On 22-October-2024, The Computer Emergency Report Team of Ukraine (CERT-UA) and Amazon issued Cyber Threat Intelligence (CTI) alerts. Microsoft followed with a detailed blog post on 29-October. These alerts described a targeted …
Security
DOJ Counters Russian Election Interference
Big Events have a way of changing editorial calendars. Before taking a brief Labor Day break, Iran’s Election Interference was next on our calendar. But things changed on 4-September with DOJ’s court …
CrowdStrike Outage Day 12: Winding Down, For Now
We are now twelve days (July 18-29) into the CrowdStrike Outage incident. While its impact and scale may be unprecedented, recovery operations are winding down. In this follow-on to our July 24th Flash …
CrowdStrike Outage Day 12: Winding Down, For Now arrow_forward
Flash Report: Malicious Domain Activity Related to CrowdStrike Outage
We are now in day 6 (July 18 – 23) of the Internet outage caused by a defective CrowdStrike software update. In this post, we focus on one aspect of the story …
Flash Report: Malicious Domain Activity Related to CrowdStrike Outage arrow_forward
Bulletproof Hosting Havens for FIN7 and Russian Cyber Threat Groups
Initially, this post was intended to be a routine review of how cyber threat actors utilize domain names and DNS infrastructure, how these uses evolve, and how cyber threat analysts can use …
Bulletproof Hosting Havens for FIN7 and Russian Cyber Threat Groups arrow_forward