Unlike traditional ransomware attacks that solely focus on locking up an organization’s files, double extortion attacks add an additional layer of pressure by threatening to expose sensitive information. Here are some tips from our SamurAI SOC on how to detect threats and protect your busniness.
NTT Security’s Holdings recent research shines light on one of the most persistent cyber espionage groups linked to North Korea: Kimsuky.
Supply chain attacks are growing in frequency and complexity, opening the door to significant risks to your organization. Here are some tips from us on how to detect and mitigate supply chain attacks and secure your business.
The NIS2 directive, effective in Sweden from October 18, 2024, will significantly impact various sectors, enhancing risk management, network security, and 24/7 incident reporting. This blog explores the expanded industry scope, preparation strategies for organizations, and the critical need for robust cybersecurity amid rising cyber threats.
The NIS2 Directive enhances the resilience and security of EU organizations. With expanded sector coverage and stricter obligations, non-compliance can lead to fines up to 10 million euros. Prompt incident reporting is crucial, requiring early warnings within 24 hours and detailed reports within 72 hours to mitigate cyber risks effectively.
Discover the latest trends in ransomware attacks against organizations with critical infrastructure from our Global Threat Intelligence Report. Joel Cedersjö, cybersecurity expert, sheds light on the urgency of protecting businesses and consumers in the ever evolving landscape.
In August, SamurAI SOC analysts uncovered a phishing campaign exploiting Microsoft Planner. Attackers mimicked Planner notifications, using convincing email addresses to deceive users. The emails led to a redirector and then to “EvilProxy,” intercepting login credentials. Our SamurAI SOC developed custom Sigma rules to detect these tactics.
By leveraging the expertise of your CISO, you can ensure your organization is well-prepared to face any cyber challenge. Here are 6 essential questions to ask your CISO to evaluate your cyber readiness.
Sansec reported a supply chain attack on Polyfill.io after its acquisition by Funnull in February. Malicious code was injected, targeting mobile devices and redirecting users to scam sites. The developer community responded quickly, with Namecheap suspending the malicious domain and Cloudflare and Fastly providing secure alternatives.
The US Department of Justice announced that it had dismantled a Russian AI-powered bot farm aimed at spreading propaganda. Nearly 1,000 social media accounts, allegedly posing as US residents, were seized. These accounts were used to support the invasion of Ukraine and sway public opinion in favor of Russia.