Introducing MAX — Take supply chain cyber risk management to the MAX
Research
ResearchInvestigation into Breached Australian Organizations
In mid-March, two Australian financial and professional services firms reported data breaches. These were followed by a series of cyber incidents affecting large Australian firms throughout 2022 and early 2023. As a result, some reporting on the incidents presented them as indications of systematic shortcomings in the country’s cyber defenses.
More DetailsCyber Threat Intelligence
ResearchInvestigation into Last Month’s Royal Ransomware Attack Against a City Government
On May 1, local media reported that a city government had suffered a disruption resulting from an attack claimed by the Royal ransomware group.
More DetailsCyber Threat Intelligence, Public Sector
ResearchLockBit Ransomware Group Claims Attack Against Prominent Taiwanese Semiconductor Firm
On June 29, the LockBit ransomware group added an entry for a major semiconductor manufacturer to its data leak site.
More DetailsAttack Surface Management, Cyber Insurance, Cyber Threat Intelligence, Supply Chain Cyber Risk
ResearchSecurityScorecard Identifies Possible Flax Typhoon Infrastructure
On August 24, Microsoft published its analysis of espionage activity it attributes to a new threat actor group tracked as Flax Typhoon, which it assesses to act on behalf of the People’s Republic of China.
More DetailsCyber Threat Intelligence
ResearchCyber Risk Intelligence Update: STRIKE Team Investigation Identifies Possible Flax Typhoon Links to Higher Education
Following Microsoft’s identification of Flax Typhoon, a new threat actor group believed to conduct espionage on behalf of the People’s Republic of China (PRC), the STRIKE Team used SecurityScorecard’s data to investigate the IoCs Microsoft supplied in its report. This investigation yielded a collection of new IP addresses featuring the same TLS certificates that Microsoft linked to Flax Typhoon.
More DetailsCyber Threat Intelligence, Public Sector
ResearchDaixin Team Ransomware Group Claimed Airline Ransomware Attack
More DetailsCyber Threat Intelligence, Public Sector
ResearchCyber Risk Intelligence: County Government Cyber Incident May Have Involved Social Engineering and Targeting of Vulnerable SSH Services
More DetailsDr. Rob Ames, Staff Threat Researcher
Cyber Threat Intelligence, Public Sector
ResearchSecurityScorecard Investigation and Response to New and Widespread OpenSSL 3.X Vulnerability
November 1, 2022More DetailsRob Ames, PhD, Staff Threat Researcher; Ryan Sherstobitoff, SVP of Threat Intelligence; Tien Phan, Staff Threat Researcher; Jared M. Smith, PhD, Senior Director of Threat Research; Ondřej Janda, Staff Software Engineer
ResearchMicrosoft ProxyNotShell Zero Days
Prepared by: Rob Ames, Staff Threat Researcher, Jared M. Smith, Ph.D., Senior Director of Threat Research, Ryan Sherstobitoff, SVP of Threat Intelligence
More Details
