Threat Intelligence - Security Ticks

CISA Adds Three Critical Vulnerabilities to Known Exploited Vulnerabilities Catalog

All, CVE-2016-3714, CVE-2017-1000253, cybercriminals, Threat Intelligence, vulnerability / SecurityTicks

CISA Adds Three Critical Vulnerabilities to Known Exploited Vulnerabilities Catalog 2024-09-10 at 18:01 By dakshsharma16 Key Takeaways Overview The Cybersecurity and Infrastructure Security Agency (CISA) has recently updated its Known Exploited Vulnerabilities (KEV) Catalog by adding three new vulnerabilities. These newly identified flaws represent significant security risks and are actively being exploited by malicious actors. […]

React to this headline:

CISA Adds Three Critical Vulnerabilities to Known Exploited Vulnerabilities Catalog Read More »

Trustwave SpiderLabs Research: Phishing Behind 49% Attacks Against Financial Institutions

Reports, Security Research, Threat Intelligence / SecurityTicks

Trustwave SpiderLabs Research: Phishing Behind 49% Attacks Against Financial Institutions 2024-09-10 at 16:01 By The 2024 Trustwave Risk Radar Report: Financial Services Sector underscores the escalating threat landscape facing the industry. This article is an excerpt from Trustwave Blog View Original Source React to this headline:

React to this headline:

Trustwave SpiderLabs Research: Phishing Behind 49% Attacks Against Financial Institutions Read More »

Trustwave SpiderLabs Research: 20% of Ransomware Attacks in Financial Services Target Banking Institutions

Reports, Security Research, Threat Intelligence / SecurityTicks

Trustwave SpiderLabs Research: 20% of Ransomware Attacks in Financial Services Target Banking Institutions 2024-09-10 at 16:01 By The 2024 Trustwave Risk Radar Report: Financial Services Sector underscores the escalating threat landscape facing the industry. This article is an excerpt from SpiderLabs Blog View Original Source React to this headline:

React to this headline:

Trustwave SpiderLabs Research: 20% of Ransomware Attacks in Financial Services Target Banking Institutions Read More »

Weekly IT Vulnerability Report for August 28, 2024 – September 03, 2024

All, Threat Intelligence, vulnerability / SecurityTicks

Weekly IT Vulnerability Report for August 28, 2024 – September 03, 2024 2024-09-10 at 10:31 By dakshsharma16 Key Takeaways: Overview This Weekly Vulnerability Intelligence Report explores vulnerability updates between August 28 to September 3. The CRIL team investigated 13 vulnerabilities this week, among other disclosed issues, to present critical, high, and medium insights. This comprehensive

React to this headline:

Weekly IT Vulnerability Report for August 28, 2024 – September 03, 2024 Read More »

Hypervisor Development in Rust for Security Researchers (Part 1)

Security Research, Threat Intelligence, Tips & Tricks, Vulnerabilities / SecurityTicks

Hypervisor Development in Rust for Security Researchers (Part 1) 2024-09-06 at 23:31 By memN0ps In the ever-evolving field of information security, curiosity and continuous learning drive innovation. This article is an excerpt from SpiderLabs Blog View Original Source React to this headline:

React to this headline:

Hypervisor Development in Rust for Security Researchers (Part 1) Read More »

Cybersecurity Threat Briefing for Organizations Under the SOCI in Australia

Compliance, Government, Threat Intelligence / SecurityTicks

Cybersecurity Threat Briefing for Organizations Under the SOCI in Australia 2024-09-06 at 16:18 By Grant Hutchons The Security of Critical Infrastructure (SOCI) Act in Australia mandates that organizations operating within critical infrastructure sectors implement robust cybersecurity measures to protect against an increasingly diverse and sophisticated range of cyber threats. This article is an excerpt from

React to this headline:

Cybersecurity Threat Briefing for Organizations Under the SOCI in Australia Read More »

Trustwave Named Frost & Sullivan Company of the Year

Managed Detection and Response, News, Spotlights, Threat Intelligence / SecurityTicks

Trustwave Named Frost & Sullivan Company of the Year 2024-09-05 at 16:01 By Trustwave has received the Frost & Sullivan Excellence in Best Practices Company of the Year Award in the Americas Managed Security Services (MSS) market, recognizing Trustwave as being at the forefront of innovation and growth in this category. This article is an excerpt from

React to this headline:

Trustwave Named Frost & Sullivan Company of the Year Read More »

Phishing and Ransomware: How Threat Actors Attack the Financial Services Sector

data breach, Managed Detection and Response, penetration testing, Reports, Security Research, Threat Intelligence / SecurityTicks

Phishing and Ransomware: How Threat Actors Attack the Financial Services Sector 2024-09-04 at 16:01 By Trustwave SpiderLabs is prepped to launch its newest threat intelligence research, the 2024 Trustwave Risk Radar Report: Financial Services Sector. The upcoming report, which is set to be released on September 10, promises to be an indispensable resource for cybersecurity

React to this headline:

Phishing and Ransomware: How Threat Actors Attack the Financial Services Sector Read More »

CERT-In Advisory and WikiLoader Campaign: Comprehensive Overview of Recent Security Threats

All, Palo Alto Networks, Threat Intelligence, vulnerability / SecurityTicks

CERT-In Advisory and WikiLoader Campaign: Comprehensive Overview of Recent Security Threats 2024-09-03 at 18:46 By dakshsharma16 CERT-In’s advisory on Palo Alto Networks vulnerabilities and WikiLoader’s fake GlobalProtect installers highlight major security risks. Key Takeaways Overview CERT-In’s recent advisory and the emergence of WikiLoader malware highlight pressing security concerns involving Palo Alto Networks applications and new

React to this headline:

CERT-In Advisory and WikiLoader Campaign: Comprehensive Overview of Recent Security Threats Read More »

Iranian State-Sponsored Hackers Have Become Access Brokers for Ransomware Gangsca

Pioneer Kitten, Ransomware, Threat Intelligence / SecurityTicks

Iranian State-Sponsored Hackers Have Become Access Brokers for Ransomware Gangsca 2024-09-02 at 20:01 By dakshsharma16 Iranian state-backed actors operating under aliases like “Pioneer Kitten” are increasingly targeting critical infrastructure – and expanding their activities into brokering access for ransomware affiliates. Key Takeaways Overview They move silently across networks, leveraging every vulnerability left unpatched, exploiting gaps

React to this headline:

Iranian State-Sponsored Hackers Have Become Access Brokers for Ransomware Gangsca Read More »

Weekly IT Vulnerability Report: Cyble Researchers Find Nearly 1 Million Exposed Fortinet, SonicWall Devices

darkweb, Fortra, SonicWall, Threat Intelligence, Traccar, vulnerability / SecurityTicks

Weekly IT Vulnerability Report: Cyble Researchers Find Nearly 1 Million Exposed Fortinet, SonicWall Devices 2024-08-30 at 16:31 By dakshsharma16 Key Takeaways Overview Cyble’s weekly vulnerability report for August 21-27 found the highest number of exposed vulnerable assets in nearly three months, since a widespread PHP vulnerability was found in early June. Cyble researchers found more

React to this headline:

Weekly IT Vulnerability Report: Cyble Researchers Find Nearly 1 Million Exposed Fortinet, SonicWall Devices Read More »

Critical Advisory on RansomHub Ransomware: A Comprehensive Analysis and Mitigation Guide

RansomHub, Ransomware, Threat Intelligence, Zero Day Vulnerability / SecurityTicks

Critical Advisory on RansomHub Ransomware: A Comprehensive Analysis and Mitigation Guide 2024-08-30 at 16:16 By dakshsharma16 Key Takeaways Overview On August 29, 2024, a joint advisory was issued by the Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), Multi-State Information Sharing and Analysis Center (MS-ISAC), and the Department of Health and Human

React to this headline:

Critical Advisory on RansomHub Ransomware: A Comprehensive Analysis and Mitigation Guide Read More »

Trustwave Named the Innovation Leader by Frost & Sullivan for the Americas and Europe

Managed Detection and Response, News, SIEM/SOC, Spotlights, Threat Intelligence / SecurityTicks

Trustwave Named the Innovation Leader by Frost & Sullivan for the Americas and Europe 2024-08-28 at 16:01 By The analyst firm Frost & Sullivan has recognized Trustwave with the dual honors of being positioned as the Innovation leader in its 2024 Managed Security Services (MSS) Radar, Americas, and 2024 MSS Radar, Europe, the second time

React to this headline:

Trustwave Named the Innovation Leader by Frost & Sullivan for the Americas and Europe Read More »

CVE-2024-39717 Exposes Critical Vulnerability in Versa Director

Threat Intelligence, vulnerability / SecurityTicks

CVE-2024-39717 Exposes Critical Vulnerability in Versa Director 2024-08-28 at 16:01 By dakshsharma16 Meta description: CISA warns of CVE-2024-39717 in Versa Director, urging updates to version 22.1.4, MFA usage, and strengthening network security to prevent exploitation. Key Takeaways Overview The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added a new vulnerability to its Known

React to this headline:

CVE-2024-39717 Exposes Critical Vulnerability in Versa Director Read More »

Check Point to Acquire External Cyber Risk Management Firm Cyberint

Acquisition, Check Point, Funding/M&A, M&A Tracker, Threat Intelligence / SecurityTicks

Check Point to Acquire External Cyber Risk Management Firm Cyberint 2024-08-28 at 16:01 By Mike Lennon Check Point says the acquisition will enhance its own SOC capabilities and expand its managed threat intelligence offerings. The post Check Point to Acquire External Cyber Risk Management Firm Cyberint appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Check Point to Acquire External Cyber Risk Management Firm Cyberint Read More »

Cloud Storage Bucket Security: PII Leak Brings Renewed Focus to Storage Bucket Access Controls

Data leak, Google Cloud Storage, Threat Intelligence / SecurityTicks

Cloud Storage Bucket Security: PII Leak Brings Renewed Focus to Storage Bucket Access Controls 2024-08-27 at 18:16 By dakshsharma16 Key Takeaways Overview A Google Cloud Storage bucket leak has brought renewed attention to the risk of misconfigured cloud storage buckets, one of the most common cloud security issues and causes of data leaks. Alice’s Table,

React to this headline:

Cloud Storage Bucket Security: PII Leak Brings Renewed Focus to Storage Bucket Access Controls Read More »

High-Risk CVE-2024-7965 Vulnerability in Chrome’s V8 Engine Requires Quick Fix

CVE-2024-7965, Google Chrome, Threat Intelligence, vulnerability / SecurityTicks

High-Risk CVE-2024-7965 Vulnerability in Chrome’s V8 Engine Requires Quick Fix 2024-08-27 at 17:31 By dakshsharma16 Key Takeaways Overview CISA has recently added a type of confusion vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. This flaw affects the popular Google Chrome browser and potentially other Chromium-based browsers. It poses a serious risk and has been

React to this headline:

High-Risk CVE-2024-7965 Vulnerability in Chrome’s V8 Engine Requires Quick Fix Read More »

Exposed and Encrypted: Inside a Mallox Ransomware Attack

data breach, Emerging Threats, Security Research, Threat Intelligence / SecurityTicks

Exposed and Encrypted: Inside a Mallox Ransomware Attack 2024-08-27 at 16:16 By Bernard Bautista Recently, a client enlisted the support of Trustwave to investigate an unauthorized access incident within its internal cloud-based environment, leading to the deployment of Mallox ransomware by threat actors to its server. This article is an excerpt from SpiderLabs Blog View

React to this headline:

Exposed and Encrypted: Inside a Mallox Ransomware Attack Read More »

Trustwave Data Reveals HTML Attachments, QR Codes, and BEC as Top Email Attack Vectors

Database Protection, email security, Emerging Threats, Reports, Threat Intelligence / SecurityTicks

Trustwave Data Reveals HTML Attachments, QR Codes, and BEC as Top Email Attack Vectors 2024-08-26 at 16:01 By The Trustwave SpiderLabs team regularly collects a trove of data while protecting clients from email-based attacks. HTML attachments, malicious QR codes, and business email compromise (BEC) are the favored attack methods. This article is an excerpt from Trustwave Blog

React to this headline:

Trustwave Data Reveals HTML Attachments, QR Codes, and BEC as Top Email Attack Vectors Read More »

Trustwave Earns Dual Honors in ISG’s 2024 Provider Lens™ Quadrant Reports

DFIR, Managed Detection and Response, SIEM/SOC, Threat Intelligence / SecurityTicks

Trustwave Earns Dual Honors in ISG’s 2024 Provider Lens™ Quadrant Reports 2024-08-21 at 16:01 By Trustwave was awarded a pair of honors from the industry analyst firm ISG, being named a Leader in the US for Managed Security Services – SOC (Midmarket) and as a Rising Star in the UK for Managed Security Services – SOC (Midmarket) in ISG’s

React to this headline:

Trustwave Earns Dual Honors in ISG’s 2024 Provider Lens™ Quadrant Reports Read More »