Evidence-led cyber threat intelligence for defenders. Incident reports, actor profiles and vulnerability analysis — written for the people who have to act on it.
Microsoft’s October 2024 Patch Tuesday release addresses 118 security vulnerabilities, including five zero-day vulnerabilities. These zero-days impact various components, from MSHTML to Microsoft…
Reports have emerged of an alleged data breach at Credit Suisse, potentially impacting sensitive data of nearly 19,000 employees in India. This incident marks yet another challenge for the bank,…
In a significant development, the UK's National Crime Agency (NCA) has named Aleksandr Ryzhenkov as a key figure in the notorious Russian cybercrime group Evil Corp, while also identifying him as…
In September 2024, JPCERT/CC released a detailed blog post uncovering how Windows Event Logs can be a powerful tool for identifying human-operated ransomware campaigns. The research focuses on…
A recent analysis of the LummaC2 (LUMMAC.V2) malware reveals its use of advanced obfuscation techniques, specifically leveraging indirect control flow manipulation to make reverse engineering…
As we approach the final quarter of 2024, the cyber threat intelligence (CTI) landscape continues to evolve, driven by a combination of emerging threats, geopolitical factors, and the maturation…
On September 26, 2024, a set of severe vulnerabilities affecting the Common UNIX Printing System (CUPS) was publicly disclosed, prompting immediate concern across the cybersecurity community.…
Hack.lu 2024 will take place from 22nd to 25th October in Luxembourg, showcasing the latest in cybersecurity innovation and research. Known for its wide range of topics, from malware analysis and…
In September 2024, U.S. authorities raised alarms over a significant threat that has been quietly gaining momentum this year— RansomHub , a ransomware-as-a-service (RaaS) platform that has been…
In **July 2024**, cybersecurity giant **CrowdStrike** faced a widespread **IT outage** that affected **over 8.5 million Windows systems** worldwide. This massive disruption was caused by a faulty…
In August 2024, **FlightAware**, a widely-used flight-tracking platform, disclosed a significant data breach. The breach, caused by a **configuration error**, exposed the **personal information**…
In July 2024, Nokia Corporation confirmed a data breach that exposed the personal details of 7,622 employees . This breach was claimed by a threat actor known as 888 , who allegedly exploited a…
