Summary: Co-founders of Cybereason, Lior Div and Yonatan Striem-Amit have launched a new startup, 7AI, which focuses on automating routine security tasks with its Agentic AI Platform. This platform aims to reduce the workload of human security analysts by utilizing swarms of AI agents that can colla…
Tag: THREAT HUNTING
The article discusses the rising security threats associated with the use of Pickle files in machine learning models hosted on platforms like Hugging Face. Researchers from ReversingLabs discovered malicious code embedded in certain models that were not flagge…
Summary: A report from Threat Hunting Platform – Hunt.io highlights an ongoing phishing campaign by the GreenSpot APT, targeting users of the popular Chinese email service 163.com. The campaign features fraudulent domains designed to mimic legitimate 163.com services to steal users’ login credential…
This article discusses the security risks associated with Google Cloud Platform’s Cloud Build service, particularly the potential for supply chain attacks using a technique called “Bad.Build.” It highlights vulnerabilities in default permissions of the Cloud B…
This article discusses the recent activities in the cybersecurity landscape, highlighting the leak of sensitive data from Fortigate firewalls by a group called Belsen Group, and various cybersecurity vulnerabilities, including a 0-day exploit affecting Ivanti …
The ZDI team analyzes CVE-2025-0411, a zero-day vulnerability in 7-Zip, which was exploited in a SmokeLoader campaign targeting Ukrainian organizations through spear-phishing and homoglyph techniques. The vulnerability allows malicious files to bypass Windows …
Summary: A report from the Zero Day Initiative reveals that Ukrainian organizations were targeted by Russian cybercrime groups leveraging a zero-day vulnerability in 7-Zip, tracked as CVE-2025-0411. This vulnerability allows attackers to evade Windows protections, enabling the delivery of malware li…
A Cyber Defence Framework (CDF) provides structured guidelines and methodologies to protect digital assets from cyber threats. Key components include identifying assets, implementing security controls, detecting threats, responding to incidents, and recovering…
This article discusses a phishing campaign targeting high-profile accounts and introduces various pivoting techniques in the Validin platform to uncover related indicators. The authors provide detailed methods for discovering additional domains, IP addresses, …
Summary: The video discusses the new feature in Amazon GuardDuty, a threat detection service for AWS environments, which helps identify sophisticated attacks through a detailed analysis of attack sequences. It highlights how potential data compromises, especially involving S3 buckets, can be detecte…
Summary: CrowdStrike’s investigation revealed that 40% of 200 alerted customers had unknowingly hired fake IT employees linked to a North Korean APT group known as Famous Chollima. This group used these rogue workers to deploy malware and steal valuable data from organizations. In response, CrowdStr…
A new vulnerability in the Kubernetes `gitRepo` volume, disclosed on November 22, 2024, allows attackers to execute arbitrary code and escalate privileges, leading to potential container escapes. By exploiting this flaw, an attacker can execute code as the roo…
Summary: This blog discusses the pivotal role of AI in transforming Security Operations Center (SOC) alert management, particularly in addressing the overwhelming volume of alerts faced by security teams. By implementing AI-powered SOC Analysts, organizations can automate triage and investigation pr…
![THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [27 January]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1de6DT-dB1sOMXF-3PGpHW68C7duvJm1JreoDh3dNfwhkQ2Q6V60GrDu8HZV3ilI2uWJYCsP_dSJ-OrZNaozg3IsL8xZ_UH6jUVGWOu-cgDmT5n3q64Mgz71jwN49-m2V46my5whXSMZFV5FcTzWux_l-wpclKZCqkSOBpHs-ICyHRAgtT69yA6NTkUp-/s728-rw-e365/recap.png "THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [27 January]")
Summary: This week’s cybersecurity scoop dives into the comprehensive landscape of AI-driven threats, regulatory updates, and urgent vulnerabilities in healthcare technology. Significant incidents include targeted attacks on Juniper Networks routers and vulnerabilities found in Palo Alto firewalls….
Victim: APMS ( Advanced Physician Management Service LLC Country : US Actor: babuk Source: http:/7dikawx73goypgfi4zyo5fcajxwb7agemmiwqax3p54aey4dwobcvcyd.onion/blog/bc5723b509285febe34720381141a5509f50a50f44f48f250c899b37ff117b41/ Discovered: 2025-01-27 08:12:07.264496 Published: 2025-01-27 08:10:53…