Data-Driven Insights on Internet Mechanics, Governance & Security
We are now twelve days (July 18-29) into the CrowdStrike Outage incident. While its impact and scale may be unprecedented, recovery operations are winding down. In this follow-on to our July 24th Flash …
CrowdStrike Outage Day 12: Winding Down, For Now arrow_forward
We are now in day 6 (July 18 – 23) of the Internet outage caused by a defective CrowdStrike software update. In this post, we focus on one aspect of the story …
Flash Report: Malicious Domain Activity Related to CrowdStrike Outage arrow_forward
Initially, this post was intended to be a routine review of how cyber threat actors utilize domain names and DNS infrastructure, how these uses evolve, and how cyber threat analysts can use …
Bulletproof Hosting Havens for FIN7 and Russian Cyber Threat Groups arrow_forward
CopyCop refers to two recent Cyber Threat Intelligence (CTI) reports from Recorded Future on GenAI (Generative AI) enabled Russian Influence Operations. The CopyCop campaigns are just the latest examples of ‘narrative laundering’ …
CopyCop+: A Primer in GenAI Disinformation and DNS Intelligence for CTI Analysts arrow_forward
There’s never a dull moment in AI and Cyber Threat Intelligence (CTI) world. All the hype, slop, and serious threats, leave no time to admire the problem. So, let’s get on with …
AI-powered Cyber Threats: No Time to Admire the Problems arrow_forward