talos — Black Arrow Cyber Consulting

Posts tagged talos

Black Arrow Cyber Threat Briefing 01 September 2023

Black Arrow Cyber Threat Intelligence Briefing 01 September 2023:

-66 Percent of Businesses Don't Understand Their Cyber Risks

-Massive Supplier Cyber Breach Puts London’s Metropolitan Police on Red Alert After Officer and Staff Details Hacked

-Pay our Ransom Instead of a GDPR Fine, Cyber Crime Gang Tells Targets, as Attacks Against Small Businesses Ramp Up

-Survey Finds In-house Counsel Cyber Anxiety Skyrocketing

-58% of Malicious Emails Contained Spoofed Content

-Cyber Attacks Remain a Top Concern for Organisations Across All Industries

-BYOD Security Gap: Survey Finds 49% of European Firms Unprotected

-13% of Employees Admit to Falling for Phishing Attacks Working at Home, 9% Would Wait to Report After the Weekend

-Numbers Don't Lie: Exposing the Harsh Truths of Cyber Attacks in New Report

-Kroll’s Breach Highlights SIM-Swapping Risk

-Reducing The Risk of AI, What Can You Do?

-Debunking Popular Cyber Security Myths

-3 Malware Loaders Responsible for 80% of Intrusions

-MOVEit Hack Shows Attackers Still Use Old Tricks

-Barracuda Thought it Drove 0-day Hackers out of Customers’ Networks. It was Wrong

Black Arrow AdminSeptember 3, 2023met police, metropolitan police, kroll, t-mobile, qbot, socgholish, raspberry robin, moveit, barracuda, sec, securities exchange commission, rackspace, sapphirestealer, akira, black basta, logicmonitor, st helens council, rhysida, university of michigan, ohio history connection, ftx, talos, whiffy recon, raccoon stealer, kmsdbot, jpcert, maldoc, dreambus, rocketmq, kaspersky, darkgate, earth estries, chisel, android, mmrat, five eyes, badbazaar, apac, doj, nasa, tesla, verizon, leaseweb, mom's meals, pole emploi, paramount, national safety council, airbnb, classicam, delinea, crowdstrike, gartner, department of justice, x, elon musk, anonymous sudan, tiktok, instagram, solarwinds, poland railway, sbu, flax typhoon, james cleverly, lazarus, vmconnect, pypi, luna grabber, claroty, log4j, chrome, juniper, vmware aria operations, clop, wordpress, cisco asa ssl vpn, splunk, google, openfire, national grid, black arrow cyber, black arrow, threat intelligence, osint, ncsc, national cyber security centre, cpni, mi5, gchq, cert, nca, national crime agency, europol, interpol, enisa, nato, cyber, information security, it security, cyber warfare, russia, north korea, china, iran

Black Arrow Cyber Threat Briefing 12 May 2023

Black Arrow Cyber Threat Briefing 12 May 2023:

-79% of Cyber Pros Make Decisions Without Threat Intelligence

-61% of Business Leadership Overlook the Role of Cyber Security as a Business Enabler and as being Key to Business Success

-Risk Managers Warn Cyber Insurance Could Become ‘Unviable Product’

-Small and Medium-Sized Businesses: Don’t Give up on Cyber Security

-AI Has Been Dubbed a 'Nuclear' Threat to Cyber Security, but It Can Also Be Used for Defence

-Paying Cyber Hijackers’ Ransoms Doubles Cost of Recovery, Sophos Study Shows

-Majority of US, UK CISOs Unable to Protect Company 'Secrets'

-Company Executives Can’t Afford to Ignore Cyber Security Anymore

-BEC Campaign via Israel Spotted Targeting Multinational Companies

-CISOs Worried About Personal Liability for Breaches

-UK, US and International Allies Uncover Russian Snake Malware Network in 50+ Countries

-Plug-and-Play Microsoft 365 Phishing Tool 'Democratizes' Attack Campaigns

Black Arrow AdminMay 14, 2023at&t, adobe, linkedin, delinea, encrochat, ubiquiti, simplify, seoul, sysco, chrome, google, ruckus, cofense, cyble, esxi, cactus, threat intelligence, federation of european risk management associations, ferma, lloyds, financial times, smbs, smb, chatgpt, sophos, israel, snake malware, ncsc, nsa, fsb, phishing-as-a-service, cisco, talos, greatness, kaspersky, rochester public school, constellation, alphv, akira, western digital, conti, royal, smashing pumpkins, dragos, bloomberg, abb, black basta, babuk, gmail, aurora, linux bpfdoor, fluhorse, fleckpe, bad bots, fortinet, andoryubot, rapperbot, cryptojacking, mirai botnet, capita, openai, msi, nextgen, brightly, schooldude, bitcoin, deepfake, merck, notpetya, sbom, enisa, adcs, ftx, tor, india, twitter, circle, tiktok, csam, pega, isc2, isaca, rsac, proofpoint, hp, dell, phishing, amazon, killnet, cert-ua, smokeloader, roarbat, dragon breath, capvision, sidewinder, wordpress, azure, papercut, cyberghost, sap, eset apt, eurovision, black arrow cyber, black arrow, osint, national cyber security centre, cpni, mi5, gchq, cert, nca, national crime agency, europol, interpol, nato, cyber, information security, it security, cyber warfare

Black Arrow Cyber Threat Briefing 05 November 2021

-500 Million Attempted Ransomware Attacks (So Far) in 2021, With No Sign Of Slowing

-Top 10 Ways Attackers Are Increasing Pressure On Their Ransomware Victims To Pay

-40% Of Organisations Suffered A Cloud-Based Data Breach In The Past 12 Months

-Midsize Business Cyber Attacks: A Security Reality Check

-70% Of Dev Teams Admit To Skipping Security Steps

-79% Of IT Teams Have Seen Increase In Endpoint Security Breaches

-Enterprises With Subsidiaries More Prone To Cyber Attacks, Study Says

-Cisco Talos Reports New Variant Of Babuk Ransomware Targeting Exchange Servers

-Ransomware Gangs Target Corporate Financial Activities

-Web Of Deceit: The Rising Threat Of Ransomware

-While Businesses Are Ramping Up Their Risk Mitigation Efforts, They Could Be Doing More

Black Arrow AdminNovember 7, 2021cyber, cyber security, infosec, information security, guernsey, gfsc, regulated firms, financial services, aviation, accounting, law firms, legal sector, retail, online, cpni, mi5, ncsc, cisa, fbi, national cyber security centre, gchq, cert, cert.gg, threat intel, threat intelligence, threat report, ransomware, executives, msp, mssp, cloud, open source, attack surface, hackers, criminals, dark web, remote code execution, rce, zero-day, databases, microsoft, windows, vulnerability, vulnerabilities, vulnerability management, patch management, patching, external it, fraud, bec, business email compromise, email, social engineering, phishing, spear-phishing, whaling, malware, encryption, fraudsters, scammers, scam, organised crime, criminal actor, criminal actors, supply chain, third parties, cryptocurrencies, cryptomining, apple, mac, macos, ios, iphone, android, iot, credentials, credential stuffing, denial of service, ddos, botnet, apt, china, russia, iran, north korea, ai, cyber warfare, espionage, insurance, cyber insurance, incident response, incident response plan, disaster recovery, disaster recovery plan, drp, business continuity, business continuity planning, insiders, staff, users, training, education and awareness training, education, awareness, human element, human centric security, human centric, weakest link, endpoint protection, antivirus, antimalware, wfh, work from home, dns, critical infrastructure, cni, rootkits, rootkit, developers, devs, dev teams, endpoints, subsidiaries, cisco, talos, babuk, conti, proxyshell, powershell, toronto, subway, blackmatter, lockbit, amazon, call center, call centre, mekotio, google chrome, facebook, face recognition, parental controls, identity fraud, passwords, abstractemu, braktooth, gitlab, git, magecart, squid game, bzx defi

Blog