Research, News, and Perspectives

Exploits & Vulnerabilities

This Week in Security News - December 3, 2021

This week, learn about how Squirrelwaffle utilised ProxyLogon and ProxyShell to hack email chains. Also, read on a recent data breach of the Los Angeles Planned Parenthood Network.

Expert Perspective Dec 03, 2021

Save to Folio

Expert Perspective Dec 03, 2021

Save to Folio

Vulnerabilities Exploited for Monero Mining Malware Delivered via GitHub, Netlify

We looked into exploitation attempts we observed in the wild and the abuse of legitimate platforms Netlify and GitHub as repositories for malware.

Dec 03, 2021

Save to Folio

Dec 03, 2021

Save to Folio

Compliance & Risks

What to do at AWS re:Invent 2021 - Day 3

Welcome to your complete guide to AWS re:Invent 2021 Day 3, where you will find tips on how to get the most out of your conference experience both in Las Vegas and virtually.

Expert Perspective Dec 01, 2021

Save to Folio

Expert Perspective Dec 01, 2021

Save to Folio

Cloud

Analyzing How TeamTNT Used Compromised Docker Hub Accounts

Following our previous disclosure of compromised Docker hub accounts delivering cryptocurrency miners, we analyse these accounts and discover more malicious actions that you need to be aware of.

Research Dec 01, 2021

Save to Folio

Research Dec 01, 2021

Save to Folio

Cloud

What You Can Do to Mitigate Cloud Misconfigurations

Cloud misconfigurations can become opportunities for cyberattacks or lead to data breaches. Organizations must mitigate them before incurring significant and costly consequences.

Research Nov 30, 2021

Save to Folio

Research Nov 30, 2021

Save to Folio

Cyber Threats

Trend Micro Cloud One Network Security-as-a-Service

Trend Micro, alongside Amazon Web Services, provides the latest in cloud-native deployment options. We have simplified network security, protecting customers across Virtual Private Clouds (VPCs) without needing agents to be installed on instances.

Latest News Nov 29, 2021

Save to Folio

Latest News Nov 29, 2021

Save to Folio

Cyber Threats

AWS re:Invent 2021 Guide: Checklist & Key Sessions

Welcome to your complete guide to AWS re:Invent 2021, where you will find tips on how to get the most out of your conference experience both in Las Vegas and virtually.

Expert Perspective Nov 29, 2021

Save to Folio

Expert Perspective Nov 29, 2021

Save to Folio

Malware

Campaign Abusing Legitimate Remote Administrator Tools Uses Fake Cryptocurrency Websites

We have been tracking a campaign involving the SpyAgent malware that abuses well-known remote access tools (RATs) for some time now. While previous versions of the malware have been covered by other researchers, our blog entry focuses on the malicious actor’s latest attacks.

Research Nov 29, 2021

Save to Folio

Research Nov 29, 2021

Save to Folio

Ransomware

BazarLoader Adds Compromised Installers, ISO to Arrival and Delivery Vectors

We observed BazarLoader adding two new arrival mechanisms to their current roster of malware delivery techniques.

Nov 23, 2021

Save to Folio

Nov 23, 2021

Save to Folio

Compliance & Risks

COP26 Backs Electric Vehicles to Reduce Climate Change

The 26 United Nations Climate Change Conference pushes for countries of parties to adopt more widespread EV use in order to reduce the looming threats of climate change.

Latest News Nov 23, 2021

Save to Folio

Latest News Nov 23, 2021

Save to Folio