2017-11-27 08:39 UTC
Other
Other
P0
LATEST
Aggregated cybersecurity reporting, advisories and research. 4,805 matching records.
AUTO-POLL // 2026-10-12 13:25 UTC
CYBER INTEL TEMPERATURE
TODAY'S AGGREGATED INTELLIGENCE
COOL
COOL
WARM
ELEVATED
HOT
CRITICAL
P6 / P100
7-DAY C.I.T. REPORT
CYBER CONDITIONS // DAILY C.I.T. READINGS
TODAY → 6 DAYS AGO
TODAY
Oct 12
RANSOMWARE
P6
COOL // 20 ARTICLES
SUN
Oct 11
ACTIVE EXPLOITATION
P5
COOL // 6 ARTICLES
SAT
Oct 10
RANSOMWARE
P1
COOL // 11 ARTICLES
FRI
Oct 9
RANSOMWARE
P4
COOL // 67 ARTICLES
THU
Oct 8
RANSOMWARE
P3
COOL // 62 ARTICLES
WED
Oct 7
RANSOMWARE
P5
COOL // 86 ARTICLES
TUE
Oct 6
RANSOMWARE
P3
COOL // 61 ARTICLES
2017-11-07 15:00 UTC
Security Journalism
Security Journalism
Huntress Labs to Host Hands-On “Hacking Windows” Training | Huntress
IT Nation 2016 ended on a high note for Huntress Labs as we were named the “Best Newcomer” in the Partner Choice Awards. Now, as this year’s event quickly approaches, we are excited to continue our momentum.
P0
2017-11-07 00:00 UTC
Other
Other
Bypassable and overly-privileged IAM policies
AWS has previously provided managed policies or guidance in documentation for policies with mistakes that allow them to be bypassed. Additionally, some policies are over-privileged. Date of disclosure is for the first issue of this type, while references provide other examples by various individuals.
P0
2017-11-02 13:04 UTC
Other
Other
P0
2017-10-26 12:15 UTC
Other
Other
NotPetya pulls BadRabbit out of the hat
Research revealed that the BadRabbit code was compiled from NotPetya sources.
P0
2017-10-24 12:22 UTC
Other
Other
BadRabbit: spread of new cryptolocker
There is a connection between BadRabbit and Not Petya
P0
2017-10-19 13:13 UTC
Other
Other
‘Black spot’ for pirates
Russia has developed a strong legal framework to combat online piracy. All that is needed is for it to be used effectively (especially for Forbes.ru)
P0
2017-10-10 00:00 UTC
Other
Other
AWS Java SDK XXE injection
The AWS Java SDK was vulnerable to XML external entity (XXE) injection related to XML parsers.
P0
2017-10-02 13:00 UTC
Security Journalism
Security Journalism
Abusing Trusted Applications with Nested Execution
Recently, my co-founders gave a talk at DerbyCon 7.0 on evading common persistence enumeration tools. Evasion using trusted applications has been a hot topic of discussion within the infosec community and is one of the techniques they covered in their presentation. However, very little discussion exists on why these matter or the steps researchers take to find “hosting” applications.
P0
2017-09-26 13:20 UTC
Other
Other
Airline companies «landing» on fake pages
Top global airline companies have been compromised by fraudsters for the second time during the last six months.
P0
2017-08-25 14:00 UTC
Security Journalism
Security Journalism
MSP Moment | Huntress
Over the past month, the Emotet family of malware has re-emerged as a formidable piece of crimeware, thanks to its new self-propagation techniques (undoubtedly inspired by the success of WannaCry and Petya).
P0
2017-08-15 12:25 UTC
Other
Other
Secrets of Cobalt
How Cobalt hackers bypass your defenses
P0
2017-08-10 13:36 UTC
Other
Other
Insecure venture
On the price of hacker attacks and the toxic cyber environment
P0
2017-08-04 13:34 UTC
Other
Other
Kronos devouring its children
The man who "saved the world" from the WannaCry outbreak has been arrested on suspicion of being the author of Kronos banking Trojan
P0
2017-08-02 12:29 UTC
Other
Other
Hacktivists unmasked
Group-IB reveals the identity of alleged members of the Islamic hacker group United Islamic Cyber Force
P0
2017-07-24 13:40 UTC
Other
Other
Targeted attacks on banks
Russia as a testing ground
P0
2017-07-17 17:00 UTC
Security Journalism
Security Journalism
Redosdru — Encrypting DLL Payloads to Avoid On-Disk Signatures
Dive deep into Redosdru malware analysis, unpacking encrypted DLLs, keylogging behavior, and how Huntress defenders detect and respond.
P0
2017-07-17 17:00 UTC
Security Journalism
Security Journalism
Deep Dive: Squashing an MSSQL Attack
During the previous MSP Moment, we walked our readers through an incident where our partner, NTConnections, used Huntress to discover a previously undetected breach. In this Deep Drive, we’ll examine the tradecraft used by the attackers to gain access through the database, kill/disable antivirus, download malicious files, and establish a persistent foothold within the network.
P0
2017-07-05 00:00 UTC
Security Journalism
Security Journalism
Security Awareness Training Will Prevent Ransomware | Huntress
Ransomware security awareness training is the most effective way to prevent a ransomware attack against your organization and its employees. Read more in the Huntress Blog to find out how.
P15
2017-06-27 12:32 UTC
Other
Other
Petya starts with Ukraine and then goes global
Group-IB has identified the ransomware that has infected energy, telecommunications and financial companies
P15
2017-06-05 13:24 UTC
Other
Other
Ghost flights
Top global airline companies have been compromised through fake links distributed by "friends" on Facebook
P0
2017-05-30 12:51 UTC
Other
Other
LAZARUS ARISEN
Group-IB reveals the unknown details of attacks from one of the most notorious APT groups: sophisticated espionage and APT techniques of the North Korean state-sponsored hackers
P0
2017-05-11 13:43 UTC
Other
Other
P15
2017-05-08 18:00 UTC
Security Journalism
Security Journalism
MSP Moment: Squashing an MSSQL Attack
When it comes to breaches, it’s hard to find a silver lining when the end result is customer down time, data theft, or damaged reputations. For Managed Service Providers with tens to hundreds (or even thousands) of clients, the stakes are even higher. In this MSP Moment, we’re highlighting how NTConnections, a Washington DC based MSP, responded to a database outage which quickly escalated into an incident response effort.
P0
2017-04-25 17:00 UTC
Security Journalism
Security Journalism
Troubleshooting Procmon & Sysmon v3.32
When it comes to troubleshooting software errors, analyzing malware samples, or discovering security misconfigurations, the Sysinternals Suite can likely solve your problem. For many IT and Security professionals, this collection of Windows utilities is similar to the Swiss Army knife.
P0
2017-01-23 12:06 UTC
Other
Other
In a Risk Group
Why cyberattacks may be soon at the top of the World rating of threats (Ilya Sachkov for RBC)
P0
2016-11-26 00:00 UTC
Other
Other
Public admin access to Azure's Red Hat Update Infrastructure
Full administrative access to the Azure Red Hat Enterprise Linux Appliance REST API was publicly exposed. It allowed malicious actors uploading packages that would be acquired by client virtual machines on their next yum update. The vulnerable infrastructure supplies all the packages for all Red Hat Enterprise Linux instances booted from the Azure marketplace.
P0
2016-11-21 18:00 UTC
Security Journalism
Security Journalism
Huntress Wins ConnectWise IT Nation Partner’s Choice Award!
Huntress wins prestigious award at this year’s largest MSP industry conference, ConnectWise IT Nation, for industry-leading Managed Detection & Response service.
P0
2016-11-16 00:00 UTC
Other
Other
3rd party vendor confused deputy via AssumeRole
3rd party vendors can (and sometimes do) incorrectly implement sts:ExternalId in their AWS role trust policies, leading to confused deputy issues. These misconfigurations could allow customers to access other customers' data. Although vendors are responsible for ensuring their own configurations are correct, AWS could theoretically add mitigations to prevent and detect this issue.
P0
2016-11-14 16:00 UTC
Security Journalism
Security Journalism
How do you protect computers from attackers if you’re not | Huntress
How do you protect computers from attackers if you’re not familiar with hacking techniques? The historical answer to this question has been antivirus and firewalls. However, the last several years have demonstrated hackers can slip past these preventative technologies and cause devastating results to the victims.
P0