MixMode Threat Research
MixMode

Codefinger Ransomware: Detection and Mitigation Using MixMode

Codefinger Ransomware: Detection and Mitigation Using MixMode

| | aws, Blog, Cloud Security, Ransomware, Threat Intelligence Research, Threat Research
The Codefinger ransomware represents a new frontier in cyber threats, specifically targeting AWS S3 buckets. By exploiting Server-Side Encryption with Customer-Provided Keys (SSE-C), attackers gain control over the encryption process, rendering recovery impossible without their AES-256 keys ... Read More
MixMode
Threat Research Recap: Paving the Way for Smarter Defense Tech in 2025

Threat Research Recap: Paving the Way for Smarter Defense Tech in 2025

| | Blog, Cities, Critical Infrastructure, nation-state attacks, Nation-State Bad Actors, Nation-State Threat Actors, national cybersecurity, National Cybersecurity Strategy
Looking back at 2024, we recognize the immense value in revisiting some of our most impactful threat research. These articles not only offered real-time insights into pressing cybersecurity issues but also set the stage for advancements in AI-powered threat detection and defense ... Read More
MixMode
Why Zero-Day Attacks Bypass Traditional Firewall Security: Defending Against Zero-Day’s like Palo Alto Networks CVE-2024-0012

Why Zero-Day Attacks Bypass Traditional Firewall Security: Defending Against Zero-Day’s like Palo Alto Networks CVE-2024-0012

| | firewall, firewalls, Zero Day Attacks, zero-day, zero-day attack, zero-day attack identification, Zero-day threats
Recently, Palo Alto Networks identified and patched a critical zero-day vulnerability in their next-generation firewalls (NGFWs). This vulnerability, tracked as CVE-2024-0012, allowed attackers to execute code on vulnerable devices remotely. This vulnerability has been actively exploited in attacks dubbed "Operation Lunar Peek." ... Read More
MixMode
MixMode Observes Increase in Threat Actor Activity Supporting CISA’s Heightened Election Security Concerns

MixMode Observes Increase in Threat Actor Activity Supporting CISA’s Heightened Election Security Concerns

| | Blog, cisa, nation-state attacks, Nation-State Bad Actors, Nation-State Threat Actors, national cybersecurity, threat actors
The Cybersecurity and Infrastructure Security Agency (CISA) recently issued a joint statement with the Office of the Director of National Intelligence (ODNI) and the Federal Bureau of Investigation (FBI), highlighting the ongoing threat of Russian influence efforts targeting the upcoming elections ... Read More
MixMode
The Rise of Cyberattacks on Critical Infrastructure: Are You Prepared?

The Rise of Cyberattacks on Critical Infrastructure: Are You Prepared?

| | Uncategorized
Our daily lives depend on critical infrastructure – water treatment facilities, power grids, transportation systems. Unfortunately, these systems are increasingly becoming targets for cyberattacks ... Read More
MixMode
Alarming Intrusion: Chinese Government Hackers Target US Internet Providers

Alarming Intrusion: Chinese Government Hackers Target US Internet Providers

| | Blog, government, Infrastructure, nation-state attacks, Nation-State Bad Actors, Nation-State Threat Actors, national cybersecurity, National Cybersecurity Strategy, Uncategorized, Zero Day Attacks, zero-day, zero-day attack, zero-day attack identification, Zero-day threats
A recent Washington Post report sent shockwaves through the cybersecurity landscape, revealing that Chinese government-backed hackers have infiltrated at least two major US internet service providers (ISPs) and several smaller ones ... Read More
MixMode
Critical Microsoft Zero-Day Vulnerability Exploited in the Wild for Over a Year

Critical Microsoft Zero-Day Vulnerability Exploited in the Wild for Over a Year

| | azure, Blog, Cybersecurity News, Zero Day Attacks, zero-day, zero-day attack
A severe zero-day vulnerability in Microsoft Windows, tracked as CVE-2024-38112, has been actively exploited by threat actors for at least 18 months. This security flaw in the Windows MSHTML Platform allows remote code execution, potentially compromising numerous organizations worldwide ... Read More
MixMode