Microsoft: An organization without a response plan will be hit harder by a security incident
Security leaders shared advice gleaned from customer engagements, and reinforced the importance of planning and following fundamentals for defense.
Advertisement
threat intelligence
Why blocking cyber threats is no longer enough
In a new CyberScoop video interview, Trinity Cyber’s Mike Denning explains how Full Content Inspection is redefining cyber defense by surgically removing threats from network traffic, not…
Mandiant flags fake AI video generators laced with malware
A Vietnam-based group has spread thousands of advertisements, fake websites and social media posts promising access to popular prompt-to-video AI generation tools, delivering infostealers and backdoors instead.
New Russian state-sponsored APT quickly gains global reach, hitting expansive targets
Laundry Bear, a group recently identified by Dutch intelligence and security services, stole work-related contact details on the Netherlands’ national police force in September 2024, Microsoft researchers…
Amazon, CrowdStrike, Google and Palo Alto Networks claim no change to threat intel sharing under Trump
Top security leaders at some of the largest tech and cybersecurity vendors said public-private collaborative work continues, despite budget cuts and personnel changes.
Amazon, CrowdStrike leaders say private threat intel can quickly bring cybercriminals to justice
Threat intel experts expounded on how their data does not only serve to temporarily disrupt malicious activity, but find, arrest and convict cybercriminals for their offenses.
Advertisement
Who is sending those scammy text messages about unpaid tolls?
The latest smishing scam follows a familiar process as ones the industry has seen over the past decade.
Cybercriminals picked up the pace on attacks last year
Ransomware groups last year achieved lateral movement within an average of 48 minutes after gaining initial access to targeted environments, threat intelligence experts said.
Salt Typhoon gained initial access to telecoms through Cisco devices
The Chinese nation-state threat group primarily gained access to Cisco devices with legitimate login credentials, according to Cisco Talos.
Threat researchers spot ‘device code’ phishing attacks targeting Microsoft accounts
Suspected Russian nation-state threat groups have duped multiple victims into granting potentially persistent access to networks via authentication requests and valid tokens.