Research, News, and Perspectives

APT & Targeted Attacks

The Storybook Approach to MITRE ATT&CK

Read this year’s MITRE Engenuity ATT&CK Evaluations story, which simulates techniques associated with notorious threat groups Carbanak and FIN7 to test solutions' ability to detect and stop APT & Targeted Attacks.

Expert Perspective Apr 20, 2021

Cyber Threats

This Week in Security News - April 16, 2021

April Patch Tuesday Sets Record High for 2021 and Fed Warns Cyber Threats Pose Danger to U.S Economy

Expert Perspective Apr 16, 2021

Malware

XCSSET Quickly Adapts to macOS 11 and M1-based Macs

This latest update details our new research on XCSSET, including the ways in which it has adapted itself to work on both ARM64 and x86_x64 Macs.

Research Apr 16, 2021

Ransomware

Cyber-insurers Endorse Cloud Security Platform

With so many vendors in the market, the Marsh initiative has created the Cyber Catalyst to help IT buyers find the right option for them.

Expert Perspective Apr 15, 2021

Celebrating 3 years of the Cybersecurity Tech Accord

Cybersecurity Tech Accords has grown significantly in the past 3 years, today having 150 signatories across 5 continents, united in the fight against cybercrime.

Expert Perspective Apr 14, 2021

Exploits & Vulnerabilities

April Patch Tuesday Sets Record High for 2021

April’s Patch Tuesday fixes 114 vulnerabilities in various Microsoft products, a slight increase from March’s 89. This is the most vulnerabilities fixed in a month for 2021 to date, as well as a slight increase from the same month last year.

HTTPS over HTTP: A Supply Chain Attack on Azure DevOps Server 2020

We provide the technical details of a supply chain attack on an improperly configured Azure DevOps Server 2020, specifically in the continuous integration and continuous delivery (CI/CD) Pipeline Agent communicating without TLS.

Research Apr 13, 2021

Spam

A Spike in BazarCall and IcedID Activity Detected in March

We discuss the cases of BazarCall and IcedID we observed in March. Both are known for the use of spam to deliver their payloads.

Research Apr 12, 2021

This Week in Security News - April 9, 2021

Microsoft Teams and Zoom Hacked In $1 Million Competition and Preventing Ransomware While Working from Home

Expert Perspective Apr 09, 2021

APT & Targeted Attacks

Iron Tiger APT Updates Toolkit With Evolved SysUpdate Malware

This blog details how Iron Tiger threat actors have updated their toolkit with an updated SysUpdate malware variant that now uses five files in its infection routine instead of the usual three.

Research Apr 09, 2021

Research, News, and Perspectives

Trending Topics