Tag: Active Directory

Following the February report by the Dutch National Cyber Security Centre (NCSC) on the advanced COATHANGER malware targeting FortiGate systems, further investigation by the Dutch Military Intelligence and Security Service (MIVD) and the Dutch General Intelligence and Security Service (AIVD)…

Microsoft security researchers provided details this week of a post-compromise capability, named MagicWeb, which is used by the Nobelium hacker group, to maintain persistent access to compromised environments. It has been identified that Nobelium remains highly active, executing multiple campaigns…

The Federal Bureau of Investigation (FBI) released on Tuesday an alert with updated details of the indicators of compromise (IOCs) used by the BlackCat/ALPHV ransomware, highlighting that the hackers continue to be active adversaries. “As of March 2022, BlackCat/ALPHV ransomware…

U.S. security agencies released a joint cybersecurity advisory (CSA) warning organizations of Russian state-sponsored hackers having gained network access to a non-governmental organization (NGO). The adversaries gained access by exploiting default multi-factor authentication (MFA) protocols and a Windows Print Spooler…

U.S. security agencies released on Monday a joint cybersecurity advisory notifying organizations of cyber attackers using the BlackMatter ransomware that could potentially target multiple critical infrastructure entities. Ransomware attacks against critical infrastructure entities could directly affect consumer access to critical…