OpenSSH Security Update: Mitigating CVE-2023-38408
OpenSSH, a widely used implementation of the Secure Shell protocol (SSH), has released its latest version, OpenSSH 9.3p2. This update addresses a significant security bug, CVE-2023-38408, which…
Threat intelligence, decoded.
Evidence-led cyber threat intelligence for defenders. Incident reports, actor profiles and vulnerability analysis — written for the people who have to act on it.
// Latest reporting
University Students Targeted by Bioscience Job Scams
In a recent series of campaigns identified by Proofpoint, university students have been targeted with fraudulent job offers purportedly related to bioscience and health entities. These campaigns,…
SophosEncrypt Ransomware Masquerades as Cybersecurity Vendor
In the complex world of cyber threats, it's vital to stay updated on the latest tactics, techniques, and procedures (TTPs) employed by threat actors. Today, we explore a recent…
Critical Vulnerability CVE-2023-3519 in Citrix ADC and Gateway
A critical vulnerability, tracked as CVE-2023-3519 (NVD), has been identified in Citrix ADC and Gateway products. This vulnerability is currently being exploited in the wild and the rate of…
Oracle July 2023 Critical Patch Update: Overview
Oracle has released its July 2023 Critical Patch Update (CPU), which includes a staggering 508 new security patches. This update is significant due to the sheer volume of patches and the critical…
Supply Chain Attack Targeting Pakistani Government Delivers ShadowPad - Trend Micro
A recent investigation by Trend Micro has uncovered a potential supply chain attack targeting the Pakistani government. The attack involves an MSI installer for the Pakistani government app…
Threat Actor Profile: Anonymous Sudan
Anonymous Sudan, a threat actor group that emerged in January 2023, has been making headlines with its global cyberattacks. The group has targeted a wide range of countries and sectors, including…
Unmasking Shadows: How a Cybercriminal Accidentally Revealed His Identity
In a fascinating turn of events, a threat actor known by the online moniker 'La_Citrix' inadvertently exposed their real identity by infecting their own computer with an information stealer. This…
Tools - Cyberchef v10 released
GCHQ, the UK's intelligence, security, and cyber agency, has just announced the release of CyberChef v10. This latest version of the "Cyber Swiss Army Knife" introduces a host of new features,…
FIN8 (Syssphinx): Ransomware Enablement and FortiClient EMS Exploitation
In the ever-evolving landscape of cyber threats, the financially motivated cybercrime group known as FIN8 continues to make waves. Known for their sporadic yet impactful attacks, FIN8 has been…
Exploring TA453's Foray into LNKs and Mac Malware - Proofpoint Report
"Welcome to New York: Exploring TA453's Foray into LNKs and Mac Malware" published by Proofpoint discusses the evolving tactics of TA453, also known as Charming Kitten, APT42, Mint Sandstorm, and…
Inside Job: IT Security Analyst Convicted for Exploiting Ransomware Attack on Oxford Biomedica
Ashley Liles, a 28-year-old former IT security analyst from Letchworth Garden City in Hertfordshire, has been convicted of blackmail and unauthorized access to a computer with intent to commit…