Skip to content

Derek Krein

Members Public

Cyber Threat Weekly - #3

We got quite a bit to cover this week…  Let’s start with malvertising to deploy DanaBot leading to CACTUS ransomware.  A botnet uncovered by Palo Alto is upping its game.  A Russian APT abusing CVE-2023-23397 and other vulnerabilities.  Proofpoint tracking similar behavior from nation state threat actor.  To keep

Members Public

Cyber Threat Weekly - #2

Last week we saw some cyber threat patterns and this week they continue.  Quite a bit to cover, let’s start with Google Chrome zero-day, now fixed, under active exploitation.  Next up, ownCloud bugs mentioned last week are being exploited in the wild.  Defender Application Guard for Office and Windows.

Members Public

Cyber Threat Weekly - #1

This week let's start with an information stealer with a novel anti-sandbox technique, using trigonometry to detect human behavior.  Multiple APT groups are exploiting a WinRAR vulnerability.  Cl0p’s mass exploitation of MOVEit vulnerabilities is the gift that keeps on giving.  The legitimate NetSupport Manager being used for