News June 21, 2021

New Buer Malware Loader Spread Through DHL Scam Email

2 min read - Digital attackers are using fake DHL shipping emails to trick recipients into opening a malicious Microsoft Office document. According to Proofpoint, the DHL scam email leads to an infection of ‘RustyBuer,’ a new variant of the Buer Loader malware family…

Incident Response June 16, 2021

Why a Phishing Attack Is Still Profitable — And How To Stop One

4 min read - As the business world continues to grapple with an expanding definition of new normal, the phishing attack remains a common tactic for attackers. Why are phishing attacks still happening? How can we prevent them? We spoke to a threat analyst…

Threat Intelligence May 28, 2021

Attackers launch cyberattack via U.S. aid agency email accounts

2 min read - Microsoft announced a Russian threat group (ITG11, aka Nobelium, APT29) also thought to be behind the SolarWinds attack conducted an email campaign masquerading as the U.S. Agency for International Development. Microsoft reports that while organizations in the United States received…

Zero Trust May 14, 2021

How to Reduce Zero Trust Frustration By Capturing Context

4 min read - Zero trust remains one of the best ways for companies to reduce total risk. By knowing the potential risk of any request — both inside and outside the enterprise network — rather than assuming good intentions, companies can limit potential…

Threat Intelligence April 14, 2021

An update: The COVID-19 vaccine’s global cold chain continues to be a target

5 min read - In December 2020, IBM Security X-Force released a research blog disclosing that the COVID-19 cold chain — an integral part of delivering and storing COVID-19 vaccines at safe temperatures — was targeted by cyber adversaries. After that first report, we…

Intelligence & Analytics April 1, 2021

IBM Named a Strong Performer in The Forrester Wave™: External Threat Intelligence Services, Q1 2021

3 min read - How can organizations keep up with today’s evolving threat landscape, highlighted by targeted phishing attacks, profit-seeking ransomware and advanced persistent threats (APTs)? The simple answer is better threat intelligence. Please stop me if this is something you’ve heard before. As…

News March 15, 2021

URL Phishing Campaign Hides Attack Behind Morse Code

2 min read - A very old way to send messages has found new life. Threat actors used Morse code in a new URL phishing campaign detected early in February 2021, according to Bleeping Computer. Invented by Samuel Morse and Alfred Vail in the…

Risk Management February 19, 2021

Manufacturing Cybersecurity Threats and How To Face Them

3 min read - With manufacturing cybersecurity threats on the rise, what should companies know about protecting their digital assets in the future?  Risks to Security in Manufacturing The number of ransomware incidents involving the manufacturing sector increased 156% between the first quarters of…

News February 2, 2021

FBI: Watch Out for Spoofed Websites With Deceptive URLS

2 min read - A recent FBI announcement warned that threat actors are creating domains that spoof the law enforcement agency’s official websites. Inside the FBI Announcement On Nov. 23, 2020, the FBI warned that malicious actors were using domain spoofing to look like its real…

Endpoint January 28, 2021

What You Need to Know About Scam Text Messages in 2021

3 min read - The threat of scam text messages may now seem distant, even quaint. With all the new, exotic and sophisticated attacks that have arisen in the past decade, surely text message attacks are low on the list. But, they can still…