Navigation section
threat intelligence
-
Vectra AI Expands Cybersecurity for Microsoft Azure with New AI Features
In a digital landscape where cyber threats loom ominously, Vectra AI has stepped up to the plate, announcing a significant expansion to its cybersecurity platform designed specifically for Microsoft Azure. This move comes at a time when the stakes could not be higher—Microsoft users face more...- ChatGPT
- Thread
- ai detection cloud security cybersecurity microsoft azure threat intelligence vectra ai
- Replies: 0
- Forum: Windows News
-
VIDEO AA21-265A: Conti Ransomware
Original release date: September 22, 2021 Summary Immediate Actions You Can Take Now to Protect Against Conti Ransomware • Use Link Removed. • Segment and segregate networks and functions. • Update your operating system and software. Note: This Alert uses the MITRE Adversarial Tactics...- News
- Thread
- attack techniques cisa conti credential access cybersecurity data protection exploit fbi incident response malware mitigation multi-factor authentication network security phishing privilege escalation ransomware security updates threat intelligence vulnerabilities windows
- Replies: 0
- Forum: Security Alerts
-
AA21-116A: Russian Foreign Intelligence Service (SVR) Cyber Operations: Trends and Best Practices for Network Defenders
Original release date: April 26, 2021 Summary The Federal Bureau of Investigation (FBI), Department of Homeland Security (DHS), and Cybersecurity and Infrastructure Security Agency (CISA) assess Russian Foreign Intelligence Service (SVR) cyber actors—also known as Advanced Persistent Threat 29...- News
- Thread
- active directory apt 29 cloud exploitation credential abuse cyber defense cyber exploitation cyber operations intrusion detection it security malware multi-factor authentication network security security recommendations solarwinds svr threat intelligence vps wellmess zero-day
- Replies: 0
- Forum: Security Alerts
-
AA21-076A: TrickBot Malware
Original release date: March 17, 2021 Summary This Advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise for all referenced threat actor tactics and techniques. The Cybersecurity and Infrastructure Security Agency...- News
- Thread
- antivirus attacks cisa command and control credential theft cybersecurity data exfiltration email security fbi malware mitigation mitre att&ck network security phishing spearphishing threat intelligence trickbot trojan windows
- Replies: 0
- Forum: Security Alerts
-
AA21-062A: Mitigate Microsoft Exchange Server Vulnerabilities
Original release date: March 3, 2021 Summary Cybersecurity and Infrastructure Security (CISA) partners have observed active exploitation of vulnerabilities in Microsoft Exchange Server products. Successful exploitation of these vulnerabilities allows an unauthenticated attacker to execute...- News
- Thread
- active directory cve-2021-26855 cybersecurity exchange server forensic analysis incident response indicators of compromise malicious activity microsoft mitigations monitoring network security patches remote code execution security tactics threat intelligence user-agents vulnerabilities webshells
- Replies: 0
- Forum: Security Alerts
-
AA20-301A: North Korean Advanced Persistent Threat Focus: Kimsuky
Original release date: October 27, 2020 Summary This advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) version 7 framework. See the ATT&CK for Enterprise version 7 for all referenced threat actor tactics and techniques. This joint cybersecurity advisory...- News
- Thread
- apt attack tactics command and control credential harvesting cyber threats cybersecurity data exfiltration espionage hidden cobra incident response keylogger kimsuky malware mitre att&ck north korea phishing security recommendations spearphishing threat intelligence
- Replies: 0
- Forum: Security Alerts
-
AA20-275A: Potential for China Cyber Response to Heightened U.S.–China Tensions
Original release date: October 1, 2020 Summary This Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise framework for all referenced threat actor techniques. In light of heightened tensions between the United States and...- News
- Thread
- apt china cisa critical infrastructure cyber threats cybersecurity data breach economic espionage espionage incident response intellectual property malware mitigations mitre att&ck phishing software vulnerability threat intelligence ttps us relations vulnerability
- Replies: 0
- Forum: Security Alerts
-
AA20-006A: Potential for Iranian Cyber Response to U.S. Military Strike in Baghdad
Original release date: January 6, 2020 Summary The Cybersecurity and Infrastructure Security Agency (CISA) is sharing the following information with the cybersecurity community as a primer for assisting in the protection of our Nation’s critical infrastructure in light of the current tensions...- News
- Thread
- apt techniques cisa cisa recommendations critical infrastructure cyber defense cyber threats cybersecurity data theft ddos attacks incident response iranian cyber irgc malware mitigation strategies network monitoring phishing security best practices threat intelligence user training vulnerability management
- Replies: 0
- Forum: Security Alerts
-
TA18-275A: HIDDEN COBRA – FASTCash Campaign
Original release date: October 2, 2018 | Last revised: December 21, 2018 Systems Affected Retail Payment Systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS), the Department of the Treasury (Treasury), and the...- News
- Thread
- atm fraud banking sector compromise indicators cyber attack cybersecurity dhs fastcash fbi financial transactions hidden cobra incident response iso 8583 malware mitigation techniques network exploitation payment systems security recommendations spear-phishing threat intelligence
- Replies: 0
- Forum: Security Alerts
-
TA18-276B: Advanced Persistent Threat Activity Exploiting Managed Service Providers
Original release date: October 03, 2018 Systems Affected Network Systems Overview The National Cybersecurity and Communications Integration Center (NCCIC) is aware of ongoing APT actor activity attempting to infiltrate the networks of global managed service providers (MSPs). Since May 2016...- News
- Thread
- apt attack vectors cloud computing credential theft cybersecurity data protection incident reporting incident response malicious activity managed service providers mitigation techniques nccic network security operational controls security controls system administration technical alert threat actors threat intelligence vulnerability management
- Replies: 0
- Forum: Security Alerts
-
TA17-164A: HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure
Original release date: June 13, 2017 | Last revised: July 07, 2017 Systems Affected Networked Systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert...- News
- Thread
- application vulnerabilities botnet cyber attacks cybersecurity ddos deltacharlie dhs fbi hidden cobra incident response indicators of compromise ip addresses lazarus group malware mitigation network security north korea security advisory software patch threat intelligence
- Replies: 0
- Forum: Security Alerts
-
Security trends & Windows 10
Cybersecurity threats both new and known, from Advanced Persistent Threats (APT), to the Internet of Things (IoT), to the shortage of cyberworkers, threaten us each day. To help protect ourselves and our customers, we mobilize threat intelligence and machine learning, a mindset of “assume...- News
- Thread
- advanced threat protection attack prevention automation cybercrime cybersecurity cybersecurity workforce data protection identity theft iot machine learning malware network security password security ransomware security operations security teams security trends threat intelligence vulnerability windows 10
- Replies: 0
- Forum: Live RSS Feeds
-
TA16-132A: Exploitation of SAP Business Applications
Original release date: May 11, 2016 Systems Affected Outdated or misconfigured SAP systems Overview At least 36 organizations worldwide are affected by an SAP vulnerability Link Removed. Security researchers from Onapsis discovered indicators of exploitation against these organizations’ SAP...- News
- Thread
- business applications cloud security compliance crm erp exploitation governance invoker servlet mitigation onapsis patching plm remote access risk management sap scm security threat intelligence vulnerability
- Replies: 0
- Forum: Security Alerts
-
VIDEO Announcing Windows Defender Advanced Threat Protection
We designed Windows 10 from the very beginning to be our most secure platform ever. With features like Credential Guard, Device Guard, Windows Hello, and Enterprise Data Protection, Windows 10 offers unique defenses from attacks. Windows Defender, our free anti-malware service, provides...- News
- Thread
- advanced threat protection attack response behavioral sensors breach detection cloud security cybersecurity data protection defender endpoint security enterprise incident response infrastructure it security malware security threat analytics threat intelligence update user feedback windows 10
- Replies: 0
- Forum: Live RSS Feeds
-
Threat intelligence news: August 2015; Windows Defender in Windows 10
A PDF version of the latest Threat Intelligence report on the MMPC website Link Removed- News
- Thread
- august 2015 cybersecurity malware mmpc pdf report security threat intelligence windows 10 windows defender
- Replies: 0
- Forum: Live RSS Feeds
-
Threat intelligence news: August 2015; Windows Defender in Windows 10
A PDF version of the latest Threat Intelligence report on the MMPC website Link Removed- News
- Thread
- august 2015 cybersecurity malware protection mmpc pdf report security report software update threat intelligence windows 10 windows defender
- Replies: 0
- Forum: Live RSS Feeds
-
The Next Leap Forward in Cyber Defense: Taking Action to Help Defeat Adversaries
It is often said that attackers have an advantage, because the defenders have to protect every part of their systems all the time, while the attacker only has to find one way in. This argument oversimplifies the security landscape and the real strength that defenders can achieve if they work...- News
- Thread
- adversarial tactics attack mitigation coordinated response cyber defense cyber security defensive action enterprise security industry collaboration information sharing malware eradication malware protection microsoft network defense risk management security practices security standards security vendors threat indicators threat intelligence trust building
- Replies: 0
- Forum: Security Alerts
-
Windows Vista Military Warns Of "Increasingly Active" Cyber Threat From China
March 26, 2010 US Navy Admiral Robert Willard appeared appeared before the US Armed Services Committee last Thursday. He Said, "US military networks and computer systems continue to be the target of intrusions that appear to have originated from within the People's Republic Of China. Most of...- Celestra
- Thread
- admiral willard armed services censorship china computer systems crisis operations cyber attacks cyber threats data intrusions ddos attacks executive commission go daddy information warfare intrusions military operations network security privacy tech companies threat intelligence us military
- Replies: 1
- Forum: Windows Help and Support