2022-06-24 15:42 UTC
Other
Other
P0
LATEST
Aggregated cybersecurity reporting, advisories and research. 451 matching records.
AUTO-POLL // 2026-10-03 03:40 UTC
CYBER INTEL TEMPERATURE
TODAY'S AGGREGATED INTELLIGENCE
NO DATA
NO INTELLIGENCE AGGREGATED TODAY
7-DAY C.I.T. REPORT
CYBER CONDITIONS // DAILY C.I.T. READINGS
TODAY → 6 DAYS AGO
TODAY
Oct 3
NO DATA
--
NO INTEL
FRI
Oct 2
RANSOMWARE
P7
COOL // 46 ARTICLES
THU
Oct 1
RANSOMWARE
P8
COOL // 63 ARTICLES
WED
Sep 30
RANSOMWARE
P10
WARM // 59 ARTICLES
TUE
Sep 29
RANSOMWARE
P4
COOL // 68 ARTICLES
MON
Sep 28
RANSOMWARE
P7
COOL // 52 ARTICLES
SUN
Sep 27
RANSOMWARE
P25
ELEVATED // 15 ARTICLES
2022-04-26 00:00 UTC
Security Journalism
Security Journalism
Bring Your Own Command & Control (BYOC2)
Sometimes hackers can be overly confident in their malware. Take a journey with us through a malware sample that contains no obfuscation whatsoever.
P0
2022-04-25 12:00 UTC
Government
Government
Malware analysis report on SparrowDoor malware
A technical analysis of a new variant of the SparrowDoor malware.
P0
2022-03-08 00:00 UTC
Other
Other
Autopilot node compromise via allowlisted workload masquerade
Unit 42 researchers disclosed several vulnerabilities and attack techniques in GKE Autopilot to Google, the root cause being insufficient verification of allowlisted workload image names. An attacker with permissions to create a pod could have abused these vulnerabilities to (1) escape their pod and compromise the underlying node, (2) escalate privileges and become full cluster administrators, and (3) covertly persist administrative access through backdoors that are completely invisible to clus…
P0
2022-03-01 00:00 UTC
Security Journalism
Security Journalism
Targeted APT Activity: BABYSHARK Is Out for Blood | Huntress
We discovered malicious, targeted advanced persistent threat (APT) activity on a partner's system. Here, we dive into the BABYSHARK malware strain.
P0
2021-09-10 00:00 UTC
Other
Other
Org policies bypass
Allows an attacker with privileges in the account to share resources outside of the account even when an org policy restricts this, thus enabling them to backdoor their access.
P0
2021-09-07 00:00 UTC
Security Journalism
Security Journalism
Malware Deep Dive | Huntress
In this blog, read along as we investigate a malicious foothold and decode the payload step by step.
P0
2021-08-17 00:00 UTC
Security Journalism
Security Journalism
Snakes on a Domain: An Analysis of a Python Malware Loader | Huntress
Join us on a threat analysis journey as we discover a very shady Python—and a very friendly RAT.
P0
2021-07-02 07:51 UTC
Other
Other
P0
2021-06-15 00:00 UTC
Security Journalism
Security Journalism
ThreatOps Analysis: Keyed Malware | Huntress
Dive into a threat analysis with us as we dissect a PowerShell command with an environmentally keyed malware payload.
P0
2021-05-25 00:00 UTC
Security Journalism
Security Journalism
Cobalt Strikes Again: An Analysis of Obfuscated Malware | Huntress
Join us for a threat hunting adventure as we analyze a suspicious run key that leads us to Cobalt Strike malware hidden across nearly 700 registry values.
P0
2021-05-04 00:00 UTC
Security Journalism
Security Journalism
From PowerShell to Payload: An Analysis of Weaponized Malware | Huntress
In this blog, we look at some malicious PowerShell code breadcrumbs that one hacker left behind to unravel how they maintained access during a cyberattack.
P0
2021-03-31 00:00 UTC
Security Journalism
Security Journalism
Top Takeaways from hack_it 2021 | Huntress
A recap of hack_it 2021, a virtual security training event packed with interactive exercises, malware analysis, hacking workshops and more.
P0
2021-03-09 00:00 UTC
Security Journalism
Security Journalism
Peeling Back the Layers of .NET Malware
Hackers always try to cover up their tracks. In this blog, we step through layers of obfuscation to uncover the real intent of a .NET malware sample.
P0
2021-02-09 00:00 UTC
Security Journalism
Security Journalism
Malware Deep Dive: Examining A PowerShell Payload | Huntress
To avoid detection, hackers often turn a system’s own tools against itself. Here, we examine a malicious payload that was executed using PowerShell.
P0
2021-01-12 00:00 UTC
Security Journalism
Security Journalism
Malware Under The Microscope: Manual Analysis
Learn manual malware analysis techniques used by threat researchers. Explore static & dynamic analysis, reverse engineering tools, and real-world investigation methods.
P0
2020-12-14 00:00 UTC
Security Journalism
Security Journalism
Supply Chain Exploitation of SolarWinds Orion Software | Huntress
Huntress covers the breaking news about Solarwinds’ Orion platform being exploited as part of a coordinated attack to distribute malware.
P0
2020-12-07 09:23 UTC
Other
Other
The footprints of Raccoon
A story about operators of JS-sniffer FakeSecurity distributing Raccoon stealer
P0
2020-11-24 00:00 UTC
Security Journalism
Security Journalism
Tried and True Hacker Technique: DOS Obfuscation | Huntress
In this blog, we dissect a sample of malware that makes clever use of batch scripting obfuscation—turns out it was a launcher for TrickBot!
P0
2020-10-22 00:00 UTC
Security Journalism
Security Journalism
Cybersecurity Lessons We Learned from hack_it 2020 | Huntress
A recap of hack_it 2020, a virtual security training event packed with interactive exercises, malware research and analysis, and more.
P0
2020-08-20 00:00 UTC
Security Journalism
Security Journalism
Hiding in Plain Sight: Part 2
As a follow-up to our previous post, we recently uncovered a really peculiar piece of malware that works through a lot of different layers of abstraction.
P0
2020-07-05 13:51 UTC
Other
Other
Digital forensics specialist’s bookshelf
Top 11 books on digital forensics, incident response, and malware analysis
P0
2020-05-29 13:54 UTC
Other
Other
P0
2019-05-24 00:00 UTC
Other
Other
VPC Hosted Zones unauditable
For 6 years, it was not possible to see what hosted zones an attacker may have created in an account. This issue could be viewed as a business decision that adding the ability to viewing this data was not worthwhile, but the delay is significant and would allow someone that had compromised an environment to maintain a backdoor.
P0
2019-05-08 14:48 UTC
Other
Other
P0
2019-04-04 15:25 UTC
Other
Other
Gustuff: Weapon of Mass Infection
Android Trojan named «Gustuff» capable of targeting more than 100 global banking apps, a number of cryptocurrency and marketplace applications
P0
2018-05-29 20:00 UTC
Security Journalism
Security Journalism
Potentially Unwanted Programs: It's Not Always Malware | Huntress
Regardless of your daily duties, we’ve all encountered annoying ads, unwanted pop-ups, or generically named rogue applications. These nuisances, commonly called Potentially Unwanted Programs (PUP), are often unknowingly installed when downloading free software.
P0
2017-08-25 14:00 UTC
Security Journalism
Security Journalism
MSP Moment | Huntress
Over the past month, the Emotet family of malware has re-emerged as a formidable piece of crimeware, thanks to its new self-propagation techniques (undoubtedly inspired by the success of WannaCry and Petya).
P0
2017-08-04 13:34 UTC
Other
Other
Kronos devouring its children
The man who "saved the world" from the WannaCry outbreak has been arrested on suspicion of being the author of Kronos banking Trojan
P0
2017-07-17 17:00 UTC
Security Journalism
Security Journalism
Redosdru — Encrypting DLL Payloads to Avoid On-Disk Signatures
Dive deep into Redosdru malware analysis, unpacking encrypted DLLs, keylogging behavior, and how Huntress defenders detect and respond.
P0