latest cybersecurity threats

Threats

16.04.2025
0 2

UNC2447 SOMBRAT and FIVEHANDS Ransomware: A Sophisticated Financial Threat

Mandiant has observed an aggressive financially motivated group, UNC2447, exploiting one SonicWall VPN zero-day vulnerability prior to a patch being…
Threats

16.04.2025
0 1

Abusing Replication: Stealing AD FS Secrets Over the Network

Organizations are increasingly adopting cloud-based services such as Microsoft 365 to host applications and data. Sophisticated threat actors are catching…
Threats

13.04.2025
0 2

Ghostwriter Update: Cyber Espionage Group UNC1151 Likely Conducts Ghostwriter Influence Activity

In July 2020, Mandiant Threat Intelligence released a public report detailing an ongoing influence campaign we named “Ghostwriter.” Ghostwriter is…
Threats

13.04.2025
0 1

Zero-Day Exploits in SonicWall Email Security Lead to Enterprise Compromise

In March 2021, Mandiant Managed Defense identified three zero-day vulnerabilities in SonicWall’s Email Security (ES) product that were being exploited…
Phishing

07.04.2025
0 1

Attackers Exploited 4 Zero-Day Flaws in Chrome, Safari & IE

At least two government-backed actors — including one Russian group — used the now-patched flaws in separate campaigns, Google says.…
Threats

27.01.2025
0 3

Forced Chrome extensions get removed, keep reappearing

Malwarebytes found a family of forced Chrome extensions that can’t be removed because of a policy change that tells users…
Threats

23.01.2025
0 2

ASyncRat surpasses Dridex, TrickBot and Emotet to become dominant email threat

A review of what’s changed in malware in 2022, and what hasn’t, based on Adam Kujawa’s talk at RSAC 2022.…
Threats

23.01.2025
0 1

Credential-stealing malware disguises itself as Telegram, targets social media users

Spyware.FFDroider is an information stealer that exfiltrates browser data in an attempt to steal credentials and valid session cookies. A…
Threats

19.01.2025
0 2

Don’t let scammers ruin your Valentine’s Day

No matter the occasion, you can always count on scammers to show up. Today is Valentine’s Day, so we thought…
Threats

19.01.2025
0 6

SolarWinds attackers launch new campaign

The Microsoft Threat Intelligence Center has issued a warning about new activities from Nobelium, the group behind SolarWinds, Sunburst, and…