

After over a year of work my second course with @_ZeroPointSec is now available! In it students will apply low level windows tradecraft in the writing of Cobalt Strike’s UDRL and Sleepmask components. To celebrate, the BOF course is 25% off thru Jan 12th! zeropointsecurity.co.uk/course/udrl-sl…

The gap between you and a six-figure IT role isn’t 12 months—it’s 90 days of focused consistency. Stack certs. Build labs. Apply deliberately. Stay steady and momentum carries you the rest of the way.

Blogs are up!

Microsoft is working on a new Teams security feature that will analyze suspicious traffic with external domains to help IT administrators tackle potential security threats. bleepingcomputer.com/news/security/…

Not for tourists. EpicDetect is for people who want to grind their way into defensive cybersecurity. The content’s still growing - but the signal is already there. Build real skills. Get in early. → epicdetect.io

⚠️ @CISAgov issued3️⃣NEW public #ICS Advisories. These advisories provide info about current security issues, vulnerabilities, & exploits surrounding ICS. More at cisa.gov/news-events/al…

Malicious VSCode extensions on Microsoft's registry drop infostealers - @billtoulas bleepingcomputer.com/news/security/… bleepingcomputer.com/news/security/…

Update on CVE-2025-66478 (React2Shell): An npm package has been released to scan and update affected Next.js apps. Use `npx fix-react2shell-next` to update to patched versions. All users should update as soon as possible. More details our blog: nextjs.org/cve-2025-66478

@_r_netsec The VSCode Marketplace basically doesn’t even scan extensions. It’s just a hash check.

Publishing Malicious VS Code Extensions: Bypassing VS Code Marketplace Analysis and the Insecurity of OpenVSX (Cursor AI/Windsurf) mazinahmed.net/blog/publishin…

Ivanti warns of critical Endpoint Manager code execution flaw - @serghei bleepingcomputer.com/news/security/… bleepingcomputer.com/news/security/…

So far, we've seen a lot of adoption of our procedural exam simulator for CompTIA exam prep. We've decided to give 50% off the annual plan (to all of EpicDetect Premium) so folks can stick to their New Year's Resolutions before they even start!