threat actor – Page 13 – Experimental News Clipping Site

Cloud Blog: COLDRIVER Using New Malware To Steal Documents From Western Targets and NGOs

May 7, 2025

—

by

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/coldriver-steal-documents-western-targets-ngos/ Source: Cloud Blog Title: COLDRIVER Using New Malware To Steal Documents From Western Targets and NGOs Feedly Summary: Written by: Wesley Shields Google Threat Intelligence Group (GTIG) has identified a new piece of malware called LOSTKEYS, attributed to the Russian government-backed threat group COLDRIVER (also known as UNC4057, Star Blizzard, and Callisto).…

Cloud Blog: Defending Against UNC3944: Cybercrime Hardening Guidance from the Frontlines

May 6, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/unc3944-proactive-hardening-recommendations/ Source: Cloud Blog Title: Defending Against UNC3944: Cybercrime Hardening Guidance from the Frontlines Feedly Summary: Background UNC3944, which overlaps with public reporting on Scattered Spider, is a financially-motivated threat actor characterized by its persistent use of social engineering and brazen communications with victims. In early operations, UNC3944 largely targeted telecommunications-related organizations to…

Cisco Talos Blog: State-of-the-art phishing: MFA bypass

May 1, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://blog.talosintelligence.com/state-of-the-art-phishing-mfa-bypass/ Source: Cisco Talos Blog Title: State-of-the-art phishing: MFA bypass Feedly Summary: Threat actors are bypassing MFA with adversary-in-the-middle attacks via reverse proxies. Phishing-as-a-Service tools like Evilproxy make these threats harder to detect. AI Summary and Description: Yes Summary: The text outlines the evolving landscape of phishing attacks, specifically focusing on sophisticated techniques…

Cloud Blog: Cloud CISO Perspectives: Data-driven insights into AI and cybersecurity

Apr 30, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-data-driven-insights-ai-cybersecurity/ Source: Cloud Blog Title: Cloud CISO Perspectives: Data-driven insights into AI and cybersecurity Feedly Summary: Welcome to the second Cloud CISO Perspectives for April 2025. Today, Sandra Joyce, vice president, Google Threat Intelligence, will talk about the practical applications of AI in both attack and defense, adapted from her RSA Conference keynote.As…

Cloud Blog: Hello 0-Days, My Old Friend: A 2024 Zero-Day Exploitation Analysis

Apr 29, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/2024-zero-day-trends/ Source: Cloud Blog Title: Hello 0-Days, My Old Friend: A 2024 Zero-Day Exploitation Analysis Feedly Summary: Written by: Casey Charrier, James Sadowski, Clement Lecigne, Vlad Stolyarov Executive Summary Google Threat Intelligence Group (GTIG) tracked 75 zero-day vulnerabilities exploited in the wild in 2024, a decrease from the number we identified in 2023…

The Register: The one interview question that will protect you from North Korean fake workers

Apr 29, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/04/29/north_korea_worker_interview_questions/ Source: The Register Title: The one interview question that will protect you from North Korean fake workers Feedly Summary: FBI and others list how to spot NK infiltrators, but AI will make it harder RSAC Concerned a new recruit might be a North Korean stooge out to steal intellectual property and then…

The Cloudflare Blog: Targeted by 20.5 million DDoS attacks, up 358% year-over-year: Cloudflare’s 2025 Q1 DDoS Threat Report

Apr 28, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://blog.cloudflare.com/ddos-threat-report-for-2025-q1/ Source: The Cloudflare Blog Title: Targeted by 20.5 million DDoS attacks, up 358% year-over-year: Cloudflare’s 2025 Q1 DDoS Threat Report Feedly Summary: DDoS attacks are surging. In 2025 Q1, Cloudflare blocked +20M attacks (a 358% YoY spike) along with 5.6 Tbps and 4.8 Bpps record-breaking attacks. AI Summary and Description: Yes **Summary:**…

Cloud Blog: From insight to action: M-Trends, agentic AI, and how we’re boosting defenders at RSAC 2025

Apr 28, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/products/identity-security/from-insight-to-action-m-trends-agentic-ai-and-how-were-boosting-defenders-at-rsac-2025/ Source: Cloud Blog Title: From insight to action: M-Trends, agentic AI, and how we’re boosting defenders at RSAC 2025 Feedly Summary: Cybersecurity is facing a unique moment, where AI-enhanced threat intelligence, products, and services are poised to give defenders an advantage over the threats they face that’s proven elusive — until now. …

Cisco Talos Blog: IR Trends Q1 2025: Phishing soars as identity-based attacks persist

Apr 28, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://blog.talosintelligence.com/ir-trends-q1-2025/ Source: Cisco Talos Blog Title: IR Trends Q1 2025: Phishing soars as identity-based attacks persist Feedly Summary: This quarter, phishing attacks surged as the primary method for initial access. Learn how you can detect and prevent pre-ransomware attacks. AI Summary and Description: Yes **Summary:** The text discusses a significant rise in phishing…

Cisco Talos Blog: Lessons from Ted Lasso for cybersecurity success

Apr 24, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://blog.talosintelligence.com/lessons-from-ted-lasso-for-cybersecurity-success/ Source: Cisco Talos Blog Title: Lessons from Ted Lasso for cybersecurity success Feedly Summary: In this edition, Bill explores how intellectual curiosity drives success in cybersecurity, shares insights on the IAB ToyMaker’s tactics, and covers the top security headlines you need to know. AI Summary and Description: Yes Summary: The text outlines…

Tag: threat actor