Sign in Subscribe

Edward Crowder

Editor in Chief and founder of CyberRisks.ai, previously a threat intelligence researcher at a top global MDR, specializes in global major incident detection and response.

Microsoft Announces Windows Endpoint Security Ecosystem Summit Following CrowdStrike Outage

Microsoft Announces Windows Endpoint Security Ecosystem Summit Following CrowdStrike Outage

On September 10, 2024, Microsoft plans to host a pivotal event, the Windows Endpoint Security Ecosystem Summit, at its Redmond headquarters. This gathering emerges in the aftermath of a significant CrowdStrike software update incident in July 2024, which impacted global IT systems.

Velvet Ant Threat Group Exploits Zero-Day Vulnerability in Cisco Nexus Switches to Deploy Malware

Velvet Ant Threat Group Exploits Zero-Day Vulnerability in Cisco Nexus Switches to Deploy Malware

On August 22, 2024, Sygnia released a detailed report uncovering a sophisticated cyber espionage campaign conducted by the China-nexus threat group "Velvet Ant." This group recently exploited a zero-day vulnerability (CVE-2024-20399) in Cisco Nexus Switch appliances

Unveiling the Stealthy Memory-Only Malware Exploiting Content Delivery Networks

Unveiling the Stealthy Memory-Only Malware Exploiting Content Delivery Networks

On August 22, 2024, Mandiant released a detailed report on a newly discovered memory-only malware dubbed "PEAKLIGHT." This sophisticated malware employs a complex, multi-stage infection process, leveraging content delivery networks (CDNs) to distribute malicious payloads.

Iranian Influence Operations Target U.S. Elections: Joint Statement by ODNI, FBI, and CISA

Iranian Influence Operations Target U.S. Elections: Joint Statement by ODNI, FBI, and CISA

On August 19, 2024, the Office of the Director of National Intelligence (ODNI), the Federal Bureau of Investigation (FBI), and the Cybersecurity and Infrastructure Security Agency (CISA) released a joint statement warning about increasing Iranian efforts to influence the U.S. elections.

New Log4j Campaign Exploits Vulnerability for Crypto-Mining and System Compromise

New Log4j Campaign Exploits Vulnerability for Crypto-Mining and System Compromise

On August 20, 2024, DataDog Security Labs released a comprehensive threat research report detailing a new opportunistic campaign leveraging the notorious Log4j vulnerability, also known as Log4Shell.

CISA Adds Four Known Exploited Vulnerabilities to Catalogue

CISA Adds Four Known Exploited Vulnerabilities to Catalogue

On August 21, 2024, the Cybersecurity and Infrastructure Security Agency (CISA) updated its Known Exploited Vulnerabilities Catalog with four newly identified vulnerabilities, emphasizing the need for immediate remediation.