
Weekly Intelligence Snapshot – Week 41
A CISA advisory reveals vulnerabilities exploited by China-sponsored groups. PatchTuesday: Microsoft fixes 84 #vulnerabilities (inc two 0-day).
Explore our comprehensive archive organized by taxonomy. Discover a wealth of information categorized by subject, theme, or type to enhance your research and understanding.

A CISA advisory reveals vulnerabilities exploited by China-sponsored groups. PatchTuesday: Microsoft fixes 84 #vulnerabilities (inc two 0-day).

This week, we analyze new espionage-driven campaigns related to the Lazarus/ZINC activity cluster.

We are closely following increased geopolitical tensions after the potential sabotage attacks to Nordstream pipelines in the Baltic sea.

Malware analyst 3xp0rt has uploaded a Lockbit 3 ransomware builder, allowing anyone to build executables for their own operation.

This week we report Emotet is still active. The DFIR Report describes an incident in May 2022 which began with

This week we analyze the latest campaign of the alleged Russian #threatactor TA505 and how it uses ServHelper and TeslaGun

This week we focus on Mobile Banking Trojan Ermac, aimed at stealing credentials from financial and Cryptocurrency applications.

This week read how LockBit suffered a DDoS attack following its #ransomware attack on Entrust – not the first time

In this week’s summary our Cyber news features the collaboration of the Microsoft Threat Intelligence Center (MSTIC), Google Threat Analysis

Our Cyber news this week majors on Microsoft’s recent Patch Tuesday Vulnerability update which deals with 121 flaws.
Try searching our blog

New Remote Tampering With Refrigeration Controls Affects Supermarkets Across Europe | Bomb Threats Disrupt Finnair, Wizz Air, and Other European Flights Twice In a Week

Threat Actors Abuse Microsoft Teams External Chat to Impersonate IT Support in Over 400 Incidents | Protests Spread Across France, Italy, Spain, Belgium, and Albania

Investment through Christian Lindner Beteiligungsgesellschaft adds to backing from Elevator Ventures, BMH, eCAPITAL and Mercurius.

PHP Prepares Emergency Fixes for Two Vulnerabilities | Storm-0940 Uses AI to Accelerate Microsoft 365 Attacks | Lithuania Links Starlink Arson Attempt to Russian Sabotage