2021-09-17 14:30 UTC
Other
Other
Scamdemic outbreak
Scammers attack users in Middle Eastern countries
P0
LATEST
Aggregated cybersecurity reporting, advisories and research. 5,281 matching records.
AUTO-POLL // 2026-10-21 11:45 UTC
CYBER INTEL TEMPERATURE
TODAY'S AGGREGATED INTELLIGENCE
COOL
COOL
WARM
ELEVATED
HOT
CRITICAL
P7 / P100
7-DAY C.I.T. REPORT
CYBER CONDITIONS // DAILY C.I.T. READINGS
TODAY → 6 DAYS AGO
TODAY
Oct 21
RANSOMWARE
P7
COOL // 30 ARTICLES
TUE
Oct 20
RANSOMWARE
P2
COOL // 63 ARTICLES
MON
Oct 19
RANSOMWARE
P3
COOL // 51 ARTICLES
SUN
Oct 18
RANSOMWARE
P2
COOL // 8 ARTICLES
SAT
Oct 17
ACTIVE EXPLOITATION
P4
COOL // 12 ARTICLES
FRI
Oct 16
RANSOMWARE
P8
COOL // 56 ARTICLES
THU
Oct 15
ACTIVE EXPLOITATION
P7
COOL // 87 ARTICLES
2021-09-17 00:00 UTC
Other
Other
GCP IAP bypass
Convincing a victim to click a specially crafted link would allow the attacker to bypass the Identity-Aware Proxy (a core component of BeyondCorp).
P0
2021-09-16 14:26 UTC
Other
Other
RUNLIR – phishing campaign targeting Netherlands
Phishers take an approach to bypass security controls never seen in the country
P0
2021-09-14 00:00 UTC
Security Journalism
Security Journalism
Should We Be Playing Offense or Defense in Cybersecurity? | Huntress
In this blog, we debate which is the best approach for IT professionals to beat hackers: offensive cybersecurity or defensive cybersecurity.
P0
2021-09-13 00:00 UTC
Other
Other
Azure privilege escalation via Log Analytics role
Azure AD users could escalate their privileges using the Log Analytics Contributor role to reach the full Subscription Contributor role.
P10
2021-09-10 00:00 UTC
Other
Other
Org policies bypass
Allows an attacker with privileges in the account to share resources outside of the account even when an org policy restricts this, thus enabling them to backdoor their access.
P0
2021-09-09 00:00 UTC
Other
Other
P0
2021-09-09 00:00 UTC
Security Journalism
Security Journalism
Threat Advisory: Hackers Are Exploiting CVE-2021-40444 | Huntress
Huntress is monitoring a new threat against Windows OS and Microsoft Office products (CVE-2021-40444). The MSHTML engine is vulnerable to arbitrary code execution.
P5
2021-09-07 00:00 UTC
Security Journalism
Security Journalism
Malware Deep Dive | Huntress
In this blog, read along as we investigate a malicious foothold and decode the payload step by step.
P0
2021-08-26 00:00 UTC
Other
Other
ChaosDB
Azure's Cosmos DB database service was vulnerable to remote account takeover. Any Azure user could gain full admin access to other customers' Cosmos DB instances without authorization. The vulnerability had a trivial exploit that doesn't require any previous access to the target environment.
P0
2021-08-26 00:00 UTC
Security Journalism
Security Journalism
ProxyShell vs. ProxyLogon: What's the Difference? | Huntress
We clarify the differences between the ProxyShell (August 2021) and the ProxyLogon (March 2021) exploits impacting Microsoft Exchange on-premises servers.
P0
2021-08-24 00:00 UTC
Security Journalism
Security Journalism
Bullseye: A Story of a Targeted Cyberattack | Huntress
Dive into a cyber threat analysis that details a sneaky enabler of a targeted cyberattack: persistence.
P0
2021-08-19 00:00 UTC
Security Journalism
Security Journalism
Microsoft Exchange Servers Still Vulnerable to ProxyShell | Huntress
Attackers are scanning for vulnerable Microsoft Exchange servers and abusing the latest line of Exchange vulnerabilities that were patched in early 2021.
P0
2021-08-17 00:00 UTC
Security Journalism
Security Journalism
Snakes on a Domain: An Analysis of a Python Malware Loader | Huntress
Join us on a threat analysis journey as we discover a very shady Python—and a very friendly RAT.
P0
2021-08-13 14:33 UTC
Other
Other
Under the hood. Group-IB Threat Intelligence. Part 2
How we make Tailored Threat Intelligence
P0
2021-08-11 00:00 UTC
Security Journalism
Security Journalism
A Brief Evolution of Hacker Tradecraft | Huntress
What can we learn from studying cybercriminals? Here’s a brief history of how hackers are evolving their tradecraft and attack tactics.
P0
2021-08-06 14:36 UTC
Other
Other
Bold ad campaign
AWC joins illicit carding business by offering 1 Mln compromised cards for free
P0
2021-08-06 07:28 UTC
Other
Other
P15
2021-08-05 12:39 UTC
Other
Other
Prometheus TDS
The key to success for Campo Loader, Hancitor, IcedID, and QBot
P0
2021-08-05 00:00 UTC
Other
Other
Lightsail object storage access keys logged
Lightsail object storage allows the creation of access keys which were logged to CloudTrail (both access key and secret key)
P0
2021-08-05 00:00 UTC
Security Journalism
Security Journalism
Breaking Down the Cost of Cybersecurity | Huntress
Learn about the costs of cybersecurity—and the risks of not having the right security stack—in this blog.
P0
2021-08-03 07:33 UTC
Other
Other
P0
2021-07-29 07:42 UTC
Other
Other
Under the hood. Group-IB Threat Intelligence. Part 1
Dive into Breached DB section
P0
2021-07-28 00:00 UTC
Security Journalism
Security Journalism
Lessons Learned During the Kaseya VSA Supply Chain Attack | Huntress
The Huntress team recaps what happened during the Kaseya VSA supply chain attack—and what we can learn from it.
P0
2021-07-26 00:00 UTC
Security Journalism
Security Journalism
The Age of Rapid-Response Managed Detection and Response | Huntress
We teamed up with our partners at Magna5 to talk about providing real-time prevention, detection and response.
P0
2021-07-22 07:45 UTC
Other
Other
P0
2021-07-21 00:00 UTC
Security Journalism
Security Journalism
Why Persistence Is a Staple for Today’s Hackers | Huntress
Learn how hackers use persistence to gain—and keep—access to your virtual environments.
P0
2021-07-20 00:00 UTC
Security Journalism
Security Journalism
The Hunt to Find Origins of Kaseya's VSA Mass Ransomware | Huntress
Our Security Researchers discuss how hackers executed the Kaseya VSA supply chain attack—and why the blast radius of the incident was relatively limited.
P15
2021-07-14 00:00 UTC
Security Journalism
Security Journalism
Experts Weigh in on the State of Email-Based Threats | Huntress
Cybersecurity experts John Hammond and Sébastien Goutal provide insider insight on the current state of phishing, ransomware and email-based attacks.
P15
2021-07-13 00:00 UTC
Security Journalism
Security Journalism
Huntress VSA Vaccine | Huntress
In this blog, we share details on the vaccine Huntress deployed to our partners to protect them from being infected by the Kaseya VSA ransomware attack.
P15