#Threat Hunting
NetamLoader Targets Government Windows: The Update Folder Is Now a Hunting Surface
NetamLoader Targets Government Windows: The Update Folder Is Now a Hunting Surface Kaspersky’s discovery of NetamLoader shows how a highly tailored intrusion ca...
Lucas Oliveira
Research
Microsoft 365 Token Replay Campaign Hit 79 Organizations Without Defeating MFA
Microsoft 365 Token Replay Campaign Hit 79 Organizations Without Defeating MFA Executive summary MFA did not fail in a ten-week Microsoft 365 campaign tracked b...
Lucas Oliveira
Research
AOMEI Backupper Supply-Chain Attack: Hunt the Five-Minute Update Windows
AOMEI Backupper Supply-Chain Attack: Hunt the Five-Minute Update Windows Attackers compromised the update infrastructure used by AOMEI Backupper and briefly red...
Lucas Oliveira
Research
PAYLOAD Ransomware Turns Active Directory Group Policy Into a Domain-Wide Weapon
PAYLOAD Ransomware Turns Active Directory Group Policy Into a Domain-Wide Weapon Ransomware operators do not need to deploy an encryptor to create a business-wi...
Lucas Oliveira
Research
China-Linked Operators Turn Edge Devices Into a Data-Theft Workbench
China-Linked Operators Turn Edge Devices Into a Data-Theft Workbench The latest joint advisory from CISA, the FBI, NSA, and international partners is not just a...
Lucas Oliveira
Research
UK education networks face a wave of web-facing attacks
UK education networks face a wave of web-facing attacks UK schools, colleges, and universities are again showing why education has become one of the most diffic...
Lucas Oliveira
Research
Iran-linked PLC attacks show why internet-exposed OT is now an incident-response priority
Iran-linked PLC attacks show why internet-exposed OT is now an incident-response priority U.S. agencies have updated their warning on Iran-affiliated cyber acti...
Lucas Oliveira
Research