Anton on Security

JANUARY 10, 2024

“EP8 Zero Trust: Fast Forward from 2010 to 2021” “EP103 Security Incident Response and Public Cloud — Exploring with Mandiant” (2023 season opener!) Top episodes aired in 2023: “EP103 Security Incident Response and Public Cloud — Exploring with Mandiant” (2023 season opener!) and some classics like cloud migration security woes.

Cloud Migration 130

Cloud Migration Government Network Security Risk 130

Security Affairs

MARCH 19, 2022

Google’s Threat Analysis Group (TAG) uncovered a new initial access broker, named Exotic Lily, that is closely affiliated with the Conti ransomware gang. Google’s Threat Analysis Group (TAG) researchers linked a new initial access broker, named Exotic Lily, to the Conti ransomware operation.

Cybercrime 83

Cybercrime Social Engineering Ransomware Engineering 83

Security Affairs

APRIL 8, 2023

Mandiant researchers first observed this affiliate targeting Veritas issues in the wild on October 22, 2022. The CVE-2023-26083 flaw in the Arm Mali GPU driver is chained with other issues to install commercial spyware, as reported by Google’s Threat Analysis Group (TAG) in a recent report.

Backups 80

Backups Spyware Ransomware Education 80

CyberSecurity Insiders

APRIL 5, 2023

According to a study conducted by se-curity firm Mandiant, the group has been in operation since 2018 and has now been tasked with carrying out both espionage and financially motivated attacks such as credential harvesting and social engineering.

Hacking 105

Hacking Social Engineering Cryptocurrency Manufacturing 105

Security Affairs

APRIL 6, 2023

Google’s Threat Analysis Group (TAG) warns of a North Korea-linked cyberespionage group tracked as ARCHIPELAGO. TAG believes that the ARCHIPELAGO group is a subset of a threat actor tracked by Mandiant as APT43. ” reads the analysis published by Google TAG.

Phishing 80

Phishing Media Passwords Malware 80

Security Boulevard

JANUARY 10, 2024

“EP8 Zero Trust: Fast Forward from 2010 to 2021” “EP103 Security Incident Response and Public Cloud — Exploring with Mandiant” (2023 season opener!) Top episodes aired in 2023: “EP103 Security Incident Response and Public Cloud — Exploring with Mandiant” (2023 season opener!) and some classics like cloud migration security woes.

Cloud Migration 64

Cloud Migration Government Network Security Risk 64

eSecurity Planet

MARCH 21, 2022

The final piece of the complicated Mandiant-FireEye split and subsequent FireEye-McAfee merger fell into place today, as McAfee’s cloud security business was officially spun off under the new name of Skyhigh Security. And Mandiant is being acquired by Google. Employees can also tag data as sensitive. XDR and SASE in Focus.

Marketing 129

Marketing Firewall Technology Architecture 129

eSecurity Planet

AUGUST 10, 2023

Additionally, dashboards share data about threat names, any relevant reference URLs, tags, adversary and malware families, and attack IDs. Dashboards clearly state the quantity and types of indicators of compromise (IoCs) and also provide Pulses to quickly summarize threats and their impact.

Internet 72

Internet Internet Cybersecurity Malware 72

CyberSecurity Insiders

FEBRUARY 21, 2023

Google, the internet giant of the world, has confirmed the news after releasing a joint report on this note with Mandiant. Google’s Threat Analysis Group (TAG) has witnessed in its study a 250% raise in the percentage of attacks last year, i.e., 2022.

Cyber Attacks 137

Cyber Attacks Internet Internet Government 137

Malwarebytes

JUNE 21, 2022

Shortly after the advisory, the Chinese state-sponsored hacking group APT41 exploited Log4Shell to compromise at least two US state governments, according to research from Mandiant. Once they gained access to internet-facing systems, APT41 began a months-long campaign of reconnaissance and credential harvesting.

Hacking 87

Hacking Government Software Password Management 87

Cisco Security

AUGUST 28, 2023

Great many thanks go to our friends from NetWitness, Corelight, Palo Alto Networks, Arista and Mandiant and many others, for sharing full access to their technologies to ensure that hunting wasn’t contained to just Cisco equipment and that contextual intelligence could be gathered across different security products. However, it didn’t work.

Wireless 68

Wireless DNS Mobile Technology 68

SecureList

NOVEMBER 14, 2023

In August, TeamT5 and Mandiant, following up on earlier research into exploitation of a remote command injection vulnerability affecting the Barracuda Email Security Gateway (ESG) appliance (CVE-2023-2868) by UNC4841, provided further detail on TTPs used by the threat actor. In July 2023, we privately reported new FiveSys signed variants.

Hacking 102

Hacking Energy and Utilities Media Malware 102