Introduction Back in October 2022, Kaspersky GReAT was looking into a peculiar advertisement on a hacking forum. A cybercriminal had been advertising a UEFI bootkit, dubbed BlackLotus, that could bypass Secure Boot, for $5,000. Given the low price for such powerful capabilities, the cybersecurity community initially…
Live Feed
Every headline from 99 sources, newest first. Checks for new items every minute.
Auto-refresh on
Kaspersky SecurelistCritical
How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central AsiaUpdated Cyber Threat Actor Naming System
Update (July 30): A table listing the new names of select prominent threat actors was appended to this post. Introduction Today, Google Threat Intelligence Group (GTIG) will begin rolling out a unified naming schema for tracking threat actors. This new naming taxonomy represents an effort to standardize tracking…
Tracking Advanced Persistent Threat Groups | Recorded Future
Key takeaways Advanced Persistent Threats (APTs) are sophisticated, long-term cyber campaigns conducted by well-funded human adversaries (often nation-states) who target specific organizations for espionage, data theft, or critical infrastructure disruption. Traditional security tools often fail because APT groups…