Sign in Subscribe

Edward Crowder

Editor in Chief and founder of CyberRisks.ai, previously a threat intelligence researcher at a top global MDR, specializes in global major incident detection and response.

SambaSpy Malware Campaign Targets Italian Users with Precision

SambaSpy Malware Campaign Targets Italian Users with Precision

On September 18, 2024, GREAT research team released a report on a campaign identified in May 2024, where a highly targeted malware campaign exclusively aimed at Italian users was uncovered by the Global Research & Analysis Team (GReAT).

Fox Kitten APT Continues to Exploit U.S. and Foreign Organizations, New Infrastructure Revealed

Fox Kitten APT Continues to Exploit U.S. and Foreign Organizations, New Infrastructure Revealed

Censys conducted an independent investigation of the IOC profiles mentioned in the FBI/CISA report. Their research identified new patterns in the threat group’s infrastructure that could indicate previously undetected hosts linked to Fox Kitten

Hidden Persistence Tactics: Exploiting Entra ID Administrative Units

Hidden Persistence Tactics: Exploiting Entra ID Administrative Units

On September 17, 2024, a new research paper presented at fwd Europe by security researcher Katie Knowles revealed novel techniques for maintaining hidden persistence within Microsoft Entra ID environments.

Google Cloud Exploit: CloudImposer Vulnerability Exposed Millions of Servers

Google Cloud Exploit: CloudImposer Vulnerability Exposed Millions of Servers

On September 16, 2024, Tenable Research disclosed a critical Remote Code Execution (RCE) vulnerability in Google Cloud Platform (GCP). Dubbed CloudImposer, the flaw allowed attackers to execute malicious code on potentially millions of Google servers

China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations

China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations

A joint cybersecurity advisory revealing that cyber actors linked to the People’s Republic of China (PRC) have compromised thousands of internet-connected devices.

CISA Adds Nine Exploited Vulnerabilities to KEV Catalog Over Two Days

CISA Adds Nine Exploited Vulnerabilities to KEV Catalog Over Two Days

n September 17 and 18, 2024, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added nine vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.