Research reports
TopicAll topics
PublisherAll publishers
- All publishers1,023
- Check Point95
- DataBreaches.net51
- MITRE ATT&CK44
- GitHub29
- Group-IB29
- Microsoft29
- ETDA Threat Group Cards20
- Medium20
- Trend Micro19
- Unit 4219
- Mandiant (Google)18
- Malpedia15
- Intezer13
- US Department of Justice12
- ESET11
- PhishLabs10
- ANSSI (CERT-FR)8
- Cisco Talos8
- Elastic Security Labs8
- Proofpoint8
- BleepingComputer7
- Cybernews7
- Kaspersky7
- The Record7
- Zscaler7
- AhnLab6
- Fortinet6
- IBM X-Force6
- Infosec Institute6
- NIST6
SortNewest added
981–1,000 of 1,023 reports · page 50 of 52 · Clear filters
Added Sun 5 Apr
adsecurity.org · Web page · Published 12 Sep
Kerberos, Active Directory’s Secret Decoder Ring
Kerberos is a protocol with roots in MIT named after the three-headed dog, Cerberus. Named because there are 3 parties: the client, the resource server, and a 3rd party (the Key Distribution Center, KDC). Kerberos can be a difficult authentication protocol to…
akamai.com · Web page · Added 5 Apr
Access Denied
You don't have permission to access "http://www.akamai.com/blog/security-research/2024-php-exploit-cve-one-day-after-disclosure" on this server. Reference #18.4c85655f.1775392664.125db9d5 Source:…
Added Thu 2 Apr
cybleinc.com · Web page · Added 2 Apr
Private Site
Build a website. Sell your stuff. Write a blog. And so much more. Source: https://cybleinc.com/2021/01/20/a-deep-dive-into-patchwork-apt-group/
heimdalsecurity.com · Web page · Published 5 Apr
Powerhost’s ESXi Servers Encrypted with New SEXi Ransomware
IxMetro Powerhost, a Chilean data center and hosting provider, has become the latest target of a cyberattack by a newly identified ransomware group dubbed SEXi. This malicious group successfully encrypted the company’s VMware ESXi servers, which host virtual…
connectwise.com · Web page · Added 2 Apr
Resource Center
Learn how ransomware, trust abuse, and AI reshaped cyber risk and what MSPs must do to stay ahead. eBook The Age of Autonomous Service Delivery Discover how AI-driven agents, clean data, and platform-enabled operations are redefining IT service delivery.
ETDA Threat Group Cards · Web page · Added 2 Apr
Threat Group Cards: A Threat Actor Encyclopedia
Home > List all groups > List all tools > List all groups using tool Janeleiro Tool: Janeleiro Names Janeleiro Category Malware Type Banking trojan, Backdoor, Keylogger, Info stealer, Credential stealer Description (ESET) This new threat, which we’ve named…
MITRE ATT&CK · Web page · Added 2 Apr
Detection of Alarm Suppression, Detection Strategy DET0728
Monitor for loss of network traffic which could indicate alarms are being suppressed. A loss of expected communications associated with network protocols used to communicate alarm events or process data could indicate this technique is being used. This will…
Added Wed 1 Apr
Trend Micro · PDF · Added 1 Apr
Operation Poisoned News: Hong Kong Users Targeted with Mobile Malware via Local News Links
By Elliot Cao, Joseph C. Chen, William Gamazo Sanchez, Lilang Wu, and Ecular Xu Contents 1 Attack Chain 1.1 Watering hole attack tactic 1.2 Infection chain 2 Exploits Analyses 2.1 The JavaScriptCore exploit 2.1.1 Bug triggering 2.1.2 The addrof/fakeobj…
Added Tue 24 Mar
Virus Bulletin · PDF · Added 24 Mar
Google-Calendar-as-C2-infrastructure-a-China-nexus-campaign-with-stealthy-tactics.pdf
GOOGLE CALENDAR AS C2 INFRASTRUCTURE: A CHINA-NEXUS CAMPAIGN... CHEN & HSU 2 VIRUS BULLETIN CONFERENCE SEPTEMBER 2025 ABSTRACT In recent years, China-nexus threat groups have increasingly adopted tactics to obscure their malware footprint, particularly…
Added Thu 5 Mar
ClearSky · PDF · Added 5 Mar
ClearSky report on BadPaw and MeowMeow Russian malware
P a g e 2 ClearSky Team has identified a targeted Russian cyber campaign against Ukraine utilizing two novel malware strains, BadPaw and MeowMeow. The attack chain initiates with a phishing email containing a link to a ZIP archive. Once extracted, an initial…
Added Thu 26 Feb
ANSSI (CERT-FR) · PDF · Added 26 Feb
CERTFR-2019-CTI-009.pdf
Ces dernières semaines, l’ANSSI a observé plusieurs attaques impliquant le déploiement du rançongiciel Clop sur des systèmes d’information en France. Ce code malveillant chiffre les documents présents sur les SI et leur ajoute, suivant les versions,…
CERT Polska · PDF · Added 26 Feb
201106_hamweq.pdf
Botmaster - osoba sprawująca kontrolę nad botnetem poprzez serwer CC. Zombie - zainfekowany komputer pod kontrolą botmastera. Botnet - zbiór komputerów Zombie, połączonych do danego serwera CC. Server CC - serwer poprzez który sprawowana jest kontrola nad…
ANSSI (CERT-FR) · PDF · Added 26 Feb
CERTFR-2020-CTI-012.pdf
Depuis la mi-septembre 2020, l’ANSSI constate une vaste campagne d’attaques informatiques menées à l’aide du rançongiciel Egregor. À date, au moins 69 organisations, dont certaines entreprises françaises auraient été ciblées [1] [2]. En tant que rançongiciel,…
Added Sat 31 Jan
CERT Polska · PDF · Added 31 Jan
Energy Sector Incident Report – 29 December
(CERT.PL) – a team operating within the structures of NASK – National Research Institute, carrying out the tasks of CSIRT NASK, one of the three national‑level CSIRT teams operating within Poland’s national cybersecurity system. The Author of This Report Is:…
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.