2023-09-11 00:00 UTC
Other
Other
AWS AppStream Cloudtrail Bypass
Credentials can be extracted from AppStream. When used, they obscure the sourceIP and userName of the initial user. The sourceIP appears as appstream.amazonaws.com.
P0
LATEST
Aggregated cybersecurity reporting, advisories and research. 4,591 matching records.
AUTO-POLL // 2026-10-07 14:25 UTC
CYBER INTEL TEMPERATURE
TODAY'S AGGREGATED INTELLIGENCE
COOL
COOL
WARM
ELEVATED
HOT
CRITICAL
P4 / P100
7-DAY C.I.T. REPORT
CYBER CONDITIONS // DAILY C.I.T. READINGS
TODAY → 6 DAYS AGO
TODAY
Oct 7
RANSOMWARE
P4
COOL // 38 ARTICLES
TUE
Oct 6
RANSOMWARE
P3
COOL // 61 ARTICLES
MON
Oct 5
RANSOMWARE
P5
COOL // 48 ARTICLES
SUN
Oct 4
RANSOMWARE
P10
WARM // 11 ARTICLES
SAT
Oct 3
RANSOMWARE
P4
COOL // 14 ARTICLES
FRI
Oct 2
RANSOMWARE
P7
COOL // 46 ARTICLES
THU
Oct 1
RANSOMWARE
P8
COOL // 63 ARTICLES
2023-09-07 08:00 UTC
Other
Other
From Rags to Riches: The illusion of quick wealth in investment scams
Group-IB Digital Risk Protection uncovers malicious campaign leveraging almost 900 scam pages with potential financial damage estimated at $280,000 over four-month span
P0
2023-09-07 00:00 UTC
Security Journalism
Security Journalism
Evolution of USB-Borne Malware, Raspberry Robin | Huntress
A deep dive into the USB-borne Raspberry Robin malware and how Huntress Managed EDR and Managed Antivirus can detect and mitigate this threat.
P0
2023-09-05 06:59 UTC
Other
Other
Stealing the extra mile: How fraudsters target global airlines in air miles and customer service scams
Uncover the vulnerabilities crippling the airline industry and learn how to implement appropriate countermeasures
P0
2023-09-05 00:00 UTC
Security Journalism
Security Journalism
Ask the Mac Guy: Best Practices for Securing Macs | Huntress
Tips from a Mac expert. Discover the best practices users and administrators can use to secure your Mac devices or your Mac fleet.
P0
2023-08-31 07:59 UTC
Other
Other
New hierarchy, heightened threat: Classiscam’s sustained global campaign
The automated scam-as-a-service program designed to steal your money and data is still going strong four years after launch
P0
2023-08-31 00:00 UTC
Security Journalism
Security Journalism
How Huntress Transformed Its Detection Engine
The blog post discusses the evolution of Huntress' data analysis in response to scaling challenges and how we transitioned to a custom detection engine.
P0
2023-08-30 00:00 UTC
Security Journalism
Security Journalism
Qakbot Malware Takedown and Defending Forward | Huntress
With the FBI's takedown of Qakbot malware, we're sharing how the Huntress team developed our own Qakbot vaccine and our commitment to defend forward.
P0
2023-08-29 00:00 UTC
Security Journalism
Security Journalism
Threat Hunting and Tactical Malware Analysis | Huntress
Dive into the basics of threat hunting and tactical malware analysis, and learn how these two practices go hand in hand in cybersecurity.
P0
2023-08-24 00:00 UTC
Other
Other
Power Platform Privilege Escalation in Azure AD
Secureworks researchers discovered an Azure AD application with an abandoned reply URL related to Microsoft Power Platform. An attacker could leverage this URL to redirect authorization codes, exchange them for access tokens, and call Power Platform API via a middle-tier service to obtain elevated privileges. Microsoft quickly addressed the issue by removing the identified abandoned reply URL from the Azure AD application.
P10
2023-08-23 08:59 UTC
Other
Other
Traders’ dollars in danger: CVE-2023-38831 zero-day vulnerability in WinRAR exploited by cybercriminals to target traders
Spoof extensions help cybercriminals target users on trading forums as 130 devices still infected at time of writing
P30
2023-08-23 00:00 UTC
Security Journalism
Security Journalism
Best Practices to Reduce Your Attack Surface
Read expert insights on how to strengthen your cybersecurity strategy with asset inventory and attack surface reduction.
P0
2023-08-22 00:00 UTC
Security Journalism
Security Journalism
Ask the Mac Guy: macOS Security Myths | Huntress
Discover the truth about macOS security. The Huntress Mac Guy answers common macOS security questions like why you should protect your Mac computers.
P0
2023-08-17 09:48 UTC
Other
Other
Hunting Rituals #1: Threat hunting for DLL side-loading
Actionable guide to hunting for the DLL side-loading threat by using Group-IB MXDR.
P0
2023-08-17 00:00 UTC
Security Journalism
Security Journalism
Gone Phishing: An Analysis of a Targeted User Attack | Huntress
Get an inside look at how threat actors use phishing and social engineering tactics to target users and infiltrate organizations.
P0
2023-08-16 00:00 UTC
Security Journalism
Security Journalism
Traditional Antivirus vs. Managed Antivirus | Huntress
Learn why traditional antivirus falls short against today's cyber threats on its own and how Huntress offers proactive, effective protection.
P0
2023-08-14 07:59 UTC
Other
Other
Breaking down Gigabud banking malware with Group-IB Fraud Matrix
Uncover the disruptive nature of Gigabud malware and take proactive measures to mitigate the associated risks
P0
2023-08-11 00:00 UTC
Security Journalism
Security Journalism
Investigating New INC Ransom Group Activity | Huntress
The Huntress team investigated a ransomware attack of a new INC Ransom threat actor group. Here is the activity we observed.
P15
2023-08-10 00:00 UTC
Security Journalism
Security Journalism
Identity: The Third Phase of Security Operations | Huntress
We’ve entered the era of identity security. Are you ready? Explore how to counter evolving threats and protect identities with confidence.
P0
2023-08-09 00:00 UTC
Security Journalism
Security Journalism
How Security Training Helped Huntress Catch a $100,000 BEC Scam | Huntress
Discover how Huntress caught an attempted business email compromise (BEC) scam that would have cost the company more than $100,000 had it gone undetected.
P0
2023-08-08 00:00 UTC
Security Journalism
Security Journalism
How Businesses Should Be Scaling Their Security
Discover how today's businesses can conquer security challenges, strengthen defenses and evolve their security beyond traditional antivirus measures.
P0
2023-08-05 00:00 UTC
Security Journalism
Security Journalism
Another PaperCut: CVE-2023-39143 Remote Code Execution | Huntress
Huntress is tracking a new PaperCut vulnerability, CVE-2023-39143, which allows full remote code execution on unpatched servers.
P20
2023-08-04 07:59 UTC
Other
Other
JOIN THE CYBERCRIME FIGHTERS CLUB
Fighting cybercrime is more effective when we work together. Find out more about how you can work with Group-IB to document emerging threats.
P0
2023-08-04 00:00 UTC
Other
Other
Power Platform Custom Code information disclosure
A vulnerability in Power Platform could lead to unauthorized access to Custom Code functions used for custom connectors, thereby allowing cross-tenant information disclosure of secrets or other sensitive information if these were embedded in a Custom Code function. The issue occurred as a result of insufficient access control to Azure Function hosts, which are launched as part of the creation and operation of custom connectors in Microsoft’s Power Platform. An attacker who determined the hostna…
P0
2023-08-03 08:01 UTC
Other
Other
Demystifying Mysterious Team Bangladesh
Analysis of a highly active hacktivist group with global reach
P0
2023-08-03 00:00 UTC
Security Journalism
Security Journalism
Legitimate Apps as Traitorware for Persistent Microsoft | Huntress
Dive into how Huntress caught a threat actor adding several legitimate email apps to maintain persistent access to a compromised Microsoft 365 environment.
P0
2023-08-02 00:00 UTC
Security Journalism
Security Journalism
Breaking Down the Threat Hunting Process | Huntress
Discover the key phases of the threat hunting process and how threat hunters structure their hunts to proactively seek out threats.
P0
2023-08-01 00:00 UTC
Security Journalism
Security Journalism
Why Huntress Trusts Microsoft Defender Antivirus | Huntress
Is it worth switching to Microsoft Defender Antivirus? Spoiler alert: We think yes! Explore why Defender is a solid AV solution.
P0
2023-07-27 00:00 UTC
Security Journalism
Security Journalism
Business Email Compromise via Azure Administrative Privileges | Huntress
Explore how Huntress stopped a massive business email compromise (BEC) attack targeting multiple user accounts within a single organization.
P0
2023-07-25 00:00 UTC
Security Journalism
Security Journalism
The Power of Cyber Insurance: What Every MSP Should Know | Huntress
This blog post provides a comprehensive overview of the importance, benefits and challenges of cyber insurance that every MSP should be aware of.
P0