GwisinLocker is a new ransomware family that targets Linux in industrial and pharma companies with sophisticated "double extortion" ransomware campaigns.
Black Hat is best known for hardware and traditional software exploits, but this year it showcases more software supply chain security issues—marking the shift in the threat landscape.
This week: Microsoft alleges an Austrian consultancy, DSIRF, is actually a malicious actor dubbed KNOTWEED and suspected of authoring and selling the Subzero malware for use in attacks by malicious actors. Also: new malware-infested apps turn up in the Google Play store, and more.
An analysis of three in-the-wild payloads delivered using the Follina exploit shows how attackers can boost efforts to avoid detection by security tools.
Better threat hunting and investigations with flexibility in status classifications, reliable dynamic and network analysis, smoother workflows/maintenance.
The Week in Cybersecurity highlights: An APT group is using Dropbox and Google Drive to cover up attacks, and malware is spreading via Play Store apps.
Get the best of RL Blog delivered to your in-box weekly to stay up to date on key trends, analysis and best practices across threat intelligence and software supply chain security.
