News March 1, 2023

50 Million Password Heist Shows Info-stealing is on the Rise

4 min read - On September 15, 2022, Uber employees logged on to see an unexpected message on the company’s Slack channel. It said, “Hi @here, I announce I am a hacker and Uber has suffered a data breach.” At first, many thought it…

News January 30, 2023

Malware-as-a-Service Flaunts Its Tally of Users and Victims

5 min read - As time passes, the security landscape keeps getting stranger and scarier. How long did the “not if, but when” mentality towards cyberattacks last — a few years, maybe? Now, security pros think in terms of how often will their organization…

News January 23, 2023

Alleged FBI Database Breach Exposes Agents and InfraGard

4 min read - Recently the feds suffered a big hack, not once, but twice. First, the FBI-run InfraGard program suffered a breach. InfraGard aims to strengthen partnerships with the private sector to share information about cyber and physical threats. That organization experienced a…

News July 13, 2022

Feds Offer $5 Million for Information on North Korean Cyber Threats

2 min read - North Korean-based actors have allegedly run company breaches, crypto crime, weapons sales, money laundering, human rights abuses and WMD program funding. Given the high stakes involved, the U.S. Department of State Rewards for Justice program is offering $5 million for…

Intelligence & Analytics July 7, 2022

Unprecedented Shift: The Trickbot Group is Systematically Attacking Ukraine

13 min read - Following ongoing research our team, IBM Security X-Force has uncovered evidence indicating that the Russia-based cybercriminal syndicate “Trickbot group” has been systematically attacking Ukraine since the Russian invasion — an unprecedented shift as the group had not previously targeted Ukraine.…

News June 22, 2022

CISA Warns of Russia-Sponsored Threats to Critical Infrastructure

2 min read - Cybersecurity authorities from the United States, Australia, Canada, New Zealand and the U.K. recently released a joint Cybersecurity Advisory warning of increased cyber threats related to Russia’s invasion of Ukraine. As per the alert, attacks may occur as a response…

News May 4, 2022

Arrests Made in Relation to LAPSUS$ Cyber Gang 

2 min read - The cyber criminal organization LAPSUS$ has claimed responsibility for a number of high-profile attacks. Did they give away too much in their bragging? It could be since the City of London police say they have arrested seven teenagers in relation…

Banking & Finance January 24, 2022

TrickBot Bolsters Layered Defenses to Prevent Injection Research

7 min read - This post was written with contributions from IBM X-Force’s Limor Kessem and Charlotte Hammond. The cyber crime gang that operates the TrickBot Trojan, as well as other malware and ransomware attacks, has been escalating activity. As part of that escalation,…