threat-actors
Evolution of Threat Actors in 2024 and Predictions for 2025
Threat actors increasingly leveraged advanced technologies such as artificial intelligence (AI) and machine learning to enhance their attacks.
ransomware
Lynx and Cicada3301: Evolving Ransomware Threats in 2024
The threat actors "Lynx" and "Cicada3301" have been active in recent cyber campaigns, employing sophisticated tactics, techniques, and procedures (TTPs) to target various sectors. Lynx, a rebranding of the INC ransomware, has been particularly active in ..
russia
Navigating the Cyber Threat Landscape: Protecting Educational Institutions in 2025
Russia targets these institutions due to geopolitical tensions, employing tactics like spear-phishing, ransomware, and supply chain attacks. China focuses on cyber espionage, aiming to steal intellectual property and research data through advanced persistent threats and credential harvesting.
vendors
Enhancing Cybersecurity Through Effective Vendor Management Programs
Vendor management programs are essential for organizations to manage risks associated with third-party vendors. These programs typically include components such as security questionnaires, contract language...
breaches
Top 5 Most Impactful Cybersecurity Incidents in the US for 2024: Long-Term Economic Impact Analysis
This report identifies the top 5 most impactful incidents: the LoanDepot ransomware attack, the Snowflake data breach, the CDK Global ransomware attack, the Change Healthcare ransomware attack, and the Volt Typhoon infiltration of US critical infrastructure.
badbox
Disruption of BADBOX Malware: Long-Term Impacts on PEACHPIT Botnet Operations
BADBOX, a sophisticated malware operation originating from China, was preloaded on over 30,000 internet-connected devices, including digital picture frames, media players, and low-cost Android devices.
vulnerabilities
Top Vulnerabilities Exploited by Threat Actors: December 2024 Analysis
These vulnerabilities include remote code execution (RCE) flaws in Windows components such as Hyper-V, Remote Desktop Services, and the Local Security Authority Subsystem Service (LSASS)
scattered-spider
Disrupting 'Scattered Spider': Key Arrests and Their Impact on Cybercrime
law enforcement agencies have made significant strides in disrupting the operations of the 'Scattered Spider' cybercrime group, also known as 0ktapus, UNC3944, and Scatter Swine..
auto
Emerging Cybersecurity Threats in Software-Defined Vehicles: Trends, Attack Vectors, and Strategic Recommendations
Software-defined vehicles (SDVs) are revolutionizing the automotive industry by integrating advanced software and connectivity features that enhance vehicle functionality and user experience.
china
GhostSpider: The Stealthy Modular Malware Threatening Global Telecommunications and Government Sectors
The investigation into 'GhostSpider' malware reveals it as a sophisticated, multi-modular backdoor used by the Chinese APT group known as Salt Typhoon..
apt28
GruesomeLarch: Unveiling the Sophisticated Cyber-Espionage Tactics of a Russian Nation-State Actor
The threat actor known as "GruesomeLarch," also publicly recognized as Fancy Bear (APT28), has been identified as a sophisticated Russian nation-state group involved in cyber-espionage activities.
typhoon
Threat Hunting Guide for Typhoon Threat Actors: A Comprehensive Handbook for Operations Teams
Typhoon actors employ "living-off-the-land" (LOTL) techniques, leveraging legitimate system tools like PowerShell, Windows Management Instrumentation (WMI), and Remote Desktop Protocol (RDP) for malicious purposes.