2021-07-29 07:42 UTC
Other
Other
Under the hood. Group-IB Threat Intelligence. Part 1
Dive into Breached DB section
P0
LATEST
Aggregated cybersecurity reporting, advisories and research. 4,628 matching records.
AUTO-POLL // 2026-10-07 20:15 UTC
CYBER INTEL TEMPERATURE
TODAY'S AGGREGATED INTELLIGENCE
COOL
COOL
WARM
ELEVATED
HOT
CRITICAL
P6 / P100
7-DAY C.I.T. REPORT
CYBER CONDITIONS // DAILY C.I.T. READINGS
TODAY → 6 DAYS AGO
TODAY
Oct 7
RANSOMWARE
P6
COOL // 75 ARTICLES
TUE
Oct 6
RANSOMWARE
P3
COOL // 61 ARTICLES
MON
Oct 5
RANSOMWARE
P5
COOL // 48 ARTICLES
SUN
Oct 4
RANSOMWARE
P10
WARM // 11 ARTICLES
SAT
Oct 3
RANSOMWARE
P4
COOL // 14 ARTICLES
FRI
Oct 2
RANSOMWARE
P7
COOL // 46 ARTICLES
THU
Oct 1
RANSOMWARE
P8
COOL // 63 ARTICLES
2021-07-28 00:00 UTC
Security Journalism
Security Journalism
Lessons Learned During the Kaseya VSA Supply Chain Attack | Huntress
The Huntress team recaps what happened during the Kaseya VSA supply chain attack—and what we can learn from it.
P0
2021-07-26 00:00 UTC
Security Journalism
Security Journalism
The Age of Rapid-Response Managed Detection and Response | Huntress
We teamed up with our partners at Magna5 to talk about providing real-time prevention, detection and response.
P0
2021-07-22 07:45 UTC
Other
Other
P0
2021-07-21 00:00 UTC
Security Journalism
Security Journalism
Why Persistence Is a Staple for Today’s Hackers | Huntress
Learn how hackers use persistence to gain—and keep—access to your virtual environments.
P0
2021-07-20 00:00 UTC
Security Journalism
Security Journalism
The Hunt to Find Origins of Kaseya's VSA Mass Ransomware | Huntress
Our Security Researchers discuss how hackers executed the Kaseya VSA supply chain attack—and why the blast radius of the incident was relatively limited.
P15
2021-07-14 00:00 UTC
Security Journalism
Security Journalism
Experts Weigh in on the State of Email-Based Threats | Huntress
Cybersecurity experts John Hammond and Sébastien Goutal provide insider insight on the current state of phishing, ransomware and email-based attacks.
P15
2021-07-13 00:00 UTC
Security Journalism
Security Journalism
Huntress VSA Vaccine | Huntress
In this blog, we share details on the vaccine Huntress deployed to our partners to protect them from being infected by the Kaseya VSA ransomware attack.
P15
2021-07-03 00:00 UTC
Security Journalism
Security Journalism
Rapid Response: Mass MSP Ransomware Incident | Huntress
Huntress is tracking a critical ransomware incident affecting MSPs and their customers, caused by a sophisticated Kaseya VSA supply chain attack.
P15
2021-07-02 07:51 UTC
Other
Other
P0
2021-06-30 08:05 UTC
Other
Other
REvil Twins: Ransomware-as-a-Service program
Deep Dive into Prolific RaaS Affiliates' TTPs
P15
2021-06-30 00:00 UTC
Security Journalism
Security Journalism
Critical Vuln.: PrintNightmare Exposes Windows Servers to RCE | Huntress
Huntress is aware of PrintNightmare, a critical RCE and local privilege escalation vulnerability. This serious security flaw affects many Windows servers.
P25
2021-06-25 00:00 UTC
Other
Other
DHCP abuse for code exec
Under certain conditions, an attacker can flood DHCP packets to the victim VM, allowing it to impersonate the Metadata server, and grant themselves SSH access.
P0
2021-06-22 00:00 UTC
Security Journalism
Security Journalism
Reducing Cyber Risk and Liability with Managed Threat Detection | Huntress
Providing cybersecurity services involves some risk and liability. Learn why managed detection and response could be the key to lowering your cyber risk.
P0
2021-06-15 00:00 UTC
Security Journalism
Security Journalism
ThreatOps Analysis: Keyed Malware | Huntress
Dive into a threat analysis with us as we dissect a PowerShell command with an environmentally keyed malware payload.
P0
2021-06-13 00:00 UTC
Other
Other
Privilege escalation on Dialogflow cloud platform
A privilege escalation vulnerability was discovered in Google's Dialogflow cloud platform. When downgrading a user's role from Developer to Reviewer, the permissions were not properly updated, allowing the user to retain Developer-level access. This issue persisted in the Google Cloud Console, where role changes resulted in additive permissions instead of replacements.
P10
2021-06-10 09:26 UTC
Other
Other
P0
2021-06-09 00:00 UTC
Security Journalism
Security Journalism
How Are Hackers Sneaking Past Your Automated Systems? | Huntress
Today’s hackers know how to outsmart automation and evade detection. Learn how managed threat detection and response can help you fight back.
P0
2021-06-08 00:00 UTC
Security Journalism
Security Journalism
Discovering a Ransomware Remedy in the Wild | Huntress
Our ThreatOps team details stumbling across Raccine, a ransomware remedy that works by hooking onto IFEO debuggers, for the first time.
P35
2021-06-03 08:14 UTC
Other
Other
FontPack: A dangerous update
Attribution secrets: Who is behind stealing credentials and bank card data by asking to install fake Flash Player, browser or font updates?
P0
2021-06-03 00:00 UTC
Other
Other
Elastic Beanstalk - XSS in Web Console
An adversary could gain access to IAM credentials in a victim's account, and make an API request to Elastic Beanstalk (even if they didn't have the proper IAM permissions). This request would be displayed in the management console in the Elastic Beanstalk section. Due to improper sanitization, an attacker could insert an XSS payload that would execute in a victim's browser.
P0
2021-06-03 00:00 UTC
Security Journalism
Security Journalism
How a College Student Lost $10,000 to "The IRS" | Huntress
In this testimonial, learn firsthand from one of our Security Awareness Consultants at Curricula about how a fake IRS phishing scam worked on one student.
P0
2021-06-01 00:00 UTC
Other
Other
OMIGOD
Azure forces the install of an agent on Linux VMs, which contained a vulnerability that would grant root RCE if an attacker could send a web request to them. Initially, Microsoft did not update the agent automatically, and so customers had to patch manually, but a few days later they began patching some services remotely.
P15
2021-06-01 00:00 UTC
Security Journalism
Security Journalism
Endpoint Protection: Promises vs. Reality | Huntress
An in-depth look at the differences between AV, NGAV and EDR. We’ll explore the promises endpoint protection tools make vs. their ability to keep them.
P0
2021-05-27 00:00 UTC
Security Journalism
Security Journalism
Understanding Your SMB Clients' Cybersecurity Needs
SMBs need more advanced cybersecurity. Learn about the tools you need to help guide your clients toward better threat detection and response.
P0
2021-05-25 00:00 UTC
Security Journalism
Security Journalism
Cyber Security Insurance Perspective on Ransomware | Huntress
Explore the impact of ransomware on cybersecurity insurance. Learn how insurance providers are adapting and what organizations need to know to stay protected.
P15
2021-05-25 00:00 UTC
Security Journalism
Security Journalism
Cobalt Strikes Again: An Analysis of Obfuscated Malware | Huntress
Join us for a threat hunting adventure as we analyze a suspicious run key that leads us to Cobalt Strike malware hidden across nearly 700 registry values.
P0
2021-05-18 00:00 UTC
Security Journalism
Security Journalism
7 Takeaways from the Executive Order on Improving Cybersecurity | Huntress
President Biden signed a 34-page Executive Order aimed at strengthening the nation’s cybersecurity standards. Here are the top seven takeaways.
P0
2021-05-14 09:09 UTC
Other
Other
BlackCat Ransomware: Tactics, Techniques & Mitigation Strategies
An analysis of the BlackCat ransomware affiliate program
P15
2021-05-12 00:00 UTC
Security Journalism
Security Journalism
What’s the Real Cost of Cybersecurity for Your SMB Clients? | Huntress
As hackers get smarter, you must evolve your approach to threat detection and response. Learn how to protect your clients with threat intelligence tools.
P0