Russian threat actors have once again raised the bar for cyber espionage, turning attention toward OAuth 2.0 authentication flows in Microsoft 365, hijacking accounts connected to Ukraine and human rights organizations. Their tactics, as uncovered by cybersecurity firm Volexity, fit into a...
It sounds like a James Bond plot conceived by an AI fever dream: a Chinese hacking outfit, IronHusky, wielding a slick new RAT (Remote Access Trojan) to sneak through the digital halls of Russian and Mongolian government networks. Yet, as the world’s attention flits from one cyber scandal to the...
In a striking demonstration of cybercrime ingenuity, a sophisticated Chinese APT group—known as Mustang Panda—has been found exploiting a legitimate Windows tool to slip past antivirus defenses. This emerging threat, uncovered by threat researchers at Trend Micro, involves the abuse of...
Original release date: May 5, 2020
Summary
This is a joint alert from the United States Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre (NCSC).
CISA and NCSC continue to see indications that...
Original release date: May 5, 2020
Summary
This is a joint alert from the United States Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre (NCSC).
CISA and NCSC continue to see indications that...
Original release date: April 8, 2020
Summary
This is a joint alert from the United States Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre (NCSC).
This alert provides information on...