9 reports
In the rapidly evolving landscape of cyber threats, the importance of robust and sophisticated cybersecurity measures cannot be overstated. One of the key initiatives in this domain is TIBER-EU –…
A recent zero-day vulnerability in Salesforce's software was exploited by threat actors to phish Facebook credentials. This incident was first reported by Guardio Labs, who detected a…
The issue lies in the "display name" of an email's "From" header in Outlook. It appears that this display name can be manipulated to misrepresent the actual sender of the email, making phishing…
Insider threats are a significant cybersecurity risk that originates from within an organisation. These threats can come from current or former employees, contractors, or anyone else with intimate…
JumpCloud, a US-based enterprise software firm known for its cloud directory platform, recently disclosed a security breach that was part of a highly targeted operation aimed at a select group of…
SmokeLoader, also known as Dofoil, is a modular bot used primarily to download other malware onto a compromised system. It has been in operation since at least 2011 and has been used in various…
Zeus, known as Zbot, is a notorious Trojan horse malware package that predominantly targets Microsoft Windows. The primary aim of Zeus has been to steal sensitive data, especially banking…
Operation Aurora: a modern CTI deep dive into the 2009–2010 intrusion set Operational CTI, incident response, nation-state tradecraft, CVE-2010-0249, Internet Explorer, Hydraq, Elderwood, IP…
In 2014, JPMorgan Chase, one of the world's leading financial institutions, suffered one of the most significant data breaches in history. The attackers compromised data from 76 million households…
