Research, News, and Perspectives

XDR investigation uncovers PlugX, unique technique in APT attack

Through the Apex One with Endpoint Sensor (iES), we discovered an APT attack wherein an attacker utilized sophisticated techniques in an attempt to exfiltrate sensitive information from a company.

Research Jan 20, 2021

VPNFilter Two Years Later: Routers Still Compromised

We look into VPNFilter, an IoT botnet discovered over two years ago, to see why there are still routers infected by the malware and what else can be done to minimize its potential risks.

Research Jan 19, 2021

Cyber Threats

This Week in Security News - Jan. 15, 2021

January Patch Tuesday Repairs Critical MS Defender RCE Bug and Authorities Take Down World's Largest Illegal Dark Web Marketplace

Expert Perspective Jan 15, 2021

The Top Worry In Cloud Security for 2021

The cloud is an environment full of potential, providing easy access to technologies that weren’t available a decade ago. However, its not always as sunny as it seems. Continue on to read about the top worry in cloud security for the upcoming year.

Expert Perspective Jan 13, 2021

January Patch Tuesday Repairs Critical MS Defender RCE Bug

Microsoft welcomed the first month of 2021 with a total of 83 security updates — which is an uptick from December’s relatively lighter list.

Research Jan 13, 2021

This Week in Security News - Jan 8, 2021

Investigation Launched into Role of JetBrains Product in SolarWinds Hack and TeamTNT Now Deploying DDoS-Capable IRC Bot TNTbotinger

Expert Perspective Jan 08, 2021

Ransomware

Expanding Range and Improving Speed: A RansomExx Approach

RansomExx is a ransomware variant responsible for several high-profile attacks in 2020. We take a look at its current techniques which include the use of trojanized software to deliver malicious payloads and an overall short and fast attack.

Research Jan 06, 2021

An Overview of the DoppelPaymer Ransomware

In early December 2020, the FBI issued a warning regarding DoppelPaymer, a ransomware family that first appeared in 2019. Its activities continued throughout 2020, including incidents that left its victims struggling to properly carry out their operations.

Research Jan 05, 2021

APT & Targeted Attacks

Earth Wendigo Injects JavaScript Backdoor to Service Worker for Mailbox Exfiltration

We discovered a new campaign we named Earth Wendigo that has been targeting several organizations in Taiwan - since May 2019, aiming to exfiltrate emails from targeted organizations via the injection of JavaScript backdoors to a webmail system that is widely used in Taiwan.

Research Jan 05, 2021

Privacy & Risks

How to Protect Your Kid’s Privacy While At-Home Learning

Many kids now have school-supplied computer equipment away from the school network. However, with this come privacy and security concerns. Some are easy to avoid, but others need some modifications to ensure safety.

Research Dec 22, 2020

Research, News, and Perspectives

Trending Topics