Evidence-led cyber threat intelligence for defenders. Incident reports, actor profiles and vulnerability analysis — written for the people who have to act on it.
A critical vulnerability, designated as CVE-2024-3400, has been identified within the GlobalProtect component of Palo Alto Networks' PAN-OS. This zero-day flaw is classified under CWE-77 (Command…
In a significant development reported by Akamai's Security Intelligence Response Team (SIRT) in late October 2023, heightened malicious activity was detected, indicating the exploitation of…
Incident Overview Sabre Insurance Group, a prominent motor insurer, has recently faced a targeted cyber attack. The attack occurred on 16 November 2023, but was contained effectively by the…
Hunters International is a newly identified ransomware group that has recently come to prominence. This group is particularly notable for its use of code with similarities to the now-defunct Hive…
A critical security flaw in Windows SmartScreen, a component of Windows Defender, has recently been highlighted due to the public release of a proof-of-concept (PoC) exploit. This vulnerability,…
In a recent development within the cyber threat landscape, a Phobos ransomware variant has intriguingly attempted to frame VX-Underground, a respected malware-sharing collective. This situation…
Scattered Spider, also known by other names like Octo Tempest, 0ktapus, and UNC3944, has emerged as a significant threat in the cybersecurity landscape. This ransomware gang is known for its…
The MGM Resorts International, a prominent player in the global hospitality and entertainment industry, experienced a devastating ransomware attack, orchestrated by the cybercriminal group…
In the rapidly evolving landscape of cyber threats, the importance of robust and sophisticated cybersecurity measures cannot be overstated. One of the key initiatives in this domain is TIBER-EU –…
JA3 hashes serve as unique fingerprints for SSL/TLS client-server communications, allowing for the identification of specific parameters used during the handshake process. This tool simplifies the…
UCH Logistics, a leading provider of transport services in the UK, recently experienced a ransomware attack by the Black Basta group. This attack involved the exfiltration of approximately 895 GB…
The recent paper, " You Cannot Escape Me: Detecting Evasions of SIEM Rules in Enterprise Networks " highlights the ongoing battle in cybersecurity between attackers' evasion tactics and the…
