Evidence-led cyber threat intelligence for defenders. Incident reports, actor profiles and vulnerability analysis — written for the people who have to act on it.
In May 2023, the cybersecurity world turned its attention to a significant development involving APT35, an Iranian-backed cyber threat actor. Researchers uncovered advancements in BellaCiao, a…
Discord.io, a popular third-party service that allows server owners to create custom invites to their Discord channels, has confirmed a data breach that exposed the information of 760,000 members.…
The need for a collective defense strategy is more critical than ever. The intricate nature of modern attacks calls for a unified approach, one that leverages shared cyber threat intelligence.…
In this blog post, we delve into a comprehensive analysis of a recent article published by Mandiant, a part of Google Cloud, titled "The GRU's Disruptive Playbook" . The article, authored by Dan…
In a significant security breach, two US Navy personnel, Jinchao Wei and Wenheng Zhao , were arrested for transmitting sensitive military information to the People’s Republic of China (PRC). The…
A recent zero-day vulnerability in Salesforce's software was exploited by threat actors to phish Facebook credentials. This incident was first reported by Guardio Labs, who detected a…
Security researchers at Tenable discovered a significant vulnerability in Microsoft's Power Platform. This vulnerability allowed unauthorized access to cross-tenant applications and sensitive…
The recently discovered critical security vulnerability in PaperCut's NG/MF print management software, tracked as CVE-2023-39143 (NVD) , has brought attention to the potential risks posed by…
A recent cybersecurity incident has brought to light a malicious Python package on the Python Package Index (PyPI), posing as the VMware vSphere connector module 'vConnector'. This package, named…
As we move through 2023, the cyber threat landscape continues to evolve, yet some things remain the same. The UK SME sector, like many others around the globe, continues to grapple with the same…
In the ever-evolving landscape of cybersecurity in 2023, the activities of state-sponsored Advanced Persistent Threat (APT) groups have become a significant area of focus. Among these, the Chinese…
A new emerging threat, Abyss Locker ransomware has been making headlines for its targeted attacks on VMware's ESXi virtualised environments. IOCs however seem sadly lacking.
