How MSSPs Turn Security Alerts Into Exponential Revenue With Morpheus AI
The MSSP market is growing, but the number of players is shrinking. Industry analysis forecasts the top 200 MSSPs...
analysis
Oct Recap: New and Newly Deniable GCP Privileged Permissions
As October 2025 wraps up, Sonrai’s latest analysis of Google Cloud Platform permissions reveals both newly introduced privileged actions...
Oct Recap: New AWS Privileged Permissions and Services
As October 2025 closes, Sonrai’s latest analysis of new AWS permissions reveals a continued trend: incremental privilege changes with...
Agenda Ransomware Deploys Linux Variant on Windows Systems Through Remote Management Tools and BYOVD Techniques
Analysis of the embedded obfuscated JavaScript within these fake CAPTCHA pages revealed a multistage payload delivery system that initiated downloads...
Self-Propagating Malware Spreading Via WhatsApp, Targets Brazilian Users
WhatsApp Web Session Hijack and Automated Propagation Trend Research analysis found that a key feature of this malware is its...
Analysis Surfaces High Degree to Which Malware Evades Detection
An analysis of 769 public threat reports published by Stairwell, a provider of file analysis tools, finds they contained...
New Research Reveals One-Third of Cloud Assets Harbor Easily Exploitable Vulnerabilities
Analysis of nearly five million internet-exposed assets shows significant security gaps across major cloud platforms, with Google Cloud-hosted assets showing...
Watch Out for Salty2FA: New Phishing Kit Targeting US and EU Enterprises
Sep 10, 2025The Hacker NewsMalware Analysis / Enterprise Security Phishing-as-a-Service (PhaaS) platforms keep evolving, giving attackers faster and cheaper ways...
An MDR Analysis of the AMOS Stealer Campaign Targeting macOS via ‘Cracked’ Apps
Conclusion Our analysis revealed a sophisticated multistage attack that relies on social engineering to trick victims, uses domain rotation techniques...
An MDR Analysis of the AMOS Stealer Campaign Targeting macOS via ‘Cracked’ Apps
Conclusion Our analysis revealed a sophisticated multistage attack that relies on social engineering to trick victims, uses domain rotation techniques...
Futurum Group Research Sees Cybersecurity Spending Reaching $287.6B by 2029
The cybersecurity market, as threats become more complex, is forecasted to grow at a compound annual growth rate (CAGR) of...
OpenText Report Shines Spotlight on Malware Infection Rates
A 2025 cybersecurity threat report based on analysis of data collected from tens of millions of endpoints by OpenText shows...
TheWizards APT group uses SLAAC spoofing to perform adversary-in-the-middle attacks
In this blogpost, ESET researchers provide an analysis of Spellbinder, a lateral movement tool for performing adversary-in-the-middle attacks, used by...
Report Exposes Soft Security Underbelly of Mobile Computing
Zimperium, this week during the 2025 RSA Conference, shared an analysis of mobile computing environments that finds more than 60%...
A Comprehensive Analysis of the Govern Function in NIST CSF 2.0
A Comprehensive Analysis of the Govern Function in NIST CSF In early 2024, The National Institute of Standards and Technology...
