Fraud Protection July 25, 2024

Unveiling the latest banking trojan threats in LATAM

9 min read - This post was made possible through the research contributions of Amir Gendler. In our most recent research in the Latin American (LATAM) region, we at IBM Security Lab have observed a surge in campaigns linked with malicious Chrome extensions. These…

Risk Management July 9, 2024

A decade of global cyberattacks, and where they left us

5 min read - The cyberattack landscape has seen monumental shifts and enormous growth in the past decade or so. I spoke to Michelle Alvarez, X-Force Strategic Threat Analysis Manager at IBM, who told me that the most visible change in cybersecurity can be…

Risk Management January 19, 2023

Synthetic media creates new social engineering threats

4 min read - Social engineering attacks have challenged cybersecurity for years. No matter how strong your digital security, authorized human users can always be manipulated into opening the door for a clever cyber attacker. Social engineering typically involves tricking an authorized user into…

Risk Management June 2, 2022

Recovering ransom payments: Is this the end of ransomware?

4 min read - What’s the best way to stop ransomware? Make it riskier and less lucrative for cyber criminals. Nearly all intruders prefer to collect a ransom in cryptocurrency. But it’s a double-edged sword since even crypto leaves a money trail. Recovering ransomware…

Risk Management May 19, 2022

Malicious reconnaissance: What it is and how to stop it

2 min read - You spend your days getting ready to stop threat actors. But even as you wonder, attackers could already be ‘casing the joint’. Before any well-organized attack, skillful or professional attackers quietly snoop around, looking for chances to gain access. It’s…

Risk Management November 22, 2021

A journey in organizational resilience: Insider threats

4 min read - Very much like privacy concerns, insider threats may not be the first issue to come to mind when building an enterprise cyber resilience plan. However, they should be. Here is why: because as we noted in the first piece of…

News October 6, 2021

CISA Creates JCDC Agency for U.S. Cyber Defense Operations Plans

2 min read - The Cybersecurity and Infrastructure Security Agency (CISA) announced the creation of a new agency on Aug. 6 to lead the development and execution of U.S. cyber defense plans. CISA dubbed the new agency the Joint Cyber Defense Collaborative (JCDC). Its…

Zero Trust September 1, 2021

The OWASP Top 10 Threats Haven’t Changed in 2021 — But Defenses Have

5 min read - The more things change, the more they stay the same. Despite a changing threat landscape and threat actors who keep upping their game, the vulnerabilities behind the threats remain consistent. The OWASP Top 10, ranked by the Open Web Application…

Threat Intelligence August 4, 2021

ITG18: Operational security errors continue to plague sizable Iranian threat group

5 min read - This blog supplements a Black Hat USA 2021 talk given August 2021.  IBM Security X-Force threat intelligence researchers continue to track the infrastructure and activity of a suspected Iranian threat group ITG18. This group’s tactics, techniques and procedures(TTPs) overlap with…

Zero Trust July 21, 2021

Beyond Ransomware: Four Threats Facing Companies Today

4 min read - The recent DarkSide attack makes it clear: no system is safe from ransomware. And while the attackers say they weren’t out to hurt anyone, only to make money, the impact is the same. It could lead to potential disruptions of…