SWEED Threat Actor Uses Typosquatting, UAC Bypasses to Distribute Agent Tesla
Researchers observed a threat actor known as SWEED using typosquatting and UAC bypassing techniques to distribute Agent Tesla and other malware.
Why Security Incidents Often Go Underreported
If you saw a coworker browsing through a database they weren't supposed to have access to, would you report it? New research suggests that employees often underreport such security incidents.
The Cyber Kill Chain Is Getting Shorter As the Skills Gap Widens
While the cybersecurity skills gap is a years-old challenge, organizations are facing a new conundrum: The cyber kill chain is getting shorter. How can the industry address these dual problems?
TA505 Delivers New Gelup Malware Tool, FlowerPippi Backdoor Via Spam Campaign
Researchers observed the TA505 threat group using spam campaigns to deliver two new payloads: the Gelup malware tool and the FlowerPippi backdoor.
Sodinokibi Ransomware Adds Malvertising and More Exploit Kits to Distribution Methods
Sodinokibi ransomware affiliates have added malvertising campaigns to the growing list of attack vectors used to infect victims, according to reports.
Threat Actors Use Targeted Attack Tools to Distribute Cryptocurrency Miners, Ransomware
Threat actors are using targeted attack tools to distribute typical malware, such as cryptocurrency miners and ransomware.
XENOTIME Threat Group Now Targeting Electric Utility Organizations
In addition to oil and gas companies, the XENOTIME threat group has begun targeting electric utility organizations located in the U.S. and elsewhere.
It’s Time to Start Thinking Like a Threat Hunter
Many organizations understand the importance of threat hunting but simply lack enough time or resources. Here are some tips to help you start thinking like a threat hunter, regardless of your budget.
New York Nonprofit Organization Traces Data Breach to Employee Email Accounts
People Inc., a nonprofit organization based in New York state, has traced a recent data breach to compromised employee email accounts.
IoMT Security: A Comprehensive Approach to Mitigate Risk and Secure Connected Devices
IoT technology is taking over the healthcare industry because it has become essential. But once a device is connected to your network, who is responsible for IoMT security and privacy?