Mur d'images - Cyberveille

curated by Decio

M-Trends 2025: Data, Insights, and Recommendations From the Frontlines

Ivanti Connect Secure VPN Targeted in New Zero-Day Exploitation

Seeing Through a GLASSBRIDGE: Understanding the Digital Marketing Ecosystem Spreading Pro-PRC Influence Operations

How Low Can You Go? An Analysis of 2023 Time-to-Exploit Trends

How the FBI and Mandiant caught a 'serial hacker' who tried to fake his own death

A Measure of Motive: How Attackers Weaponize Digital Analytics Tools | Google Cloud Blog

Staying a Step Ahead: Mitigating the DPRK IT Worker Threat

An Offer You Can Refuse: UNC2970 Backdoor Deployment Using Trojanized PDF Reader

Black Basta ransomware switches to more evasive custom malware

UNC4393 Goes Gently into the SILENTNIGHT

APT41 Has Arisen From the DUST

UNC3944 Targets SaaS Applications

UNC5537 Targets Snowflake Customer Instances for Data Theft and Extortion

Mandiant says hackers stole a 'significant volume of data' from Snowflake customers

Global attacker median dwell time continues to fall

Unearthing APT44: Russia’s Notorious Cyber Sabotage Unit Sandworm

Google: Spyware vendors behind 50% of zero-days exploited in 2023

APT29 Uses WINELOADER to Target German Political Parties | Mandiant

Evolution of UNC4990: Uncovering USB Malware's Hidden Depths

Sandworm Disrupts Power in Ukraine Using a Novel Attack Against Operational Technology

Diving Deep into UNC4841 Operations Following Barracuda ESG Zero-Day Remediation (CVE-2023-2868)

Stealth Mode: Chinese Cyber Espionage Actors Continue to Evolve Tactics to Avoid Detection | Mandiant

The Spies Who Loved You: Infected USB Drives to Steal Secrets

VMware ESXi Zero-Day Used by Chinese Espionage Actor to Perform Privileged Guest Operations on Compromised Hypervisors

Barracuda ESG Zero-Day Vulnerability (CVE-2023-2868) Exploited Globally by Aggressive and Skilled Actor, Suspected Links to China

Zero-Day Vulnerability in MOVEit Transfer Exploited for Data Theft

COSMICENERGY: New OT Malware Possibly Related To Russian Emergency Response Exercises | Mandiant

Don't @ Me: URL Obfuscation Through Schema Abuse

SIM Swapping and Abuse of the Microsoft Azure Serial Console: Serial Is Part of a Well Balanced Attack

3CX Software Supply Chain Compromise Initiated by a Prior Software Supply Chain Compromise; Suspected North Korean Actor Responsible

ALPHV Ransomware Affiliate Targets Vulnerable Backup Installations to Gain Initial Access

Move, Patch, Get Out the Way: 2022 Zero-Day Exploitation Continues at an Elevated Pace

Fortinet Zero-Day and Custom Malware Used by Suspected Chinese Actor in Espionage Operation

Welcome to Goot Camp: Tracking the Evolution of GOOTLOADER Operations

From RM3 to LDR4: URSNIF Leaves Banking Fraud Behind

The Fresh Phish Market: Behind the Scenes of the Caffeine Phishing-as-a-Service Platform

Bad VIB(E)s Part One: Investigating Novel Malware Persistence Within ESXi Hypervisors | Mandiant

Mystery Hackers Are ‘Hyperjacking’ Targets for Insidious Spying

GRU: Rise of the (Telegram) MinIOns

Likely Iranian Threat Actor Conducts Politically Motivated Disruptive Activity Against Albanian Government Organizations

Mandiant Finds Possible Link Between Kremlin, Pro-Russian ‘Hacktivists’

The IO Offensive: Information Operations Surrounding the Russian Invasion of Ukraine

UNC3524: Eye Spy on Your Email

Zero Tolerance: More Zero-Days Exploited in 2021 Than Ever Before

China-backed APT41 compromised ‘at least’ six US state governments