Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
UAC-0099 ASHVEIN RAT: Detecting HTML-Weaponized C2 and .NET Infostealer Activity Against Government Targets
A New RAT in an Active Espionage Campaign Security researchers at TrendAI have attributed a previously undocumented .NET infostealer and rem...
Frontline Education Data Breach: K-12 District Defense Guide Against Follow-On Phishing and Payroll Fraud
Frontline Education Breach: What K-12 Defenders Need to Do Right Now Frontline Education — one of the most widely deployed software provider...
Star Blizzard's RedFlick Technique: Defending Against Russian State Phishing and Malware Delivery via Compromised Websites
Introduction Microsoft Threat Intelligence has disclosed that Star Blizzard — the Russian state-sponsored threat actor linked to the FSB's C...
Star Blizzard Fake Event Invite Campaign: Detecting and Blocking Spear-Phishing Malware Delivery Against Ukraine-Linked Organizations
Introduction Microsoft has disclosed an ongoing campaign by Star Blizzard — the Russian state-sponsored threat actor also tracked as SEABORG...
SideCopy Targets Indian Academia With ReverseRAT: Detecting mshta.exe Spear-Social Engineering Attacks
SideCopy Targets Indian Academia With ReverseRAT: Detecting mshta.exe Spear-Social Engineering Attacks The threat actor tracked as SideCopy ...
One Zero-Day Chain, Two China-Linked APTs: Chrome/Windows Exploit Hits NGOs — Detection and Response Playbook
The Threat: Shared Exploit, Divergent Operations Volexity's latest reporting documents something that should concern every security team, no...
Nimbus Manticore Recruitment Lures: Detecting Cross-Platform Node.js RATs on Linux and macOS
Executive Summary Kaspersky has attributed two previously undocumented malware families to Nimbus Manticore, the Iranian state-aligned threa...
Operation QUICSILVER: Detecting and Defeating the QUICAgent Go Backdoor Targeting Myanmar Government and IT
Introduction Seqrite Labs has disclosed an active cyber espionage campaign, codenamed Operation QUICSILVER, targeting Myanmar's government a...
Kimsuky's Offline AI Stack: Defending Against North Korea's AI-Automated Social Engineering and Malware Development
Kimsuky Moves AI In-House — and What That Means for Your SOC North Korean state-sponsored threat actors have spent the past two years experi...