Malware-as-a-Service and Ransomware-as-a-Service lower barriers for cybercriminals

The sophistication of cyber threats has escalated dramatically, with malicious actors’ deploying advanced tactics, techniques, and procedures (TTPs) to exploit vulnerabilities and evade detection, according to Darktrace. Subscription-based tools such a… Continue reading Malware-as-a-Service and Ransomware-as-a-Service lower barriers for cybercriminals

The changes in the cyber threat landscape in the last 12 months

When it comes to the cyber threat landscape, change is the only constant: the inevitable interplay between cybercriminals and law enforcement agencies makes it inevitable. Europol’s recently released Internet Organised Crime Threat Assessment (IO… Continue reading The changes in the cyber threat landscape in the last 12 months

Scenarios to exploit CrowdStike as a massive attack on thousands of machines

On July 19, 2024, many witnessed an IT "outage" linked to CrowdStrike’s Falcon sensor on Windows machines. Some started to blame Microsoft for that, and some were figuring out what went wrong with CrowdStrike and the relationship… Continue reading Scenarios to exploit CrowdStike as a massive attack on thousands of machines

FIN7 sells improved EDR killer tool

The cybercrime-focused enterprise known as FIN7 (aka the Carbanak group) has come up with yet another trick to assure the effectiveness of its “EDR killer” tool, dubbed AvNeutralizer (i.e., AuKill) by researchers. By leveraging Windows&#821… Continue reading FIN7 sells improved EDR killer tool

How AI helps decode cybercriminal strategies

With terms like “AI washing” making their way into mainstream business consciousness, the hype surrounding AI is making it harder to differentiate between the true applications and empty promises of the technology. The quest for tangible business benef… Continue reading How AI helps decode cybercriminal strategies

Why every company needs a DDoS response plan

In this Help Net Security interview, Richard Hummel, Senior Threat Intelligence Manager at NETSCOUT, discusses how companies can overcome the challenges of identifying and mitigating DDoS attacks. He stresses the need for adaptive, multilayered defense… Continue reading Why every company needs a DDoS response plan

Fighting identity fraud? Here’s why we need better tech

In this Help Net Security video, Patrick Harding, Chief Architect at Ping Identity, discusses the state of identity fraud prevention. Businesses must adopt more advanced technologies to combat the advancing tactics of identity fraud. Organizations that… Continue reading Fighting identity fraud? Here’s why we need better tech

LockBit leader unmasked: US charges Russian national

Russian national Dmitry Khoroshev is “LockBitSupp”, the creator, developer and administator of the infamous LockBit ransomware group, according to UK, US and Australia law enforcement agencies. The US Justice Deparment has unsealed charges … Continue reading LockBit leader unmasked: US charges Russian national

NIST’s role in the global tech race against AI

Last year, the United States Secretary of Commerce announced that the National Institute of Standards and Technology (NIST) has been put in charge of launching a new public working group on artificial intelligence (AI) that will build on the success of the NIST AI Risk Management Framework to address this rapidly advancing technology. However, recent […]

The post NIST’s role in the global tech race against AI appeared first on Security Intelligence.

Continue reading NIST’s role in the global tech race against AI

AI set to play key role in future phishing attacks

A staggering increase in QR code phishing (quishing) attacks during 2023 saw them skyrocket up the list of concerns for cyber teams globally, according to Egress. Attacks were both prolific and highly successful, demonstrating how cybercriminals effect… Continue reading AI set to play key role in future phishing attacks