Self Assessment
Research

Cyber Threat Intelligence Reports | Cybersecurity Risk Research

The latest industry news, interviews, technologies, and resources.


US Oil and Gas Pipeline Attack
Research 2021-05-19
US Oil and Gas Pipeline Attack

By CYFIRMA Research Large-scale cyberattacks targeting critical infrastructure and operations is back rearing its ugly head, forcing the major oil and gas pipeline operator, Colonial Pipeline Co., of the United…

SilentFade Malware Exploitation of Weakness in Facebook
Research 2021-03-23
SilentFade Malware Exploitation of Weakness in Facebook

Out-of-Band Report 8 Mar 2021 Content 1. Executive Summary 2. Impact 3. Hypotheses 4. Process Flow of SilentFade Malware 5. Malware Toolset and Infection Chain 6. SilentFade: On Platform Persistence…

Incidents, attributions, and exploitation techniques for path traversal flaw in Fortinet FortiOS SSL VPN devices
Research 2020-12-28
Incidents, attributions, and exploitation techniques for path traversal flaw in Fortinet FortiOS SSL VPN devices

First published on 16 Dec 2020 A hacker has published a list of one-line exploits that can exfiltrate VPN credentials from nearly 50,000 Fortinet VPN devices. The list of vulnerable…

Hackers Abuse Microsoft Teams’ Vulnerabilities
Research 2020-12-24
Hackers Abuse Microsoft Teams’ Vulnerabilities

Microsoft Teams could be targeted by suspected threat actors as they have been observed manipulating and leveraging Microsoft services to gain access to organizations' networks and to exfiltrate sensitive information…

Spear Phishing Attack by N. Korean Hacking Group, Kimsuky
Research 2020-12-16
Spear Phishing Attack by N. Korean Hacking Group, Kimsuky

Kimsuky (aka Velvet Chollima, Black Banshee, and Thallium) is a known N. Korean state-sponsored threat actor. The group has been active since 2012 and targeting businesses and individuals with new…

Understanding Open Proxies and Cyberattacks
Research 2020-11-09
Understanding Open Proxies and Cyberattacks

CYFIRMA research first alerted clients on the increase in open proxy usage as the attack method by known nation-sponsored actor groups in Apr 2020. Since then, these threat actors have…

Out of Band Notification: Next Emotet Campaign
Research 2020-01-06
Out of Band Notification: Next Emotet Campaign

As of December 25, CYFIRMA Threat Intelligence team had gathered indicators suggesting that a new wave of the notorious Emotet malware may strike Japan during the year end and the…

Out of band notification, UPDATE – PHP ACE VULNERABILITY
Research 2019-11-12
Out of band notification, UPDATE – PHP ACE VULNERABILITY

As on November 3, CYFIRMA Threat Intelligence had observed heightened interest in Korean and Russian speaking hacker groups about the PHP-FPM Vulnerability with NGINX tracked as CVE-201911043, an Arbitrary Code…

Out of band notification, UPDATE – NGINX WEBSERVER EXPLOIT
Research 2019-06-11
Out of band notification, UPDATE – NGINX WEBSERVER EXPLOIT

Between 29 May 2019 – 2 June 2019, CYFIRMA Threat Intelligence have observed Korean and Mandarin speaking hackers showing intense interest in NGINX Webserver in hackers community. Under the active…

CYFIRMA’s Cyber Threat and Risk Prediction Report for 2019
Research 2018-11-28
CYFIRMA’s Cyber Threat and Risk Prediction Report for 2019

AUTHOR CYFIRMA   TOKYO/SINGAPORE, Nov 28, 2018: CYFIRMA releases its Cyber Threat and Risk Predictions for 2019. Kumar Ritesh, CYFIRMA Chairman and CEO says “While 2018 was a year of…

1 … 40 41 42 43