1589 matches found
Mekotio Trojan Targets the Latin American Financial Sector
...
Critical OpenStack Vulnerability Exposes Cloud Data
...
Microsoft MSHTML Flaw the Silent Doorway for MerkSpy Malware
...
Summary of Vulnerabilities, Actors & Attacks: November 2023
...
Decoding Bronze Starlight’s Strategy in the Gambling Sector
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A cyberattack campaign stemming from China is currently focusing its efforts on the Southeast Asian gambling industry, with the objective of deploying Cobalt Strike beacons on compromised systems. To...
Revealing Vulnerabilities’ True Dimensions: Illuminating Your Detection Surface with HivePro Uni5
...
Summary of Vulnerabilities & Threats: April 2023
...
Actors, Threats and Vulnerabilities 27 March to 2 April 2023
For a detailed threat digest, download the pdf file here Summary For a detailed threat digest, download the pdf file here HiveForce Labs recently made several significant discoveries related to cybersecurity threats. Over the past week, they identified a total of Nine attacks that were executed...
Summary of Vulnerabilities & Threats: February 2023
...
Actors, Threats and Vulnerabilities 9 January 2023 – 15 January 2023
...
Gartner: “Organizations Must Expand From Threat to Exposure Management in 2023”
...
Actors, Threats and Vulnerabilities 26 December 2022 – 02 January 2023
...
Vulnerabilities & Threats that Matter 07 – 13 November 2022
...
Eternity Threat group is actively evolving its malware arsenal
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The Eternity threat group also known as Eternity Team or Eternity Project, a Russian "Jester Group"-affiliated threat group, has been active since at least January 2022. Eternity uses a...
The Rise of Intelligent Security Validation: What a Month of Enhanced BAS Revealed
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on CAASM & CDMB Inefficiencies! Four weeks ago, a major healthcare...
regreSSHion: Exploiting Signal Handler Race Condition in OpenSSH
...
ExCobalt’s GoRed the Silent Infiltrator of Russian Sectors
...
Medusa Ransomware Unleashed A Growing Cybersecurity Menace
Summary: Medusa ransomware, a potent threat since late 2022, employs a multi-extortion approach via its Medusa Blog, disclosing victim data and pressuring non-compliant organizations. Operating as a ransomware-as-a-service, Medusas global impact underscores the need for proactive cybersecurity...
TA4557 Targets Recruiters by Delivering Malware Disguised as Job Applicant
Summary: Threat actor TA4557 has been focusing on recruiters by posing as job applicants to distribute malware. While this approach is not unprecedented, there have been notable shifts in both technique and attack vectors compared to their previous methods. The attackers have demonstrated an...
Deciphering Mirai’s Next Chapter: the Strategies of the Latest Players
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The realm of cybersecurity witnessed the rise of formidable botnet variants stemming from the notorious Mirai source code. Prominent among them are hailBot, kiraiBot, and catDDoS, showcasing heightened...
Mirai Botnet Exploits Multiple Flaws in the Latest Campaign
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A new variant of the Mirai botnet is actively exploiting vulnerabilities in various devices, aiming to create botnets and launch DDoS attacks. To receive real-time threat advisories, please follow...
Summary of Vulnerabilities & Threats: May 2023
...
Immediate Threat Reduction for a Telecom Company
In this video, Anand Choudha, CEO at Hive Pro, and Jeelan Poola, CPO at Hive Pro, introduce the HivePro Uni5 Threat Exposure Management Platform. HivePro Uni...
SYS01 Stealer Targets Government and Manufacturing Industry
Threat Level Attack Report Follow Hive Pro for a detailed threat advisory, download the pdf file here from HiveForce Labs. Summary The SYS01 stealer has been targeting critical government infrastructure employees, manufacturing companies, and other industries, and using various delivery technique...
Summary of Vulnerabilities & Threats: January 2022
...
Security updates for Adobe InCopy June 2022
Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary Adobe has released security updates in Adobe InCopy that address critical vulnerabilities at priority 3 as per Adobe. These vulnerabilities could lead to arbitrary code execution...
Prolific threat actor TA551 using new malware IcedID
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here TA551 is a financially motivated threat group that has been active at least since 2018. The gang primarily targeted English, German, Italian, and Japanese speakers through email-based malware distribution activities. IcedID, a...
Monthly Threat Digest: February 2022
...
What Is Exposure Management? A Modern Guide
Attackers don't just look for a single high-severity vulnerability; they look for a path of least resistance. They connect the dots between a misconfigured cloud service, an exposed credential, and an unpatched server to reach their goal. To build a strong defense, you need to see your environmen...
The 5 Stages of Cyber Threat Exposure Management
Think of your security posture like a fortress. Traditional vulnerability management gives you a long list of every potential weakness—a loose stone here, a weak gate there. A cyber threat exposure management CTEM program acts as your chief strategist, analyzing intelligence to show you exactly...
The Difference Between Vulnerability and Exposure Management Explained
To build a truly effective defense, you have to learn to see your organization through an attacker's eyes. Attackers don't care about your internal vulnerability scan reports or how many patches you applied last week. They look for one thing: an open door. They search for an accessible pathway th...
You Can’t Secure What You Can’t See: The Real Pain CAASM Solves
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all! Let’s cut through the marketing haze for a moment. There’s a reas...
Surge in QR Code Phishing Attacks, Hits Chinese Citizens
...
Attacks, Vulnerabilities and Actors 3 July to 9 July 2023
For a detailed threat digest, download the pdf file here Summary HiveForceLabs recently made several significant discoveries related to cybersecurity threats. Over the past week, the fact that there were a total of eight attacks executed, a zero-day vulnerability in the WordPress Plugin, and thre...
RA Group’s Custom Ransomware Hits US & South Korea
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The emergence of the RA ransomware group highlights the utilization of the recently leaked Babuk ransomware source code as they employ it to develop their variant of the malware. To receive real-time...
BlackMagic Ransomware disrupts the Israeli logistics sector
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The latest ransomware entity, known as "BlackMagic" has emerged. This gang targets its victims using a double extortion approach in which it initially exfiltrates the victims data, followed by encryption...
The Exposure Convergence: Why Identity, Infrastructure, and Intelligence Are Converging
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. The cybersecurity industry is experiencing a fundamental convergence around "exposure management" ...
A Flaw in Microsoft Visual Studio Installer Enables Malicious Extension Distribution
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary A vulnerability in Microsoft Visual Studio Installer allows attackers to gain unauthorized access, compromise systems, and distribute malicious extensions, posing a significant security risk. To...
The New Frontline: Why DevOps Became a Cyber Target
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on CAASM & CDMB Inefficiencies! Your developers didn't become...