Threat Intelligence

It didn’t take threat actors long to jump on a vulnerability affecting Microsoft Exchange mail server software. While exploits involving an array of malware from ransomware to webshells are well-documented, Sophos researchers ...

The Biden administration is taking the Russian cyber operations ecosystem to task with sanctions pointed at both established Russian companies as well as Russian-controlled entities created by the FSB, GRU and SVR ...

To the surprise of precisely nobody, the NSA, FBI and CISA agreed that last year’s SolarWinds supply-chain attack was orchestrated by the Russian state ...

Your tax dollars at work: The FBI and NSA have been helping fix the mess caused by Microsoft Exchange hacking ...

Iran’s Nantaz nuclear centrifuge facility went dark yesterday. Sources say it was an Israeli cyberattack—another one. But something doesn’t add up ...

Last week’s revelation of a half-billion-user leak is still reverberating around the news cycle. It’s like car-crash TV ...

Welcome to the April edition of our series The Cybereason Difference (inaugural post here). Each post of this series explores a unique way that Cybereason empowers defenders ...

When Microsoft announced that it discovered a state-sponsored threat group, Hafnium, was exploiting four separate zero-day vulnerabilities, the InfoSec community was already looking into their crystal ball to predict when other groups ...

Ubiquiti said its January breach was the fault of a “third party.” But this week, an insider says Ubiquiti lied: “It was catastrophically worse.” ...

The U.S. government is doing a piss-poor job of protecting Americans from foreign hackers ...