Tag: cyber threat actors
-
Cisco Talos Blog: What happened in Vegas (that you actually want to know about)
Source URL: https://blog.talosintelligence.com/what-happened-in-vegas-that-you-actually-want-to-know-about/ Source: Cisco Talos Blog Title: What happened in Vegas (that you actually want to know about) Feedly Summary: Hazel braves Vegas, overpriced water and the Black Hat maze to bring you Talos’ latest research — including a deep dive into the PS1Bot malware campaign. AI Summary and Description: Yes Summary: This newsletter…
-
Cloud Blog: Top 25 blogs of 2025… so far
Source URL: https://cloud.google.com/blog/products/gcp/most-read-blogs-from-h1-2025/ Source: Cloud Blog Title: Top 25 blogs of 2025… so far Feedly Summary: Six months into 2025, we’ve already published hundreds of posts here on the Google Cloud blog. We asked ourselves, why wait until the busy end of the year to review your favorites? With everything from new AI models, product…
-
The Register: UK uncovers novel Microsoft snooping malware, blames and sanctions GRU cyberspies
Source URL: https://www.theregister.com/2025/07/20/uk_microsoft_snooping_russia/ Source: The Register Title: UK uncovers novel Microsoft snooping malware, blames and sanctions GRU cyberspies Feedly Summary: Fancy Bear can’t keep its claws out of Outlook inboxes The UK government is warning that Russia’s APT28 (also known as Fancy Bear or Forest Blizzard) has been deploying previously unknown malware to harvest Microsoft…
-
Cloud Blog: Cloud CISO Perspectives: The global threats facing EU healthcare
Source URL: https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-global-threats-eu-healthcare/ Source: Cloud Blog Title: Cloud CISO Perspectives: The global threats facing EU healthcare Feedly Summary: Welcome to the second Cloud CISO Perspectives for June 2025. Today, Thiébaut Meyer and Bhavana Bhinder from Google Cloud’s Office of the CISO discuss our work to help defend European healthcare against cyberattacks.As with all Cloud CISO…
-
Microsoft Security Blog: Threat actors misuse Node.js to deliver malware and other malicious payloads
Source URL: https://www.microsoft.com/en-us/security/blog/2025/04/15/threat-actors-misuse-node-js-to-deliver-malware-and-other-malicious-payloads/ Source: Microsoft Security Blog Title: Threat actors misuse Node.js to deliver malware and other malicious payloads Feedly Summary: Since October 2024, Microsoft Defender Experts has observed and helped multiple customers address campaigns leveraging Node.js to deliver malware and other payloads that ultimately lead to information theft and data exfiltration. The post Threat…
-
Microsoft Security Blog: Silk Typhoon targeting IT supply chain
Source URL: https://www.microsoft.com/en-us/security/blog/2025/03/05/silk-typhoon-targeting-it-supply-chain/ Source: Microsoft Security Blog Title: Silk Typhoon targeting IT supply chain Feedly Summary: Silk Typhoon is a Chinese state actor focused on espionage campaigns targeting a wide range of industries in the US and throughout the world. In recent months, Silk Typhoon has shifted to performing IT supply chain attacks to gain…
-
The Register: Russia’s Sandworm caught snarfing credentials, data from American and Brit orgs
Source URL: https://www.theregister.com/2025/02/12/russias_sandworm_caught_stealing_credentials/ Source: The Register Title: Russia’s Sandworm caught snarfing credentials, data from American and Brit orgs Feedly Summary: ‘Near-global’ initial access campaign active since 2021 An initial-access subgroup of Russia’s Sandworm last year wriggled its way into networks within the US, UK, Canada and Australia, stealing credentials and data from “a limited number…
-
Cloud Blog: Cybercrime: A Multifaceted National Security Threat
Source URL: https://cloud.google.com/blog/topics/threat-intelligence/cybercrime-multifaceted-national-security-threat/ Source: Cloud Blog Title: Cybercrime: A Multifaceted National Security Threat Feedly Summary: Executive Summary Cybercrime makes up a majority of the malicious activity online and occupies the majority of defenders’ resources. In 2024, Mandiant Consulting responded to almost four times more intrusions conducted by financially motivated actors than state-backed intrusions. Despite this…
-
Cloud Blog: Adversarial Misuse of Generative AI
Source URL: https://cloud.google.com/blog/topics/threat-intelligence/adversarial-misuse-generative-ai/ Source: Cloud Blog Title: Adversarial Misuse of Generative AI Feedly Summary: Rapid advancements in artificial intelligence (AI) are unlocking new possibilities for the way we work and accelerating innovation in science, technology, and beyond. In cybersecurity, AI is poised to transform digital defense, empowering defenders and enhancing our collective security. Large language…
-
Alerts: Fortinet Releases Security Updates for Multiple Products
Source URL: https://www.cisa.gov/news-events/alerts/2025/01/14/fortinet-releases-security-updates-multiple-products Source: Alerts Title: Fortinet Releases Security Updates for Multiple Products Feedly Summary: Fortinet released security updates to address vulnerabilities in multiple Fortinet products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary…