ransomware
The threat actors "Lynx" and "Cicada3301" have been active in recent cyber campaigns, employing sophisticated tactics, techniques, and procedures (TTPs) to target various sectors. Lynx, a rebranding of the INC ransomware, has been particularly active in ..
apt
Russia targets these institutions due to geopolitical tensions, employing tactics like spear-phishing, ransomware, and supply chain attacks. China focuses on cyber espionage, aiming to steal intellectual property and research data through advanced persistent threats and credential harvesting.
vendors
Vendor management programs are essential for organizations to manage risks associated with third-party vendors. These programs typically include components such as security questionnaires, contract language...
breaches
This report identifies the top 5 most impactful incidents: the LoanDepot ransomware attack, the Snowflake data breach, the CDK Global ransomware attack, the Change Healthcare ransomware attack, and the Volt Typhoon infiltration of US critical infrastructure.
badbox
BADBOX, a sophisticated malware operation originating from China, was preloaded on over 30,000 internet-connected devices, including digital picture frames, media players, and low-cost Android devices.
vulnerabilities
These vulnerabilities include remote code execution (RCE) flaws in Windows components such as Hyper-V, Remote Desktop Services, and the Local Security Authority Subsystem Service (LSASS)
scattered-spider
law enforcement agencies have made significant strides in disrupting the operations of the 'Scattered Spider' cybercrime group, also known as 0ktapus, UNC3944, and Scatter Swine..
auto
Software-defined vehicles (SDVs) are revolutionizing the automotive industry by integrating advanced software and connectivity features that enhance vehicle functionality and user experience.
china
The investigation into 'GhostSpider' malware reveals it as a sophisticated, multi-modular backdoor used by the Chinese APT group known as Salt Typhoon..
apt28
The threat actor known as "GruesomeLarch," also publicly recognized as Fancy Bear (APT28), has been identified as a sophisticated Russian nation-state group involved in cyber-espionage activities.
typhoon
Typhoon actors employ "living-off-the-land" (LOTL) techniques, leveraging legitimate system tools like PowerShell, Windows Management Instrumentation (WMI), and Remote Desktop Protocol (RDP) for malicious purposes.
iot
The integration of IoT health devices, such as wearable fitness trackers, smart medical devices, and remote monitoring systems, into healthcare systems has significantly enhanced patient care and operational efficiency.
