Security Bulletin

The “Jumpy Pisces” cyberespionage group appeared to provide initial access for ransomware deployment.

RDP is one of the most prominent entry points into networks. Ransomware actors have taken down many large networks after initially entering via RDP. Credentials for RDP access are often traded by “initial access brokers".

The National Security Memorandum on Artificial Intelligence tasks various federal agencies with securing the AI supply chain from potential cyberattacks and disseminating timely threat information about such attacks.

The Russian-backed group is using a novel access vector to harvest victim data and compromise devices in a large-scale intelligence-gathering operation.

Threat actors are using an Android malware payload to pull off an elaborate social-engineering scam.

In a vengeful move against the happiest place on Earth, the former employee allegedly used his old credentials to make potentially deadly changes.

The Russian nation-state actor continues its espionage activities, using RDP to access sensitive information or drop malicious code.