Topic
Emerging Issue
Info-stealing Malware in Software Supply Chains: Cyber Threat Intelligence Roundup
Info-stealing malware in software supply chains and key findings from KELA’s latest cybercrime prevention report.
New Solutions for Addressing Software Supply Chain Attacks - Cyber Threat Intelligence Roundup
A pro-China disinformation campaign targeting US elections, Google’s new GUAC open-source project, and the ongoing debate about password expiration.
How to Use Tanium Software Bill of Materials to Protect Your Organization From OpenSSL v3 Vulnerability
Open-source toolkit developers announce two “High” severity vulnerabilities in OpenSSL v3, and Tanium has the solution to help.
Zimbra Zero-Day Flaw: Cyber Threat Intelligence Roundup
Zimbra’s new zero-day flaw, a Ursnif malware variant focuses on ransomware and data theft, and a stealthy PowerShell backdoor disguises itself as a Windows update.
Are You Using Products or Services Recently Banned by the FCC? Tanium Can Help.
The U.S. Federal Communications Commission (FCC) has recently expanded the list of manufacturers and services it deems national security risks.
Emotet Malware Resurfaces: Cyber Threat Intelligence Roundup
The resurgence of Emotet, the evolution of IcedID, and the new Alchimist framework targeting Windows, macOS, and Linux
Business Email Compromise Attacks on the Rise: Cyber Threat Intelligence Roundup
The rising trend of business email compromise, the latest on the popular Bumblebee loader, and an overview of fake Microsoft Exchange ProxyNotShell exploits, which are now for sale on GitHub.
Asset Visibility is Key in Addressing CISA’s BOD 23-01
Learn how agencies can address the U.S. Cybersecurity & Infrastructure Security Agency's new Binding Operational Directive (BOD 23-01).
Why the Bridges Between Blockchains Are Under Assault
Connections between blockchains are the weak links in the security armor of the “unhackable” technology underpinning the next generation of the internet.
Hackers Use PowerPoint Files for “Mouseover” Malware: Cyber Threat Intelligence Roundup
Hackers use PowerPoint files for mouse-hover malware delivery, Russia plans “massive cyberattacks” on critical infrastructure, and researchers uncover a covert attack campaign targeting military contractors.
To Defend Against Vishing, Get Smart
Voice-phishing attackers use urgent calls to trick users into divulging sensitive data and breaking into your network. Here’s how CISOs can be prepared for this popular form of cybercrime.
The Rise of Phishing-as-a-Service: Cyber Threat Intelligence Roundup
The minimal impact of offensive hacks in the Russia - Ukraine conflict, a new EvilProxy phishing toolkit and Monti ransomware emerges.