CISA’s BOD 22-01 Update: Revamping Vulnerability Management Capabilities for Federal Agencies
The Cybersecurity and Infrastructure Security Agency (CISA) has added 95 more vulnerabilities to Binding Operational Directive (BOD) 22-01, as of March 3. Also known as the Known Exploited Vulnerabilities (KEV) Catalog, BOD 22-01 provides organizations with a curated list of vulnerabilities that have been—or are actively being—exploited in the wild. ... Read More
These Are the Vulnerabilities That Russian APTs and Russia-Affiliated Ransomware Groups Have Exploited
A history of cyberattacks Far before Russia launched its full-scale invasion of Ukraine, cybersecurity officials from the Ukrainian government already believed their nation had experienced multiple cyberattacks led by Russian Advanced Persistent Threat (APT) groups. As Russian troops gathered on their borders, numerous Ukrainian government websites as well as several ... Read More
How Russian and Ukrainian Militias Are Using Social Media and Chat Platforms to Recruit Volunteers in the Donbas and Fund Their Causes
As of this publishing, Russia has amassed 190,000 troops along the Ukrainian border, according to U.S. intelligence, in the Donbas region of Ukraine. Despite varying accounts from the frontlines, and constant posturing in the media from both Russian President Vladimir Putin and U.S. President Biden, the prospect of war remains ... Read More
When Every Day Is Valentine’s Day: How Threat Actors Prey on Lonely Hearts
Love in the time of threat actors Theoretically, there isn’t anything wrong with Valentine’s Day. But let’s just say it like it is: Nobody likes Valentine’s Day, a guileless push for capital, like Halloween for the heart. To be fair, some people do, but we feel it’s safe to say ... Read More
[Updated] Russia Seizes Ferum, Sky-Fraud, UAS, and Trump’s Dumps—and Signals More Takedowns to Come
Update as of 5:06 PM EST: Flashpoint analysts have identified the individuals that were arrested by Russian LE. One of the individuals, Artem Alexeyevich Zaytsev is listed as the CEO of Get-Net LLC, which is the registrar of the domains of Sky-Fraud, Trump’s Dumps, UAS and Ferum, as well as ... Read More
The Death of an ISIS Leader; ISIS Attacks, January 2022: Key Trends, Statistics, and Geographic Analysis
The following research is based on information gathered by Flashpoint analysts and data collections. For December’s report, click here. The Death of ISIS Leader Abu Ibrahim al-Hashimi al-Qurayshi Early in the morning of February 3, 2022, U.S. special operations forces carried out a raid near Atmeh in northwestern Syria’s Idlib ... Read More
