⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Google Threat Intelligence Group tracks UNC6671, which uses vishing to target enterprises, posing as IT helpdesk to steal credentials and MFA tokens. They have rebranded under multiple extortion brands and focus on financial services, private equity, and cloud environments.
Google Threat Intelligence Group reveals UNC6671 has not disbanded but diversified into brands like Redact, Pink, Helix, and Falcon. They continue using vishing to target enterprises, especially financial services, by stealing credentials and exfiltrating data from cloud environments.
This article is part two of the RAVEN series, shifting from reconnaissance to exploitation. The authors detail how they leverage gathered information to identify and exploit vulnerabilities in the target system.
This article explores the detection gap for MITRE ATT&CK technique T1053.005, which involves scheduled tasks. It provides guidance on identifying and mitigating abuse of scheduled tasks for persistence and privilege escalation.
A Belarusian national with decades of cybercriminal activity was sentenced to 16 years in U.S. prison for running the Ransom Cartel ransomware operation. The case underscores ongoing international judicial actions against ransomware perpetrators.
Forescout's research reveals over 4,400 internet-facing Rockwell PLCs, with 22 in US cities recently attacked. These exposures allow attackers to change settings and disrupt operations without needing vulnerabilities.