Sign in Subscribe

Edward Crowder

Editor in Chief and founder of CyberRisks.ai, previously a threat intelligence researcher at a top global MDR, specializes in global major incident detection and response.

BlindEagle Soars Again: APT Group Intensifies Campaigns in Latin America

BlindEagle Soars Again: APT Group Intensifies Campaigns in Latin America

On August 19, 2024, a report by GReAT highlighted a surge in activity by the notorious Advanced Persistent Threat (APT) group BlindEagle, also known as "APT-C-36." The group, infamous for its targeted cyber campaigns across Latin America, has ramped up operations.

Cyclops: New Malware Platform Potentially Linked to Charming Kitten

Cyclops: New Malware Platform Potentially Linked to Charming Kitten

On August 14, 2024, cybersecurity firm HarfangLab released a detailed report on Cyclops, a newly identified malware platform believed to be the successor to the notorious BellaCiao malware.

Hacker's Misstep Reveals Styx Stealer's Dark Web Connections

Hacker's Misstep Reveals Styx Stealer's Dark Web Connections

On August 16, 2024, Check Point Research (CPR) published a revealing report on Styx Stealer, a new malware variant capable of stealing sensitive data from browsers, instant messaging platforms, and cryptocurrency wallets.

TodoSwift Malware Disguised as Bitcoin PDF: North Korea’s BlueNoroff Threat Actor Group Strikes Again

TodoSwift Malware Disguised as Bitcoin PDF: North Korea’s BlueNoroff Threat Actor Group Strikes Again

On August 16, 2024, Kandji released a technical report on a new macOS malware named "TodoSwift," believed to be connected to the North Korean threat actor group BlueNoroff.

Critical SolarWinds CVE-2024-28986 Vulnerability Added to CISA’s Known Exploited Vulnerabilities Catalog

Critical SolarWinds CVE-2024-28986 Vulnerability Added to CISA’s Known Exploited Vulnerabilities Catalog

On August 13, 2024, SolarWinds released a security advisory regarding a critical vulnerability in their Web Help Desk (WHD) software. The vulnerability, CVE-2024-28986, poses a significant risk of remote code execution via Java deserialization.