advanced-persistent-threat-techniques-container-attacks 
Aqua Security
AUGUST 26, 2021
Aqua’s Team Nautilus detected an intensive campaign targeting cloud native environments that uses advanced persistent threat (APT) techniques usually leveraged by nation-state threat actors.
CIO
OCTOBER 25, 2023
As a result of using the extracted tokens from the Okta support system and support cases, the threat actor subsequently gained complete access to many of their customers’ systems. In reaction to the attack, Okta support asked customers to upload an HTTP Archive (HAR) file to help troubleshoot issues.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Lacework
FEBRUARY 13, 2024
The guidance focuses on addressing nation-state threats, and particularly, persistent threats that utilize living off the land (LOTL) techniques to invade and persist for extended periods within networks and cloud environments. Why are both persistent threats and risk important?
Tenable
MAY 18, 2023
The advisory details the tactics, techniques and procedures (TTPs) and indicators of compromise (IOCs) associated with the group and its corresponding malware. The group claims to have stolen ~4,200 student records containing phone numbers, email addresses, and social security numbers. and Australia. and Australia.
Prisma Clud
JULY 20, 2023
LLM and Cloud Security Let’s explore the relationship between LLMs and cloud security, discussing how these advanced models can be dangerous, as well as leveraged to improve the overall security posture of cloud-based systems. However, there is no perfectly balanced training data, and thus every model will always be biased in certain aspects.
Palo Alto Networks
DECEMBER 29, 2022
Last year’s most popular posts on the Unit 42 Threat Research blog let us examine what the events of 2022 can tell us about the year to come. Threat actors are tremendously fond of recycling and reusing old techniques, as long as they continue to have a high rate of return. All Eyes on Eastern Europe. Beginning on Jan.
Tenable
JULY 11, 2023
According to researchers at Microsoft, exploitation of CVE-2023-36884 has been attributed to a threat actor known as Storm-0978, also known as DEV-0978 and RomCom, a reference to the backdoor used by the group as part of its attacks. It was assigned a CVSSv3 score of 7.8 and patches are available for all supported versions of Windows.
Expert insights. Personalized for you.
116 
Let's personalize your content