Skip to content
Bulwark BlackBulwark Black LLC
Latest
Chainalysis Breach: Recover the Tokens, Verify the Screening BacklogD-Link DDP Flaws: Disable Discovery, Keep the Firmware Review OpenStolen App Secrets: Recover the Cloud Access Behind the CredentialCold-Chain Cyberattacks: Protect the Temperature, Not Just the DashboardOpenSSH on musl: Patch the Server, Verify Key-Only Accounts Stay Key-OnlyCWPdoor: Check the Management Server, Not Just Its Access LogsGhostMap Android Crash Loop: Prepare for Phone Loss Before the App RunsExploited CVEs: Prioritize the Reachable Path to Privileged Access3AM Ransomware: Keep Backup Authority Outside the Domain Blast RadiusNIKKE Launcher Compromise: Recover the Workstation, Not Just the GameAPT29-Linked Mobile Watering Holes: Patch the Phone, Recover the SessionsVAPOR PANDA’s ARTEX Campaign: Close the Trust Gaps Behind Parallel IntrusionsVOLTA Infostealer: Recover the Access Behind the AI-Ranked DossierHelp-Desk Vishing: Verify the Caller Before Opening Remote Access

Intel Feed

Cyber Threat IntelligencePage 26

Reports

Reporting archive — page 26

Showing 601–611 of 611 reports

Malware
JavaScript Malware: 50,000+ Bank Users at Risk Worldwide
Malware·

JavaScript Malware: 50,000+ Bank Users at Risk Worldwide

IOC: jscdnpack[.]com

Chinese Cyber Threat Intelligence
OAuth endpoint “MultiLogin” identified as root for Google Chrome’s widely adopted session jacking exploit.
Chinese Cyber Threat Intelligence·

OAuth endpoint “MultiLogin” identified as root for Google Chrome’s widely adopted session jacking exploit.

https://www.csoonline.com/article/1285861/highly-exploited-chromium-bug-traced-to-a-google-oauth-endpoint.html An undocumented Google OAuth endpoint has been identified to be the root of the notorious info stealing exploit that is being widely implemented by various threat actors

Russian Cyber Threat Intelligence
Prior to Cyber Attack, Russian Attackers Spent Months Inside the Ukraine Telecoms Giant
Russian Cyber Threat Intelligence·

Prior to Cyber Attack, Russian Attackers Spent Months Inside the Ukraine Telecoms Giant

https://www.cysecurity.news/2024/01/prior-to-cyber-attack-russian-attackers.html Kyivstar experienced a large-scale malfunction in December 2023, resulting in the outage of mobile communications and the internet for about 24 million users for several days. How? Russian hackers br

Chinese Cyber Threat Intelligence
Hackers Modifying Registry Keys to Establish Persistence via Scheduled Tasks
Chinese Cyber Threat Intelligence·

Hackers Modifying Registry Keys to Establish Persistence via Scheduled Tasks

Malware
Tackling Anti-Analysis Techniques of GuLoader and RedLine Stealer
Malware·

Tackling Anti-Analysis Techniques of GuLoader and RedLine Stealer

https://unit42.paloaltonetworks.com/malware-configuration-extraction-techniques-guloader-redline-stealer/

Malware
Hackers target Apache RocketMQ servers vulnerable to RCE attacks
Malware·

Hackers target Apache RocketMQ servers vulnerable to RCE attacks

https://www.bleepingcomputer.com/news/security/hackers-target-apache-rocketmq-servers-vulnerable-to-rce-attacks/

North Korean Cyber Threat Intelligence
North Korea Debuts ‘SpectralBlur’ Malware Amid macOS Onslaught
North Korean Cyber Threat Intelligence·

North Korea Debuts ‘SpectralBlur’ Malware Amid macOS Onslaught

https://www.darkreading.com/threat-intelligence/north-korea-debuts-spectralblur-malware-amid-macos-onslaught

Iranian Cyber Threat Intelligence
Iran’s APT33 targets US defense contractors with novel malware
Iranian Cyber Threat Intelligence·

Iran’s APT33 targets US defense contractors with novel malware

https://www.scmagazine.com/news/iranian-threat-group-apt33-targets-us-defense-contractors-with-novel-malware

Global Cyber Threat Intelligence
100 Days of YARA – 2023
Global Cyber Threat Intelligence·

100 Days of YARA – 2023

https://bitsofbinary.github.io/yara/2023/01/01/100daysofyara.html

Chinese Cyber Threat Intelligence
Hide and Seek in Windows’ Closet: Unmasking the WinSxS Hijacking Hideout
Chinese Cyber Threat Intelligence·

Hide and Seek in Windows’ Closet: Unmasking the WinSxS Hijacking Hideout

https://www.securityjoes.com/post/hide-and-seek-in-windows-closet-unmasking-the-winsxs-hijacking-hideout

Russian Cyber Threat Intelligence
Russia-linked APT Sandworm was inside Ukraine telecoms giant Kyivstar for months
Russian Cyber Threat Intelligence·

Russia-linked APT Sandworm was inside Ukraine telecoms giant Kyivstar for months

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

Double opt-in. One-click unsubscribe on every issue. We never share your address.