Research reports
TopicAll topics
PublisherAll publishers
- All publishers1,281
- Check Point99
- DataBreaches.net51
- GitHub50
- MITRE ATT&CK44
- Mandiant (Google)33
- Microsoft31
- Group-IB29
- Recorded Future22
- Unit 4221
- ETDA Threat Group Cards20
- Medium20
- Trend Micro20
- CISA18
- ESET17
- Malpedia15
- Team Cymru15
- ANSSI (CERT-FR)13
- Intezer13
- US Department of Justice13
- Cisco Talos12
- FBI IC312
- Virus Bulletin11
- PhishLabs10
- The Hacker News10
- The Record10
- Elastic Security Labs9
- Intrinsec9
- SecurityScorecard9
- Cybernews8
- Kaspersky8
SortNewest added
641–660 of 1,281 reports · page 33 of 65
Added Fri 1 May
Group-IB · Web page · Added 1 May
The Art of Cyberwarfare
In mid-May 2021, experts from SOLAR JSOC and the National Computer Incident Response & Coordination Center (NCIRCC) released a joint report on a series of targeted attacks detected in 2020. According to the report, the attackers targeted Russian federal…
Group-IB · Web page · Added 1 May
MoneyTaker: in pursuit of the invisible
In less than two years, this group has conducted over 20 successful attacks on financial institutions and legal firms in the USA, UK and Russia. The group has primarily been targeting card processing systems, including the AWS CBR (Russian Interbank System)…
Group-IB · Web page · Added 1 May
Silence: Moving into the Darkside
Group-IB has exposed the attacks committed by Silence cybercriminal group. While the gang had previously targeted Russian banks, Group-IB experts also have discovered evidence of the group’s activity in more than 25 countries worldwide. Group-IB has published…
scworld.com · Web page · Published 25 Sep
Austria subjected to pro-Russian DDoS intrusions
More than 40 Austrian organizations had their websites subjected to distributed denial-of-service attacks by pro-Russia hacktivist operations NoName057(16) and OverFlame that have been underway since last week ahead of the country's election on Sunday,…
cisoseries.com · Web page · Published 21 Mar
Cyber Security Headlines – March 21, 2022
CISA, FBI tell satellite communications network owners to watch out for hacks after Ukraine attack This alert forms part of CISA’s “Shields Up” program which responds to potential Russian cyberattacks related to the Ukraine conflict. As part of the defense of…
cisoseries.com · Web page · Published 8 Jan
Cyber Security News: Cyber Trust label, UK deepfake laws, Treasury attack details
In 2023, the White House launched an initiative to add Cyber Trust labels to retail packaging for connected devices. This was compared to the equivalent of Energy Star certification to indicate a consumer baseline of cybersecurity best practices. The FCC…
Group-IB · Web page · Added 1 May
French-speaking gang OPERA1ER APT in Africa
In 2019, Group-IB Threat Intelligence team detected a series of targeted attacks on financial organizations in Africa. Later in 2020, our professionals in collaboration with Orange, managed to piece together the seemingly disparate attacks into a single…
Mandiant (Google) · Web page · Published 23 Apr
How UNC6692 Employed Social Engineering to Deploy a Custom Malware Suite
Google Threat Intelligence Group (GTIG) identified a multistage intrusion campaign by a newly tracked threat group, UNC6692, that leveraged persistent social engineering, a custom modular malware suite, and deft pivoting inside the victim’s environment to…
scmagazine.com · Web page · Published 9 Sep
Significant ransom payment by major Iranian IT firm underway
Major Iranian IT vendor Tosan has been providing ransom payments on an installment basis following a significant cyberattack by the IRLeaks threat operation last month, which was reported to have compromised data from nearly 70% of the country's active credit…
Group-IB · Web page · Added 1 May
Secrets of Cobalt
In June 2016, the first attack conducted by the Cobalt group was tracked at a large Russian bank, where hackers attempted to steal money from ATMs. The attackers infiltrated the bank’s network, gained control over it, compromised the domain administrator’s…
Group-IB · Web page · Added 1 May
PerSwaysion Campaign
In the first quarter of 2020, Group-IB Threat Intelligence team received a lead concerning corporate email account compromise of an Asia-based company. A joint investigation of Group-IB DFIR and Threat Intelligence teams reveals an uptrending phishing…
Added Wed 29 Apr
FBI IC3 · PDF · Added 29 Apr
260108.pdf
Codes in Spearphishing Campaigns Targeting U.S. Entities Summary The Federal Bureau of Investigation (FBI) is releasing this FLASH to alert NGOs, think tanks, academia, and other foreign policy experts with a nexus to North Korea of evolving tactics employed…
JPCERT/CC · PDF · Added 29 Apr
PowerPoint Presentation
Unmasking HiddenFace MirrorFace’s most complex backdoor yet Dominik Breitenbacher Malware Researcher Unmasking NOOPDOOR MirrorFace’s most complex backdoor yet Dominik Breitenbacher Malware Researcher Dominik Breitenbacher • Malware researcher @ ESET since…
Palo Alto Networks · Web page · Added 29 Apr
2026 Unit 42 Global Incident Response Report
We see four major trends that will shape the threat landscape for 2026. First, AI has become a force multiplier for threat actors. It compresses the attack lifecycle, from access to impact, while introducing new vectors. This speed shift is measurable: in…
Unit 42 · Web page · Published 16 Mar
Iranian Cyber Threat Evolution: From MBR Wipers to Identity Weaponization
Recent cyberattacks attributed to Iranian threat actors extend beyond typical network disruption. Rather than an isolated incident of sabotage, this type of attack sits within a broader context defined by Iran's reliance on asymmetric retaliation and…
secureauth.com · Web page · Added 29 Apr
Build an iOS App Using OAuth 2.0 and PKCE
Learn how to create an iOS application to authenticate user via OIDC protocol using the OAuth Proof Key for Code Exchange (PKCE) flow. Overview In this tutorial, we will explore a simple iOS application to authenticate user utilizing OIDC with authorization…
Koi · Web page · Added 29 Apr
GlassWorm Goes Native: Same Infrastructure, Hardened Delivery
GlassWorm is back. Again. Since we first exposed this campaign in October, we've seen two waves, over 45,000 victims, and one attacker who won't quit. After our last disclosure, things went quiet for a few weeks. Then, on November 22, a familiar Solana wallet…
broadcom.com · Web page · Added 29 Apr
SystemBC (Coroxy) continuous activities
Source: https://www.broadcom.com/support/security-center/protection-bulletin/systembc-coroxy-continuous-activities
Microsoft · Web page · Added 29 Apr
Advanced security audit policy settings - Windows 10
The audit events that these settings generate. The security audit policy settings under Security Settings\Advanced Audit Policy Configuration can help your organization audit compliance with important business-related and security-related rules by tracking…
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.