TTPs stories
Gartner report criticises SOAR systems, Acora defends approach
2 days ago
#
siem
#
cybersecurity
#
integration
A new Gartner report criticising SOAR systems for high costs and unmet promises has stirred controversy, with Acora defending its approach to optimising SOAR technology.
Threat actor abuses Cloudflare tunnels to deliver RATs
Last month
#
advanced persistent threat protection
#
cybersecurity
#
cyber threats
Cybercriminals exploit Cloudflare Tunnels, delivering remote access trojans via TryCloudflare abuse, notes Proofpoint, with evolving attack methods pushing past defences.
Defending against APTs: A learning exercise with Kimsuky
Wed, 17th Jul 2024
#
advanced persistent threat protection
#
malware
#
cybersecurity
Rapid7 Labs' new paper reveals Kimsuky’s sophisticated tactics, providing vital insights for security teams to bolster defences against these advanced persistent threats.
Getting the balance right between business innovation, security and AI
Tue, 2nd Jul 2024
#
hybrid cloud
#
ransomware
#
email security
The rise of GenAI in business innovation, via tools like Microsoft Copilot, comes with an alarming spike in AI-powered cyberattacks, pushing security to its limits.
ReliaQuest reveals BlackSuit ransomware details in 2024 customer incident
Wed, 29th May 2024
#
vpns
#
ransomware
#
dlp
In April 2024, ReliaQuest uncovered a cyberattack by the BlackSuit ransomware group, highlighting critical vulnerabilities and the need for improved security measures.
AI bolsters security response times, reveals ReliaQuest report
Fri, 29th Mar 2024
#
email security
#
phishing
#
ai
ReliaQuest's annual threat report reveals AI and automation technologies improve organisations' response time to security incidents by up to 99% year on year.
Mandiant uncovers intricate UNC5325 cyber attacks on Ivanti devices
Wed, 28th Feb 2024
#
malware
#
advanced persistent threat protection
#
cybersecurity
Cybersecurity company Mandiant has identified that actor UNC5325 exploits an Ivanti zero-day vulnerability, utilising evasive techniques and malware to persistently infiltrate devices.
Alarming lack of API visibility among enterprises: Cequence
Fri, 19th May 2023
#
cybersecurity
#
api
#
visibility
New research highlights APIs are now a leading attack vector, posing new and significant threats to organisations.