Research reports
TopicAll topics
PublisherAll publishers
- All publishers1,024
- Check Point95
- DataBreaches.net51
- MITRE ATT&CK44
- GitHub29
- Group-IB29
- Microsoft29
- ETDA Threat Group Cards20
- Medium20
- Trend Micro19
- Unit 4219
- Mandiant (Google)18
- Malpedia15
- Intezer13
- US Department of Justice12
- ESET11
- PhishLabs10
- ANSSI (CERT-FR)8
- Cisco Talos8
- Elastic Security Labs8
- Proofpoint8
- BleepingComputer7
- Cybernews7
- Kaspersky7
- The Record7
- Zscaler7
- AhnLab6
- Fortinet6
- IBM X-Force6
- Infosec Institute6
- NIST6
SortNewest added
561–580 of 1,024 reports · page 29 of 52 · Clear filters
Added Tue 5 May
wiwo.de · Web page · Published 10 May
Emotet: Wie das riesige Hacker-Netzwerk lahmgelegt wurde
4. Emotet-Netzwerk: Der Coup, der eines der gefährlichsten Hacker-Netze der Welt lahmlegte Der schwere Schlag der Ermittler gegen eine der gefährlichsten Cybercrime-Plattformen weltweit lähmte die Hacker über Monate. Nun werden die Hacker wieder aktiv.…
cylance.com · Web page · Added 5 May
Ending Cyber Risk with Aurora Endpoint Security - Arctic Wolf
Arctic Wolf®, the leader in security operations, has acquired Cylance, a pioneer of AI-based endpoint security. With this acquisition, Arctic Wolf ushers in a new era of simplicity and efficacy to the endpoint security market that will deliver the security…
Group-IB · Web page · Added 5 May
Cybercriminal greeners from Iran attack companies worldwide for financial gain
Group-IB, a global threat hunting and intelligence company headquartered in Singapore, has detected financially motivated attacks carried out by Iranian newbie threat actors in June. The attackers used Dharma ransomware and a mix of publicly available tools…
tesorion.nl · Web page · Added 5 May
Tesorion: Your Partner in Comprehensive Cybersecurity Solutions
Tesorion is a multidisciplinary cybersecurity company with 100% focus on four key security disciplines: Security Monitoring, Offensive Security, Security Advisory, and Incident Response. Our Managed Detection & Response (MDR) service and Tesorion Security…
Group-IB · Web page · Added 5 May
Godfather Trojan - mobile banking malware that is impossible to refuse
The Android banking Trojan Godfather is currently being utilized by cybercriminals to attack users of popular financial services across the globe. Godfather is designed to allow threat actors to harvest login credentials for banking applications and other…
Check Point · Web page · Published 20 May
Bad Karma, No Justice: Void Manticore Destructive Activities in Israel
Void Manticore is an Iranian threat actor affiliated with the Ministry of Intelligence and Security (MOIS). They carry out destructive wiping attacks combined with influence operations. The threat actor operates several online personas, with the most…
Medium · Web page · Published 25 May
SocGholish Campaigns and Initial Access Kit
SocGholish AKA FAKEUPDATES was first reported in 2017. While the initial analysis and reporting did not gain much attention, over time the actor(s) behind the activity continued to expand and develop their operations. Partnering with Evil Corp, the FAKEUPDATE…
Added Sun 3 May
BleepingComputer · Web page · Published 14 Jun
WestJet investigates cyberattack disrupting internal systems
WestJet, Canada's second-largest airline, is investigating a cyberattack that has disrupted access to some internal systems as it responds to the breach. "WestJet is aware of a cybersecurity incident involving internal systems and the WestJet app, which has…
BleepingComputer · Web page · Published 11 Oct
Nemty 1.6 Ransomware Released and Pushed via RIG Exploit Kit
The RIG exploit kit is now pushing a cocktail of malware that includes a new variant of the Nemty Ransomware. First spotted by exploit kit researcher mol69, a malvertising campaign is redirecting users to the RIG exploit kit to target enterprise users who are…
Sysdig · Web page · Added 3 May
REPORT. 2023 Global Cloud Threat Report
WEBINAR. DevOps Security, Monitoring and Compliance with OpenShift and Sysdigvideo Cloud SecurityOpenshiftRed HatSysdig Secure GUIDE. Continuous Security for AWS Cloud and Containerspdf AWSCloud SecuritySysdig SecureCloud Monitoring GUIDE. 5 Steps to Securing…
Medium · Web page · Published 21 May
Winnti: More than just Windows and Gates
The Winnti malware family was first reported in 2013 by Kaspersky Lab¹. Since then, threat actors leveraging Winnti malware have victimized a diverse set of targets for varied motivations. While the name ‘Winnti’ in public reporting was previously used to…
cobaltstrike.com · Web page · Added 3 May
User-driven Web Drive-by Attacks
Cobalt Strike makes several tools to setup web drive-by attacks available to you. To quickly start an attack, navigate to Attacks and choose one of the following option: Java Signed Applet Attack This attack starts a web server hosting a self-signed Java…
securityonline.info · Web page · Published 28 Oct
Shahid Hemmat Hackers: $10M Reward Offered by US
The US Department of State has announced a reward of up to $10 million for information leading to the identification or location of individuals engaged in malicious cyber activities against US critical infrastructure under the direction of foreign…
Added Sat 2 May
app.box.com · Web page · Added 2 May
Inexsmar: An unusual DarkHotel campaig
FOR MORE INFORMATION VISIT: enterprise.bitdefender.com Bitdefender is a global security technology company that delivers solutions in more than 100 countries through a network of value-added alliances, distributors and reseller partners. Since 2001,…
Added Fri 1 May
app.box.com · Web page · Added 1 May
UAC-0056 cyberattack on Ukrainian authorities using GraphSteel and GrimPlant malware
The Governmental Computer Emergency Response Team of Ukraine CERT-UA received information on the distribution of e-mails on the topic "Wage arrears" among government agencies of Ukraine. Attached to the letter is the document "Wage arrears.xls", which…
app.box.com · Web page · Added 1 May
North Korea-linked APT attack found disguised as a digital asset wallet service customer center
Detailed content body title North Korea-linked APT attack found disguised as a digital asset wallet service customer center! Malware analysis report by pill 4 2022. 2. 16. 14:55 main text Hello? This is the East Security Security Response Center (ESRC). A…
ClearSky · Web page · Published 6 Jun
Iranian APT group ‘MuddyWater’ Adds Exploits to Their Arsenal
In recent months, there has been considerable unrest in the Iranian cybersphere. Highly sensitive data about Iranian APT groups were leaked, exposing abilities, strategies, and attack tools. The main medium for this leak was a telegram channel. The first leak…
The Record · Web page · Published 17 Dec
City of Liege, Belgium hit by ransomware
Liege, the third biggest city in Belgium, has suffered today a ransomware attack that has disrupted the municipality's IT network and online services. Following the attack, most of the city's civil status and population services are down, Liege officials said…
The Record · Web page · Published 14 Mar
Amazon-owned Ring denies ‘ransomware event’ following darknet listing
The smart doorbell and security camera company Ring has denied that it suffered a ransomware attack after the company was listed on a prominent ransomware gang’s extortion site. The ALPHV ransomware group, also known as BlackCat, added the listing for Ring to…
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.