APT28 deploys contracts with Beard Shell Malware in Ukraine using signal chat
June 24, 2025Ravi LakshmananMalware/Threat Intelligence The Ukrainian Computer Emergency Response Team (CERT-UA) has warned about a new cyberattack campaign by APT28 (aka UAC-0001) related to Russia, about threat actors using signal chat messages to provide two new malware families called Beardshell and Covenant. BeardShell per CERT-UA is written in C++ and provides the ability to […]
China-related salt typhoons exploit critical Cisco vulnerabilities to target Canadian communications
June 24, 2025Ravi LakshmananCyberspy/Chinese hacker The Canadian Centre for Cybersecurity and the US Federal Investigation Agency (FBI) have issued an advisory warning for cyberattacks mounted by Chinese-linked chloride actors to breach major global communications providers as part of their cyberespionage activities. The attacker utilized the critical Cisco IOS XE software (CVE-2023-20198, CVSS score: 10.0) to […]
SaaS Security is now simpler: Vendor Choice
Control SaaS security now. Learn how to build a solid business case, choose the best SSPM vendors and implement effective protection for your SaaS apps. SaaS applications showcase unique security risks that traditional cybersecurity tools cannot address. Without a proper strategy, false statistics, excessive privileges, and third-party app connections can expose sensitive data, leading to […]
Extend 5 stages of CTEM to the cloud
If you’re a regular reader of this blog, you’ll see that continuous threat exposure management (CTEM) is the main factor that we do here. The simple reason is that CTEM is the backbone of healthy exposure management methodologies and is key to protecting digital assets from the growing number of threats they face and the […]
North Korea-linked hackers steal $2.02 billion in 2025, spearheading global crypto theft December 18, 2025 Cryptocurrency/Cyber Espionage Threat actors with ties to the Democratic People’s Republic of Korea (North Korea or North Korea) are contributing to a surge in global crypto theft in 2025, totaling at least $2.02 billion in losses. Of the more than $3.4 billion stolen from January to early December. This number is up 51% year over year and $681 million more than in 2024, when threat actors stole $1.3 billion, according to the Chaineries Crypto Crime Report shared with The Hacker News. "This is the deadliest year on record for North Korean cryptocurrency theft in terms of value stolen, and North Korean attacks account for 76% of all service breaches." said the blockchain intelligence company. "Overall, the 2025 numbers bring the lower cumulative estimate of crypto funds stolen by North Korea to $6.75 billion." The February breach of cryptocurrency exchange Bybit alone was responsible for $1.5 billion of the $2.02 billion looted by North Korea.
North Korea-linked hackers steal $2.02 billion in 2025, spearheading global crypto theft December 18, 2025 Cryptocurrency/Cyber Espionage Threat actors with ties to the Democratic People’s Republic of Korea (North Korea or North Korea) are contributing to a surge in global crypto theft in 2025, totaling at least $2.02 billion in losses. Of the more than […]