JumpCloud Security Breach
JumpCloud, a US-based enterprise software firm known for its cloud directory platform, recently disclosed a security breach that was part of a highly targeted operation aimed at a select group of…
Tags /
#Nation-State Activity
42 reports
In-Depth Analysis of Storm-0558 Techniques for Unauthorized Email Access
This blog post is based on the detailed analysis provided by Microsoft Security Blog on the techniques used by the threat actor tracked as Storm-0558 for unauthorized email access.
ISC Russia Report Summary
https://isc.independent.gov.uk/wp-content/uploads/2021/03/CCS207_CCS0221966010-001_Russia-Report-v02-Web_Accessible.pdf
2014 Sony Pictures Entertainment Breach
The cyber attack on Sony Pictures Entertainment in 2014 was a meticulously planned operation that began with careful preparation well in advance of the publicized attack date. The attackers…
Operation Aurora : A Deep Dive into the 2010 State-Sponsored Cyber Attack
Operation Aurora: a modern CTI deep dive into the 2009–2010 intrusion set Operational CTI, incident response, nation-state tradecraft, CVE-2010-0249, Internet Explorer, Hydraq, Elderwood, IP…
Unveiling Stuxnet: The pioneering cyber-physical sabotage of Siemens Step7
Stuxnet, first discovered in 2010, was a malicious computer worm that caused substantial damage to Iran's nuclear program. The worm targeted supervisory control and data acquisition (SCADA)…