Introducing MAX — Take supply chain cyber risk management to the MAX
Research
ResearchNewly-identified Vulnerability Affecting All Versions of Outlook for Windows
More DetailsCyber Threat Intelligence
ResearchNew Intrusion Campaign Targeting Users of Popular Business Communication Software
More DetailsCyber Threat Intelligence
ResearchInvestigations of Lazarus Group Indicators of Compromise Reveals Suspicious Traffic Involving State Government IP Addresses
More DetailsCyber Threat Intelligence
ResearchAttackers Exploit Windows Vulnerability to Deliver Nokoyawa Ransomware
On April 11, security researchers announced the discovery of CVE-2023-28252, a zero-day vulnerability under active exploitation by a sophisticated cybercriminal group. The vulnerability affects all versions of Windows and could therefore be quite widespread; however, a patch is available.
More DetailsCyber Threat Intelligence
ResearchNew APT29 – Attributed Phishing Activity Targets Diplomatic Services
On April 13, Poland’s Computer Emergency Response Team (CERT.PL) and Military Counterintelligence Service released a group of joint advisories regarding newly-observed espionage activity attributed to a Russia-linked threat actor group.
More DetailsCyber Threat Intelligence
ResearchCyber Risk Intelligence: Cold Storage and Logistics Disruption
On April 26, reports of a service disruption affecting a major cold storage and logistics firm surfaced.
More DetailsCyber Threat Intelligence
ResearchLockBit Group Claims Ransomware Attack Against Southeast Asian Bank
On May 8, the LockBit ransomware group claimed an attack against a major state-owned bank in Southeast Asia.
More DetailsCyber Threat Intelligence
ResearchRansomware Affiliates Exploit Recently-Discovered PaperCut Vulnerability
On April 26, security researchers announced the discovery of CVE-2023-27350 and CVE-2023-27351, vulnerabilities in the PaperCut print management software solution.
More DetailsCyber Threat Intelligence
ResearchESXiArgs Ransomware Campaign Targets VMWare ESXi Vulnerability
February 9, 2023More DetailsCyber Threat Intelligence
ResearchRansomware Attack Against U.S. Public Housing Authority Linked to Previous Attacks
February 9, 2023More DetailsDr. Robert Ames, Staff Threat Researcher
Cyber Threat Intelligence, Public Sector
ResearchIran-Attributed Exploitation of Log4Shell Vulnerability
January 6, 2023More DetailsDr. Robert Ames, Staff Threat Researcher
Cyber Threat Intelligence
ResearchCyber Risk Intelligence: LockBit 3.0 Ransomware Group Claims Defense Contractor Breach
January 12, 2023More DetailsDr. Robert Ames, Staff Threat Researcher
Attack Surface Management, Cyber Insurance, Cyber Threat Intelligence, Supply Chain Cyber Risk