Penetration Testing

APRIL 7, 2024

In a joint report by Proofpoint’s Threat Research team and Team Cymru, a potent new malware dubbed “Latrodectus” has been exposed.

Penetration Testing 90

Penetration Testing Malware 90

Digital Shadows

DECEMBER 14, 2023

The ReliaQuest Threat Research Team reveals predictions about prominent cyber threats in 2024, to help cybersecurity professionals prioritize and assign resources.

Cyber threats 113

Cyber threats Cybersecurity Artificial Intelligence Ransomware 113

Security Boulevard

APRIL 23, 2024

Our Threat Labs recently exposed a highly sophisticated malware operation known as “GuptiMiner ”, which targets corporate networks specifically. Our team of experts got into research mode right away! The post Leading the charge against GuptiMiner appeared first on Security Boulevard.

Malware 62

Malware 62

Security Boulevard

MARCH 7, 2024

The Sysdig Threat Research Team (TRT) discovered that a threat actor is leveraging an open-source network mapping tool called SSH-Snake for malicious activities. This tool utilizes SSH credentials found on the compromised systems to propagate itself across networks.

Network Security 67

Network Security Engineering Cyber threats Malware 67

Anton on Security

DECEMBER 15, 2022

Q: If not called SOC, would you like to share what you have named the team? Please don’t say “XDR team”, if at all possible :-) Q: The “modern SOC” looks great on paper, but it’s harder to find analysts who have necessary skills to focus on threats when you have to deal with attrition.

Engineering 312

Engineering Risk Technology Information Security 312

Krebs on Security

OCTOBER 18, 2023

New research shows the attackers behind one such scheme have developed an ingenious way of keeping their malware from being taken down by security experts or law enforcement: By hosting the malicious files on a decentralized, anonymous cryptocurrency blockchain. Previously, the group had stored its malicious update files on Cloudflare, Guard.io

Scams 269

Scams Malware Cryptocurrency Hacking 269

Security Boulevard

JANUARY 19, 2024

Pass-The-Cookie (PTC), also known as token compromise, is a common attack technique employed by threat actors in SaaS environments. In the past, Obsidian’s Threat Research team noted a pattern where most PTC attacks focused on stealing the identity provider (IdP) primary authentication cookie.

Authentication 122

Authentication 122

Security Boulevard

APRIL 10, 2024

Today, we’re proud to announce our Eclypsium Automata binary analysis system, which replicates the knowledge and tooling used by our expert human security research team. This blog post describes the reasons why Automata fills a crucial gap in defenses and how it works to detect previously unknown threats and zero-day vulnerabilities.

62

62

Digital Shadows

JANUARY 18, 2024

Our Threat Research team outlines how valid account compromise can impact your organization, what ReliaQuest is doing, and what steps you can take to keep your organization secure.

Accountability 98

Accountability Authentication 98

Penetration Testing

DECEMBER 11, 2023

In the shadowy world of cyber threats, PlugX stands out as a sophisticated and insidious malware, leaving a digital trail of espionage and evasion. Recently, the Splunk Threat Research Team (STRT) unraveled the mystery... The post PlugX malware: The Enigma of Cyber Espionage Unveiled appeared first on Penetration Testing.

Penetration Testing 108

Penetration Testing Malware Cyber threats 108

Security Affairs

DECEMBER 24, 2023

Video game publisher Ubisoft is investigating reports of an alleged data breach after popular researchers shared evidence of the hack. Ubisoft , the popular video game publisher, is examining reports of a potential data breach following the disclosure of evidence by prominent researchers vx-underground.

Data breaches 120

Data breaches Hacking Mobile Ransomware 120

Security Affairs

APRIL 9, 2024

Researchers discovered a sophisticated multi-stage attack that leverages ScrubCrypt to drop VenomRAT along with many malicious plugins. Fortinet researchers observed a threat actor sending out a phishing email containing malicious Scalable Vector Graphics (SVG) files.

Engineering 102

Engineering Phishing Malware Hacking 102

Penetration Testing

MARCH 16, 2024

A cybersecurity research team has shaken the Bluetooth world at the RootedCon Madrid 2024 conference.

Penetration Testing 110

Penetration Testing Cybersecurity 110

The Hacker News

AUGUST 31, 2023

How frequently do threat actors target businesses and governments around the world? The BlackBerry® Threat Research and Intelligence Team recently analyzed 90 days of real-world data to answer these questions. How often do cyberattacks happen?

Cyber Attacks 113

Cyber Attacks Government 113

Digital Shadows

FEBRUARY 29, 2024

Learn to safeguard against browser credential dumping with effective detection and prevention tips from our ReliaQuest Threat Research team.

70

70

Security Affairs

DECEMBER 27, 2023

Researchers warn of attacks against poorly managed Linux SSH servers that mainly aim at installing DDoS bot and CoinMiner. Researchers at AhnLab Security Emergency Response Center (ASEC) are warning about attacks targeting poorly managed Linux SSH servers, primarily focused on installing DDoS bots and CoinMiners.

DDOS 122

DDOS Passwords Firewall Accountability 122

The Hacker News

JUNE 4, 2023

An unknown cybercrime threat actor has been observed targeting Spanish- and Portuguese-speaking victims to compromise online banking accounts in Mexico, Peru, and Portugal.

Banking 126

Banking Accountability Cybercrime 126

Tech Republic Security

APRIL 24, 2017

See how cybercriminals craft collective attention threats--and how university researchers plan to get the word out before attacks start.

93

93

Security Affairs

OCTOBER 16, 2023

Researchers uncovered an ongoing campaign abusing popular messaging platforms Skype and Teams to distribute the DarkGate malware. From July to September, researchers from Trend Micro observed a malicious campaign DarkGate campaign abusing instant messaging platforms to deliver a VBA loader script to victims.

Malware 116

Malware Cryptocurrency Accountability Cybercrime 116

Security Affairs

JANUARY 22, 2024

Cybersecurity researcher Bob Dyachenko and CyberNews researchers discovered the largest data leak ever discovered. Our team is working hard to update the tool and provide you with means to check if your data was exposed in the MOAB. While the team identified over 26 billion records, duplicates are also highly likely.

Identity Theft 132

Identity Theft Data breaches Accountability Phishing 132

Penetration Testing

FEBRUARY 5, 2024

Nevada Ransomware, identified by Resecurity’s threat research and intelligence team, is rapidly gaining notoriety for its advanced functionality and enticing affiliate program.

Penetration Testing 81

Penetration Testing Ransomware Malware 81

Security Affairs

JANUARY 8, 2024

The Cybernews research team believes that the sensitive data was accessible for 15 months. Leaving these files open to anyone exposes critical data and provides threat actors with various attack options. According to the team, the first time the env. The team also discovered credentials for MySQL and Redis databases.

Government 131

Government Identity Theft Social Engineering Encryption 131

Security Boulevard

SEPTEMBER 6, 2023

The threat landscape has never been more challenging for CISOs and security teams than in 2023. The post Threat Intelligence Analytics: Making the Most of Your CTI Program appeared first on Security Boulevard.

CISO 109

CISO Cyber threats Ransomware Risk 109

The Hacker News

JANUARY 25, 2024

The 2023/2024 Axur Threat Landscape Report provides a comprehensive analysis of the latest cyber threats. The information combines data from the platform's surveillance of the Surface, Deep, and Dark Web with insights derived from the in-depth research and investigations conducted by the Threat Intelligence team.

Cyber threats 74

Cyber threats Surveillance 74

Duo's Security Blog

FEBRUARY 21, 2024

For the curious, the original Duo Labs was a team of amazing security researchers, tinkerers, and thinkers that published their findings, experiments, and explorations on the Duo Labs site. Perhaps most famously, the team sent a phone equipped with Duo mobile into space — attempting to complete a Duo push from 90,000 feet.

Authentication 89

Authentication Engineering Mobile Internet 89

SecureBlitz

FEBRUARY 20, 2024

The news, initially reported by Cybereason's Nocturnus team and confirmed by multiple security researchers, highlights a concerning trend in the ever-evolving landscape of cyber threats.

Malware 82

Malware Cyber threats Cybersecurity 82

SecureWorld News

APRIL 11, 2024

The Raspberry Robin malware, a heavily obfuscated Windows worm first identified in late 2021, has become one of the most prevalent threats facing enterprises today. According to HP's Threat Research Team , threat actors have recently been delivering Raspberry Robin through malicious Windows Script Files (WSF).

Malware 81

Malware IoT Ransomware Manufacturing 81

eSecurity Planet

FEBRUARY 2, 2024

Teslas have plenty of vulnerabilities, as cybersecurity researchers have recently discovered. While Teslas aren’t the typical business IoT device, their connection to the internet makes them a cyber threat as much as your business’s other IoT technology. But as demonstrated last week, the vehicles are still a hazard.

Hacking 117

Hacking IoT Firmware Cybersecurity 117

The Hacker News

JANUARY 26, 2024

The BlackBerry Research and Intelligence Team attributed the activity to an unknown Latin American-based financially motivated threat actor. Mexican financial institutions are under the radar of a new spear-phishing campaign that delivers a modified version of an open-source remote access trojan called AllaKore RAT.

Malware 90

Malware Phishing 90

Security Affairs

OCTOBER 12, 2023

The researchers have created the tool to help cybersecurity experts in their daily jobs by providing real-time updates and actionable insights. By aggregating and consolidating this data, Ransomlooker provides real-time updates and actionable insights to its users, helping them stay one step ahead of potential threats.”

Ransomware 135

Ransomware Internet Internet Hacking 135

Security Boulevard

DECEMBER 19, 2023

New, undetectable attacks called zero-hour threats are the current danger for cybercriminals. Over the past 30 days, the Menlo Labs research team has detected over 11,000 zero-hour phishing threats across our install base, impacting more than half of our customers. On a wider.

Phishing 113

Phishing Risk Cybersecurity CISO 113

Digital Shadows

JUNE 9, 2023

The ReliaQuest Threat Research Team analyzes a recent Chinese APT intrusion into a manufacturing company. Inside, the full story plus mitigations.

Manufacturing 97

Manufacturing 97

Penetration Testing

MARCH 28, 2024

SonicWall’s Capture Labs threat research team warns that hackers are actively exploiting a severe security flaw in the popular Progress Kemp Loadmaster application delivery controller.

Penetration Testing 61

Penetration Testing 61

The Hacker News

AUGUST 8, 2023

Cybersecurity researchers have discovered a set of 11 living-off-the-land binaries-and-scripts (LOLBAS) that could be maliciously abused by threat actors to conduct post-exploitation activities. This makes it hard for security teams

Cybersecurity 95

Cybersecurity 95

Security Affairs

OCTOBER 31, 2023

WiHD, a popular torrent tracker specializing in HD movies, inadvertently exposed tens of thousands of its users, the Cybernews research team has recently discovered. However, the Cybernews team discovered a publicly exposed Elasticsearch cluster on WiHD that lacked any password protection. What data was exposed?

Passwords 113

Passwords Accountability Phishing Internet 113

Digital Shadows

JUNE 14, 2023

The ReliaQuest Threat Research Team continues to monitor the site for more updates. On June 14, 2023, Clop named its first batch of victims.

98

98

Security Boulevard

OCTOBER 20, 2023

In recent investigations, the Obsidian Threat Research team has observed multiple instances of cross-tenant impersonation used to establish persistence and escalate user privileges within Okta environments.

Risk 113

Risk 113