Latest ThreatInsights
Blog
How could AI simplify malware attacks, and why is this worrying?
AI can significantly reduce Malware development and distribution costs, giving cybercriminals an advantage over insufficiently secured targets. Read the article to see practical examples of...
Blog
Digital Forensics: Discovering Threat Actor’s traces using Recycle Bin
Criminals don't like to leave traces. In the cyber world, that means deleting their malicious software from your environment after the attack or infiltration. This...
Blog
Season’s Greetings from Cybercriminals
Cybercrime is on the rise during the holiday season. Cybercriminals take advantage of Black Friday, Cyber Monday, and similar to scam individuals. What can companies...
Blog
Phishing as a Service (PHaaS) – an effective attack vector for all threat actors
Phishing has professionalized. It is literally available to criminals in a »as a service« model, and the most effective examples are extremely convincing. And therefore...
Blog
New 0-day vulnerabilities in Microsoft Exchange Server actively exploited
Two reported 0-day vulnerabilities affecting Microsoft Exchange Server 2013, 2016, and 2019 (on-prem) tracked as CVE-2022-41040 and CVE-2022-41082 are being actively exploited in the wild....
Blog
Insider Threats: What are they and how to mitigate them
While often neglected, an organization’s own personnel pose one of the biggest threats to its security. Human error or negligence is usually the leading cause...
Blog
Diving Deep: How to detect Malware Persistency pt. 1
During a cyber-attack adversaries might gain access to an environment through a certain system, but that might not be their actual targeted system or that...
Blog
Diving Deep: How to detect Typosquatting
Typosquatting is a type of social engineering attack, where a threat actor registers domains with deliberately misspelled names of known brands or websites and hosts...
Blog
Vulnerability Spotlight: How to detect Follina the Windows MSDT 0-day
Microsoft confirmed a security vulnerability tracked as CVE-2022-30190 and released it on their MSRC portal on May 30th, 2022. The vulnerability allows for a remote...
Blog
Diving Deep: Malware Injection Techniques – Part 1
Malware Injection Techniques This is the first entry in the Malware Injection Techniques article series that we will be writing about. The ultimate goal of...
