Over the last weeks, hundreds of organizations including 2 DOE Agencies, were impacted by ransomware attacks, as a result of the the MOVEit Transfer Vulnerability, CVE-2023-34362. This vulnerability enables attackers to obtain privelege escalation and gain unauthorized access to sensitive data and systems. The threat group’s MO is to encrypt the victim’s data and threaten […]

APT35 (also known as Charming Kitten, Phosphorus, Newscaster, and more) is an Iranian state-sponsored cyber-espionage group that primarily targets governmental organizations, defense contractors, research institutions, and human rights activists. The group’s sophisticated cyber attacks use a variety of tactics, techniques, and procedures (TTPs) such as spear-phishing, social engineering, and malware deployment to obtain data from […]

In March 2023, Microsoft published a critical update notifying users of a vulnerability affecting Microsoft Outlook. This vulnerability (CVE-2023-23397) is exploitable by attackers on Windows-based versions of Outlook. Because it is relatively simple to exploit, doesn’t require any reaction from targeted users, and has a growing number of victims, this vulnerability received a high CVSS […]