Hacktivists are increasingly targeting critical infrastructure. 

An international operation coordinated by Europol has disrupted the infrastructure of a pro-Russian hacktivist group known as NoName057(16) that has been linked to a string of distributed denial-of-service (DDoS) attacks against Ukraine and its allies. The actions have led to the dismantling of a major part of the group’s centralRead More »Europol Disrupts NoName057(16) Hacktivist Group Linked to DDoS Attacks Against Ukraine

The modern-day threat landscape requires enterprise security teams to think and act beyond traditional cybersecurity measures that are purely passive and reactive, and in most cases, ineffective against emerging threats and sophisticated threat actors. Prioritizing cybersecurity means implementing more proactive, adaptive, and actionable measures that can work together to effectivelyRead More »CTEM vs ASM vs Vulnerability Management: What Security Leaders Need to Know in 2025

In a recent incident response (IR) case, we discovered highly customized malware targeting Exchange infrastructure within government environments. Analysis of detection logs and clues within the sample suggests that the Exchange server was likely compromised via a known N-day vulnerability. Our in-depth analysis of the malware revealed a sophisticated, multi-functionalRead More »GhostContainer backdoor: malware compromising Exchange servers of high-value organizations in Asia

The Taiwanese semiconductor industry has become the target of spear-phishing campaigns undertaken by three Chinese state-sponsored threat actors. “Targets of these campaigns ranged from organizations involved in the manufacturing, design, and testing of semiconductors and integrated circuits, wider equipment and services supply chain entities within this sector, as well asRead More »Chinese Hackers Target Taiwan’s Semiconductor Sector with Cobalt Strike, Custom Backdoors