Research reports

Vendor, government and researcher reports that CyberSIXT links from its coverage, with their publishers and topics.

1,233 reports388 publishers50 added in the past week

601–620 of 1,024 reports · page 31 of 52 · Clear filters

Added Fri 1 May

scmagazine.com · Web page · Published 9 Sep
Significant ransom payment by major Iranian IT firm underway
Major Iranian IT vendor Tosan has been providing ransom payments on an installment basis following a significant cyberattack by the IRLeaks threat operation last month, which was reported to have compromised data from nearly 70% of the country's active credit…
Ransomware Original (new tab)
Group-IB · Web page · Added 1 May
Secrets of Cobalt
In June 2016, the first attack conducted by the Cobalt group was tracked at a large Russian bank, where hackers attempted to steal money from ATMs. The attackers infiltrated the bank’s network, gained control over it, compromised the domain administrator’s…
Original (new tab)
Group-IB · Web page · Added 1 May
PerSwaysion Campaign
In the first quarter of 2020, Group-IB Threat Intelligence team received a lead concerning corporate email account compromise of an Asia-based company. A joint investigation of Group-IB DFIR and Threat Intelligence teams reveals an uptrending phishing…
Phishing Original (new tab)

Added Wed 29 Apr

massarobi.wordpress.com · PDF · Added 29 Apr
spotting-the-adversary-with-windows-event-log-monitoring.pdf
Original (new tab)
FBI IC3 · PDF · Added 29 Apr
260108.pdf
Codes in Spearphishing Campaigns Targeting U.S. Entities Summary The Federal Bureau of Investigation (FBI) is releasing this FLASH to alert NGOs, think tanks, academia, and other foreign policy experts with a nexus to North Korea of evolving tactics employed…
State-sponsored Original (new tab)
JPCERT/CC · PDF · Added 29 Apr
PowerPoint Presentation
Unmasking HiddenFace MirrorFace’s most complex backdoor yet Dominik Breitenbacher Malware Researcher Unmasking NOOPDOOR MirrorFace’s most complex backdoor yet Dominik Breitenbacher Malware Researcher Dominik Breitenbacher • Malware researcher @ ESET since…
State-sponsored Malware Original (new tab)
Palo Alto Networks · Web page · Added 29 Apr
2026 Unit 42 Global Incident Response Report
We see four major trends that will shape the threat landscape for 2026. First, AI has become a force multiplier for threat actors. It compresses the attack lifecycle, from access to impact, while introducing new vectors. This speed shift is measurable: in…
Original (new tab)
Unit 42 · Web page · Published 16 Mar
Iranian Cyber Threat Evolution: From MBR Wipers to Identity Weaponization
Recent cyberattacks attributed to Iranian threat actors extend beyond typical network disruption. Rather than an isolated incident of sabotage, this type of attack sits within a broader context defined by Iran's reliance on asymmetric retaliation and…
Malware Original (new tab)
secureauth.com · Web page · Added 29 Apr
Build an iOS App Using OAuth 2.0 and PKCE
Learn how to create an iOS application to authenticate user via OIDC protocol using the OAuth Proof Key for Code Exchange (PKCE) flow. Overview In this tutorial, we will explore a simple iOS application to authenticate user utilizing OIDC with authorization…
Mobile Original (new tab)
Koi · Web page · Added 29 Apr
GlassWorm Goes Native: Same Infrastructure, Hardened Delivery
GlassWorm is back. Again. Since we first exposed this campaign in October, we've seen two waves, over 45,000 victims, and one attacker who won't quit. After our last disclosure, things went quiet for a few weeks. Then, on November 22, a familiar Solana wallet…
Original (new tab)
broadcom.com · Web page · Added 29 Apr
SystemBC (Coroxy) continuous activities
Source: https://www.broadcom.com/support/security-center/protection-bulletin/systembc-coroxy-continuous-activities
Original (new tab)
Microsoft · Web page · Added 29 Apr
Advanced security audit policy settings - Windows 10
The audit events that these settings generate. The security audit policy settings under Security Settings\Advanced Audit Policy Configuration can help your organization audit compliance with important business-related and security-related rules by tracking…
Original (new tab)
Kroll · Web page · Published 19 Jan
Inside the SYSTEMBC Command-and-Control Server
Throughout Q2 and Q3 2023, Kroll has observed an increased use of the malicious “SYSTEMBC” tool to maintain access in a compromised network. SYSTEMBC was first observed in the wild in 2018 with its core functionality revolving around its ability to act as…
Original (new tab)
ESET · Web page · Added 29 Apr
MuddyWater: Snakes by the riverbank
ESET researchers have identified new MuddyWater activity primarily targeting organizations in Israel, with one confirmed target in Egypt. MuddyWater, also referred to as Mango Sandstorm or TA450, is an Iran-aligned cyberespionage group known for its…
State-sponsored Malware Original (new tab)
breakdev.org · Web page · Published 22 Nov
Evilginx 2.2 - Jolly Winter Update
Tis the season to be phishing! I've finally found some free time and managed to take a break to work on preparing a treat for all of you phishing enthusiasts out there. Just in time for the upcoming holiday season, I present you the chilly Evilginx update.…
Phishing Original (new tab)
Microsoft · Web page · Added 29 Apr
Audit Policy - Windows 10
Microsoft Build 2026 June 2-3, 2026 Go deep on real code and real systems in San Francisco and online Learn more We're no longer updating this content regularly. Check the Microsoft Product Lifecycle for information about how this product, service, techn
Original (new tab)
CrowdStrike · Web page · Added 29 Apr
Response When Minutes Matter: Rising Up Against Ransomware
This blog describes a recent incident that highlights the CrowdStrike Falcon® Complete™ team’s ability to act as an extension of a customer’s security team to quickly detect, triage and contain an active attacker before it was able to achieve its goal. In…
Ransomware Original (new tab)
Fortinet · Web page · Added 29 Apr
Recent Cyber Attacks: Major Incidents & Key Trends
Recent cyberattacks reflect that threat actors are no longer relying on isolated exploits. They are combining several tactics, like automation and social engineering, to achieve maximum impact. Here are a few cybersecurity trends that define how cyber risk…
Vulnerabilities Original (new tab)
redhat.com · Web page · Added 29 Apr
Chapter 7. System Auditing
The Linux Audit system provides a way to track security-relevant information on your system. Based on pre-configured rules, Audit generates log entries to record as much information about the events that are happening on your system as possible. This…
Original (new tab)
CrowdStrike · Web page · Added 29 Apr
What is a Downgrade Attack?
Maintaining good cybersecurity means protecting against multiple kinds of attack. One of these attack types is called a “downgrade attack.” This form of cryptographic attack is also called a “version rollback attack” or a “bidding-down attack.” In a downgrade…
Original (new tab)

Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.