Insider
Threat Programs

Some of the world’s leading cybersecurity authorities banded together to co-author the Joint Cybersecurity Advisory: 2021 Top Routinely Exploited Vulnerabilities, where they provided details on CVE vulnerabilities that have been routinely exploited by malicious actors last year. These are the top 15 routinely exploited vulnerabilities in 2021: CVE ID VulnDB ID CVE-2021-44228 275958 CVE-2021-40539 267017 […]

Perfect storm: Sanctions and counter-sanctions  Sanctions introduced against Russia in the wake of the 2022 Russian invasion of Ukraine—coupled with capital controls introduced by the Russian Central Bank to counter them—have affected opportunities for cybercriminals to transfer financial resources (e.g. profits from criminal schemes) between Russia and Western countries, though not cut them off entirely. […]

This article was originally published on Dark Reading. How Russia Is Isolating Its Own Cybercriminals by Ian W. Gray, Senior Director of Research and Analysis Sanctions imposed by the Biden administration, coupled with Russia’s proposed initiative to cut itself off from the global Internet, is causing cybercriminals to ponder their future. Russian cybercriminals dominate the […]

Threat environment On April 17, ISIS’s official spokesperson, Abu Omar al-Muhajir, released his second audio message since assuming his new role. The audio message, which is over 33 minutes long, began with a congratulatory note on the holy month of Ramadan then quickly became bellicose. Given the context in which the newest message was released, […]

The Open Source Software (OSS) community has been split in two after an OSS author repurposed his own library to protest the Ukrainian-Russian war. On March 7, RIAEvangelist released several versions of his “node-ipc” software package—which has been downloaded millions of times—with some versions reportedly overwriting code on machines presumably located in Russia and Belarus. […]

Click here for Flashpoint’s coverage of the role of intelligence in Russia’s war on Ukraine. Russia moves to control the information narrative The Russian government ordered state-owned portals to connect to its state-controlled domain name system servers by March 11—and, to switch to Russian hosting providers and localize elements that may not in the future […]

Threat intelligence serves as your organization’s first line of defense against threat actors and security risks that may be targeting your data, infrastructure, assets, personnel, and stakeholders. Understanding the importance of this information—and working to improve the quality of your threat intel and risk remediation program—is crucial to maximizing your organization’s defense capabilities and security […]

Assessing risk exposures Since Russia invaded Ukraine on February 24, 2022, Flashpoint has been hosting a regular Community Call to provide timely updates on the war, including a Q&A session with our analysts who are regional experts. In each call, there are two questions that are most commonly asked:  How might decisions made by Western […]

Ransomware attacks are on the rise A quick scan of the news headlines tells us that ransomware events have become a frequent occurrence. It goes without saying then that ransomware attacks are top-of-mind for Cyber Threat Intelligence (CTI) and security teams, as threat actors continue to evolve, adjust, and scale their attacks against organizations of […]

Cyber threat intelligence positions security teams to understand, analyze, and act on important information in order to build up a company’s defense. The quality of your threat intelligence program directly correlates with how effectively your organization is able to protect itself from risks and keep sensitive data secure. What’s ahead: Key learnings In this article, […]