Checkmarx is grappling with a distressing sequel to its March security breach, as data exfiltrated from a private GitHub repository has surfaced in the possession of the LAPSUS$ collective. The organization posits that the...
Corporate correspondence has once again emerged as a convenient portal for adversaries. In this nascent campaign, the assailants eschew direct “forced entry,” choosing instead to orchestrate a familiar professional complication for employees and promptly...
The month of April concluded for the American firm Vercel with a distressing incident that precipitously transcended the boundaries of a mere internal complication. Adversaries secured unauthorized ingress into a segment of the company’s...
Google has heralded the inception of a nascent division engineered to confound the machinations of cybercriminal syndicates; however, the conglomerate emphatically underscores that this endeavor shall not entail retaliatory cyber bombardments. Rather, their stratagem...
An international cyber-espionage campaign that languished in the shadows for a decade has abruptly surfaced across dozens of sovereign nations. Google, in collaboration with Mandiant, has announced the disruption of a monumental operation orchestrated...
Mandiant has disseminated an exhaustive repository of rainbow tables engineered to decrypt the antiquated Net-NTLMv1 protocol. This initiative is designed to accelerate the obsolescence of a technology deemed insecure since the late 1990s. Notwithstanding...
Mandiant researchers have uncovered active exploitation of a zero-day vulnerability in the Gladinet Triofox remote access and file-sharing platform. CVE-2025-12480 allowed attackers to bypass authorization and reach configuration pages of the web interface, through...
Authorities in the U.S. state of Nevada have released a detailed technical report dissecting a large-scale cyberattack that encrypted government systems with ransomware. The document provides an exhaustive account of the attackers’ actions, their...
According to Google Threat Intelligence, the China-linked espionage group UNC5221 has since March conducted a series of successful intrusions into corporate networks, exploiting previously unknown vulnerabilities in Ivanti products. These operations resulted in the...
Mandiant researchers have uncovered an attack targeting legacy installations of the Sitecore platform. The attackers exploited a demonstration ASP.NET key that had been publicly included in official documentation until 2017. This flaw, tracked as...
The American cybersecurity firm Mandiant, a subsidiary of Google, suffered a breach of its account, which was utilized for orchestrating a cryptocurrency scam. The malefactor renamed the account to @phantomsolw and disseminated fraudulent claims...
