Evidence-led cyber threat intelligence for defenders. Incident reports, actor profiles and vulnerability analysis — written for the people who have to act on it.
A recent operation against phishing SMS campaigns in the UK, shared via a tweet by Jake from JCyberSec_ ( @JCyberSec_ ) and a LinkedIn post by the Dedicated Card and Payment Crime Unit (DCPCU),…
Ivanti, a leading provider of IT software solutions, has recently addressed a critical zero-day authentication bypass vulnerability in its Endpoint Manager Mobile (EPMM), formerly known as…
APT32, also known as OceanLotus Group, is a Vietnam-based threat group that has been active since at least 2014. This group is known for its sophisticated attacks on several private companies,…
On July 24, 2023, the Norwegian government announced that its ICT platform, used by 12 of its ministries, had been compromised in a cyberattack. The attack was carried out by exploiting a zero-day…
A recent oss-security list post from Tavis Ormandy has brought attention to a use-after-free vulnerability, CVE-2023-20593, in AMD Zen2 processors. [..]
In the digital age, the fight against child abuse has taken on new dimensions. One of the most innovative approaches to this issue is the "Stop Child Abuse - Trace an Object" campaign, a unique…
The UK Further and Higher Education sectors are increasingly becoming targets for cyber-attacks. These attacks range from opportunistic ransomware operations to more sophisticated Advanced…
In the recently released "Threat Intelligence Report 2023" by Nokia, the company provides an in-depth analysis of the current cybersecurity landscape, particularly focusing on telecom networks and…
Managed File Transfer (MFT) solutions are essential tools for businesses to securely transfer sensitive data. However, like any software, they can be vulnerable to exploits if not properly managed…
The Evasive Panda Advanced Persistent Threat (APT) group, also known as BRONZE HIGHLAND and Daggerfly, has been active since at least 2012. This Chinese-speaking APT group has been conducting…
In addition to the articles from Threat Intelligence Report, there have been several other significant developments in the world of cybersecurity over the past week:
