Threat Intelligence

Breaking news, news analysis, and expert commentary on cybersecurity threat intelligence, including tools & technologies.

hand typing on laptop with machine learning-related symbols in background.

Threat Intelligence

Open Source Project Aims to Detect Living-Off-the-Land Attacks Open Source Project Aims to Detect Living-Off-the-Land Attacks

The machine learning classifier from Adobe can determine whether system commands are malicious and classify them using a variety of tags useful for security analysts.

byRobert Lemos, Contributing Writer

Nov 12, 2021

|

1 Min Read

Chart showing daily volume of spam emails delivering SquirrelWaffle between Sept and Oct 2021.

Threat Intelligence

SquirrelWaffle Leverages Malspam to Deliver Qakbot, Cobalt Strike SquirrelWaffle Leverages Malspam to Deliver Qakbot, Cobalt Strike

byEdmund Brumaghin

Nov 10, 2021

1 Min Read

Threat Intelligence

Defining the Hierarchy of Value in Cyber Intelligence Defining the Hierarchy of Value in Cyber Intelligence

Nov 10, 2021

1 Min Read

Marietje Schaake, international policy director at Stanford University's Cyber Policy Center

Threat Intelligence

Securing the Public: Who Should Take Charge?Securing the Public: Who Should Take Charge?

byKelly Sheridan

Nov 10, 2021

1 Min Read

Microphone with 'on the air' sign lit in red

Threat Intelligence

Dark Reading Video News Desk Comes to Black Hat Europe Dark Reading Video News Desk Comes to Black Hat Europe

byDark Reading Staff

Nov 10, 2021

1 Min Read

Threat Intelligence

US Offers $10M Reward For ID, Location of DarkSide Leadership US Offers $10M Reward For ID, Location of DarkSide Leadership

byDark Reading Staff

Nov 4, 2021

1 Min Read

Mapping malicious activity frequently detected by Cisco Secure firewalls against MITRE's ATT&CK framework.

Threat Intelligence

5 MITRE ATT&CK Tactics Most Frequently Detected by Cisco Secure Firewalls

5 MITRE ATT&CK Tactics Most Frequently Detected by Cisco Secure Firewalls

Threat Intelligence

US Blacklists Israeli Firms NSO Group and Candiru

US Blacklists Israeli Firms NSO Group and Candiru

byDark Reading Staff

Digital image--concept of supply chain

Threat Intelligence

Attackers Flaunt Remote Access Credentials, Threaten Supply Chain

Attackers Flaunt Remote Access Credentials, Threaten Supply Chain

byRobert Lemos, Contributing Writer

Threat Intelligence

FBI: Ransomware Actors Use Financial Events to Extort Victims

FBI: Ransomware Actors Use Financial Events to Extort Victims

byDark Reading Staff

Threat Intelligence

Phishing and Spam Lures Feature Sports, Aim to Steal Credentials

Phishing and Spam Lures Feature Sports, Aim to Steal Credentials

byRobert Lemos, Contributing Writer

Threat Intelligence

New 'Trojan Source' Method Lets Attackers Hide Vulns in Source Code

New 'Trojan Source' Method Lets Attackers Hide Vulns in Source Code

byDark Reading Staff

mobile phone logging into VPN application

Threat Intelligence

APTs, Teleworking, and Advanced VPN Exploits: The Perfect Storm

APTs, Teleworking, and Advanced VPN Exploits: The Perfect Storm

byKelly Sheridan

Threat Intelligence

Cybercriminals Ramp Up Attacks on Web APIs

Cybercriminals Ramp Up Attacks on Web APIs

byRobert Lemos, Contributing Writer

Chain link held together with paper clip

Threat Intelligence

North Korea's Lazarus Group Turns to Supply Chain Attacks

North Korea's Lazarus Group Turns to Supply Chain Attacks

byJai Vijayan, Contributing Writer

Threat Intelligence

DoJ & Europol Arrest 150 in Disruption of DarkNet Drug Operation

DoJ & Europol Arrest 150 in Disruption of DarkNet Drug Operation

byDark Reading Staff

Threat Intelligence

'TodayZoo' Phishing Kit Cobbled Together From Other Malware

'TodayZoo' Phishing Kit Cobbled Together From Other Malware

byRobert Lemos, Contributing Writer

Threat Intelligence

Malware Abuses Core Features of Discord

Malware Abuses Core Features of Discord

byDark Reading Staff

Security leaders were fairly optimistic about their organization's security capabilities.

Threat Intelligence

Enterprise Cybersecurity Strategies Are Getting More Attention

Enterprise Cybersecurity Strategies Are Getting More Attention

Threat Intelligence

Former NSA Deputy Director William Crowell Joins [redacted] Board of Directors

Former NSA Deputy Director William Crowell Joins [redacted] Board of Directors

Threat Intelligence

NSA, FBI, CISA Issue Advisory on 'BlackMatter' Ransomware

NSA, FBI, CISA Issue Advisory on 'BlackMatter' Ransomware

byDark Reading Staff

Skulls on keys of a computer keyboard

Threat Intelligence

'Clumsy' BlackByte Malware Reuses Crypto Keys, Worms Into Networks

'Clumsy' BlackByte Malware Reuses Crypto Keys, Worms Into Networks

byRobert Lemos, Contributing Writer

Ransomware note on a computer screen

Threat Intelligence

VirusTotal Shares Data on Ransomware Activity

VirusTotal Shares Data on Ransomware Activity

byKelly Jackson Higgins, Editor-in-Chief, Dark Reading

Threat Intelligence

Corelight Unveils Corelight Labs, a Hub for Research and Innovation

Corelight Unveils Corelight Labs, a Hub for Research and Innovation

Businessman watching a virtual widescreen of data analysis.

Threat Intelligence

Handling Threat Intelligence Across Billions of Data Points

Handling Threat Intelligence Across Billions of Data Points

Threat Intelligence

'FontOnLake' Malware Family Targets Linux Systems

'FontOnLake' Malware Family Targets Linux Systems

byDark Reading Staff

Graph of nation-state attack groups

Threat Intelligence

Microsoft: 58% of Nation-State Cyberattacks Come From Russia

Microsoft: 58% of Nation-State Cyberattacks Come From Russia

byKelly Sheridan

Threat Intelligence

New Kaspersky Service Delivers Cyberthreat Insights on Request

New Kaspersky Service Delivers Cyberthreat Insights on Request

Pipeline marker on Colonial right-of-way

Threat Intelligence

What the CEO Saw: Colonial Pipeline, Accellion Execs Share Cyberattack War Stories

What the CEO Saw: Colonial Pipeline, Accellion Execs Share Cyberattack War Stories

byKelly Jackson Higgins, Editor-in-Chief, Dark Reading

Threat Intelligence

Space ISAC and NY Metro InfraGard Members Alliance Announce Collaboration to Advance the Mission of Cybersecurity in Space

Space ISAC and NY Metro InfraGard Members Alliance Announce Collaboration to Advance the Mission of Cybersecurity in Space

Photo of Kevin Mandia

Threat Intelligence

Mandia Alerted NSA on FireEye's SolarWinds Breach

Mandia Alerted NSA on FireEye's SolarWinds Breach

byKelly Jackson Higgins, Editor-in-Chief, Dark Reading

Threat Intelligence

New Atom Silo Ransomware Group Targets Confluence Servers

New Atom Silo Ransomware Group Targets Confluence Servers

byDark Reading Staff

gavel and handcuffs next to keyboard on wooden surface

Threat Intelligence

Law Enforcement Agencies Seize $375K in Ukraine Ransomware Bust

Law Enforcement Agencies Seize $375K in Ukraine Ransomware Bust

Threat Intelligence

Cyberspace, Cybergames, and Cyberspies

Cyberspace, Cybergames, and Cyberspies

Threat Intelligence

US Extradites CardPlanet Operator Back to Russia

US Extradites CardPlanet Operator Back to Russia

byDark Reading Staff

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.