For providers

An investigation into heightened cyber threat activities employing the Bifrost remote access trojan.

A newly discovered Linux malware dubbed GTPDOOR can establish command-and-control communications in compromised devices by leveraging the GPRS Tunnelling Protocol,

CISA urged enterprises to weigh the risks of continued use of previously compromised Ivanti VPN appliances.

Convincing phishing emails, synthetic identities, and deepfakes all have been spotted in cyberattacks on the continent.

Here are four ways teams can make their cloud environments more secure.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

I have added daemonlogger [ 1] for packet capture and Arkime [ 2] to visualize the packets captured by my DShield sensor and started noticing this activity that so far only gone to TCP/8090 which is URL and base64 encoded. The DShield sensor started capturing this activity on the 12 February 2024 inbound from various IPs from various locations.

North Korean state actors Lazarus Group used a Windows AppLocker zero day, along with a new and improved rootkit, in a recent cyberattack, researchers report.

The tedious task of logging Continuing Education (CE) credits can be a frustrating speed bump in the certification journey. The Learning and Certifications team gets that and has added automation to help streamline the credit submission process. We’re talking about less manual data entry, fewer manual submission headaches, and a more seamless learning and recertification […]

Threat actors using the malware have infected systems within government, healthcare, and other critical infrastructure organizations since at least 2019.