US trading platform Robinhood is at the center of data breach affecting up to 7 million of the popular investing app’s users, after falling victim to a social engineering attack carried out on 3rd...
US trading platform Robinhood is at the center of data breach affecting up to 7 million of the popular investing app’s users, after falling victim to a social engineering attack carried out on 3rd...
In the pre-cloud era, the responsibility for security was fully in the hands of the users. As we uncover new types of vulnerabilities, we discover more and more issues that do not fit the current...
This is the full story of the Azure ChaosDB Vulnerability that was discovered and disclosed by the Wiz Research Team, where we were able to gain complete unrestricted access to the databases of...
A summary and recording of Wiz's talk at BlackHat Europe 2021: the full extent of ChaosDB, the impact it had, and the questions it raises about security in managed cloud services.
Authored By Kiran Raj Due to their widespread use, Office Documents are commonly used by Malicious actors as a way... The post The Newest Malicious Actor: “Squirrelwaffle” Malicious Doc. appeared...
Ransomware marks a lucrative business in today’s cyber-driven world. Learn more about ransomware and why it’s a favorite among hackers.
Last time we left off with a pretty decent understanding about how our router is structured and what components were used. We also found two interesting debug pads that showed oscillating voltages...
BlackMatter and their victims
It’s amazing what you can learn by thinking like a hacker! We share our top tips and takeaways from our third hack_it security training event.
An anonymous hacker has allegedly leaked the entirety of Argentina’s National Registry of Persons, offering select information for sale on a dark web forum.
An anonymous hacker has allegedly leaked the entirety of Argentina’s National Registry of Persons, offering select information for sale on a dark web forum.
Group-IB uncovers largest networks of fake shops – phishing websites disguised as card shops
We discovered an information disclosure vulnerability in survey software designed for MSPs. We detail how we worked with the Crewhu team to responsibly disclose and remedy the vulnerability.
This summary provides an overview of APT attacks on industrial enterprises disclosed in H1 2021.
Sinclair Broadcast Group, one of the largest television network conglomerates in the U.S fell victim to a ransomware attack causing mass disruptions throughout its entire network.
Sinclair Broadcast Group, one of the largest television network conglomerates in the U.S fell victim to a ransomware attack causing mass disruptions throughout its entire network.
On 2021-10-26, a campaign was reported, involving an unknown actor, gaining initial access via Software misconfig, 1-day vulnerability, targeting Jenkins, WebLogic to achieve Resource hijacking....
Learn about Host Isolation, a new feature that's just been added to The Huntress Security Platform.
Huntress discovered threat actors abusing a blind SQL injection vulnerability in BillQuick Web Suite. Follow our analysis and latest findings in this blog.
Authored by: Wenfeng Yu McAfee Mobile Research team recently discovered a new piece of malware that specifically steals Google, Facebook,... The post Social Network Account Stealers Hidden in...
Acer has confirmed a 60GB data breach resulting from a cyber attack on its Indian offices - the second major breach to affect the global hardware and electronics company this year.
Acer has confirmed a 60GB data breach resulting from a cyber attack on its Indian offices - the second major breach to affect the global hardware and electronics company this year.
Customers have come to realize ignorance isn’t bliss. Cloud has gotten too big and unwieldy for most companies to effectively manage on their own. That’s where Wiz comes in.
Learn about Huntress’ newest platform and service updates, including Managed Antivirus, Host Isolation and 24/7 ThreatOps coverage.
Learn how to protect cloud environments from the new critical Apache HTTP Server vulnerability.
On 2021-10-08, a campaign was reported, involving Abcbot operator, gaining initial access via Cloud native misconfig, to achieve Resource hijacking. The following tools were observed: Kunpeng.
Learn how to protect your cloud environment from supply chain attacks.
After months of rigorous beta testing, we’re excited to announce the addition of our Managed Antivirus service to the Huntress Security Platform.
In honor of National Cybersecurity Awareness Month, here are four critical tips to help you take both your cybersecurity hygiene and knowledge up a notch.