RMM-ber this ransomware. [Research Saturday]

RMM-ber this ransomware. [Research Saturday]

Ismael Valenzuela, Vice President of Labs, Threat Research and Intelligence at Arctic Wolf, sits down with Dave to discuss their work tracking Anubis. Arctic Wolf Labs details a series of 2026 Anubis ransomware intrusions, revealing affiliates using stolen VPN credentials and exploiting CitrixBleed 2 to gain initial access. Attackers then blended into legitimate IT activity by deploying RMM tools, using RDP and PsExec for lateral movement, stealing credentials, and establishing tunnels and proxies for persistence and exfiltration. The research highlights a repeatable attack chain defenders can disrupt before encryption, from suspicious remote access and unauthorized RMM deployment to credential theft, security-tool tampering, and ransomware execution. The research and executive brief can be found here: ⁠From CitrixBleed 2 to Cloudflared: The Tools and Techniques Behind Anubis Ransomware Attacks Learn more about your ad choices. Visit megaphone.fm/adchoices

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(3816)

The next name on CISA's door.

The next name on CISA's door.

Palantir’s CISO gets the nod for CISA. Tehran takes the rap for sabotaging European grocery freezers. Russia’s Turla turns victim Exchange servers into passive spy hubs. Barracuda battles actively cha...

10 Nov 28min

Peer pressure meets private keys.

Peer pressure meets private keys.

A classified memo ties Nvidia’s chief executive to Chinese espionage. AI coding agents crack under peer pressure, coughing up private keys. Big breaches hit seven million Japanese shoppers and three m...

9 Nov 29min

The hidden risks of system integration. [T-Minus: Space-Cyber Briefing]

The hidden risks of system integration. [T-Minus: Space-Cyber Briefing]

Though many look to ensure that they meet mission readiness requirements, overreliance on these practices can allow hidden risks to go unchecked. Host Maria Varmazis sits down with Vito Askins, found...

8 Nov 21min

Stealing more than the spotlight. [Research Saturday]

Stealing more than the spotlight. [Research Saturday]

This week, we are joined by Matt Poto, Associate Triage Analyst at Huntress, discussing their work on "Grand Theft Auto VI Hype Leads to Malware." Threat actors are exploiting the hype surrounding the...

7 Nov 14min

Keeping cyber threats on ice.

Keeping cyber threats on ice.

Federal agencies warn of cyberattacks on industrial refrigeration systems. Healthcare cybersecurity could get a post-midterm boost. Chainalysis exposes customer credentials, and DigiCert discloses a b...

6 Nov 28min

Claude, you've got company.

Claude, you've got company.

Claude Dispatch opens the door to hijacking. Residential proxies turn up on White House networks. Asian airlines suffer a wave of data breaches. Cisco and WatchGuard roll out critical patches. GhostMa...

5 Nov 29min

Ballots, bots, and backlash.

Ballots, bots, and backlash.

Election Day brings typical cyber threats, technical glitches, and misinformation. Hackers tamper with European refrigeration systems. OpenAI faces questions over years of security warnings. Nvidia re...

4 Nov 33min

Democracy without a safety net.

Democracy without a safety net.

CISA scales back its Election Day role. Google takes down a massive Android TV botnet. The UK warns of AI-powered attacks on critical infrastructure. German lawmakers face potential spyware threats. A...

3 Nov 29min

Populärt inom Politik & nyheter

svenska-fall
fordomspodden
aftonbladet-krim
p3-krim
rss-krimstad
flashback-forever
aftonbladet-daily
motiv
svd-ledarredaktionen
rss-vad-fan-hande
rss-krimreportrarna
rss-sanning-konsekvens
en-runda-till
omni-podd
kungligt
rss-frandfors-horna
rss-politikrummet
rss-utopia-2
olyckan-inifran
the-power-meeting-podcast