Insights

With each passing year, cyber threats become more sophisticated, and the tools and strategies needed to combat them must advance in kind.

This week in cybersecurity has seen significant developments in various sectors, from nuclear waste facilities to global airlines, with implications that span a

DrayTek Router Vulnerabilities: A Call to Action for Enterprises and Households to protect them from very easy takeover by attackers

Zimbra Vulnerability CVE-2024-45519 Exploited. This Remote Code Execution (RCE) flaw, disclosed on September 27, 2024, is under active exploitation

Ransomware: How to Protect Your Business and Respond Effectively and stay safe from evolving malware threats. Lets delve into the murky world of ransomware.

As cybercriminals adopt more sophisticated tactics, businesses must stay ahead by leveraging advanced technologies like Artificial Intelligence (AI) and ML.

Rising incidents of Clipper Malware Threats Targeting Financial Services, Fintech, and Cryptocurrency Users using simple python powered malware

Weekly News Roundup: September 16-22, 2024 – bring you the latest in Cyber Threats, Data Breaches, and Global Law Enforcement Successes

CVE-2024-38812: A new Critical Remote Code Execution (RCE) Vulnerability Patched in VMware vCenter Server and Cloud Foundation

How to Build a Cyber Defense Strategy for Small Businesses: A Comprehensive Guide for small and larger businesses to improve their cybersecurity footing.

UK Labels Data Centers as Critical National Infrastructure: What This Means for Businesses within the United Kingdom and how will it affect them

This Week in Cybersecurity sees a lot of databreaches with some of the breaches within institutions that simply should know better.

Capgemini Data Breach: 20GB of Sensitive Information Stolen—A Deeper Analysis of the breach and the events leading up the breach

Hunters International Targets ICBC London: A Deep Dive into the Ransomware Attack on the World’s Largest Bank and how it could have been prevented.

Critical patches released for Ivanti Endpoint Manager and Zyxel NAS devices. Protect your systems from severe vulnerabilities—update to the latest versions now.

The Top Cyber Threats of 2024: What Your Business Needs to Know to Stay Protected from Cyber Threats for the last 6 months of the year.

CVE-2024-7261 | GPT Zyxel patches critical vulnerability (CVE-2024-7261) in APs and routers; potential threat actor exploitation looms.

Cyber Security News for August 6th 2024 - keeping you informed on what is happening in the Cyber Threat Actor world and helping keep you safe.

Discover the essentials of incident response and how Hedgehog's Guardian Assurance Retainer equips businesses to handle cyber threats effectively.

In today’s rapidly evolving cyber landscape, businesses face an ever-growing array of threats. From sophisticated phishing attacks to ransomware, the dangers ar

Discover the essential steps and tools for conducting an effective Attack Surface Analysis. This guide offers a deep dive into identifying and mitigating vulner

Welcome back to the weekly roundup! This is your go-to source for the latest in cybersecurity, handpicked and narrated by yours truly, Emily Roberts.

SonicWall issues a critical patch for CVE-2024-40766, a firewall vulnerability that risks unauthorized access. Update your devices now

Discover the importance of Continuous Penetration Testing and how it helps protect your organization from evolving cyber threats.

News Insights 23rd August 2023 - Every week feels like a new chapter in a high-stakes game of chess. Latest insights from the SOC365 Team.

APT42 is an Iranian state-sponsored cyber espionage group tasked with conducting information collection and surveillance operations against individuals and orgs

CVE-2024-38189: A Critical Elevation of Privilege Vulnerability in Microsoft Products that should be patched as soon as possible.

August’s Patch Cycle from Microsoft: A Critical Update for Organizations everywhere, with patches already being exploited my criminals.

Explore how SOC365 leverages AI for proactive cyber defense, ensuring robust security and compliance. Discover client success stories and key features.

The journey of cybersecurity can be intriguingly compared to a Dungeons & Dragons (D&D) campaign, drawing parallels between the strategic, dynamic nature of bot

We present a comprehensive comparison of three leading security solutions: CrowdStrike Falcon, Wazuh, and SOC365. We draw insights from real user experiences

In today's world, where cyber threats are becoming more advanced and persistent, organizations must invest in advanced cybersecurity solutions to safeguard.

Scammers hit Gibraltar with a banking fraud scam powered by Anydesk to steal money from personal and business bank accounts. These criminals really dont care.

Managed SOC Services for Businesses, how SOC365 helps businesses defend against persistent and effective cyber attacks and keep trading.

Hedgehog Security, a leading provider of managed security services, is proud to announce that it has achieved the prestigious CREST accreditation for its Manage

The theft of personal information, such as login credentials, financial data, or sensitive personal details, can lead to identity theft, financial fraud, and ot

Discover why SOC365 is the best Darktrace alternative, offering advanced threat detection, comprehensive SOC services, and superior scalability for robust cyber

Managed SOC (Security Operations Center) services provide a centralized approach to monitoring and managing suspicious activities within your IT infrastructure.

TeamViewer detected a breach in its internal corporate IT network on June 26, 2024, unrelated to its customer-facing services.

APT29 is a threat actor (APT) active since 2008 and considered to be a product of the Russian government’s Foreign Intelligence Service (SVR).

SOC365 service is not just another MSSP offering. It proactive cybersecurity, keeping data and applications are protected and readily accessible without risk.

My job is to quickly identify, prioritize, and respond to these threats in real-time, ensuring the security and integrity of our clients’ networks.

Snowflake Breach Analysis: A technical perspective on the recent Snowflake breach, what you should consider about the breach and the lessons learnt from it.

As we reach the midpoint of the month, it’s essential to stay informed about the latest cyber security developments and trends.

It’s been another eventful week in the world of cybersecurity, with a string of high-profile breaches and attacks leaving many wondering whats gone wrong.

A Guide to Conducting a Data Privacy Impact Assessment - As a business owner, you understand the importance of protecting your customers’ personal data.

Law enforcement authorities have arrested two individuals in connection with a massive SMS phishing campaign that targeted millions of people worldwide.

At Hedgehog Security, we have developed an advanced SIEM solution that combines the power of Wazuh, Graylog, and our proprietary Hedgey AI.

Organisations must continuously adapt to new threats and challenges in the dynamic cybersecurity landscape in order to maintain a reasonable cyber defence.

In recent news, Microsoft has issued a warning about a potential vulnerability in its Azure Service Tags feature that is potentially exploitable.

As we kick off the second half of the year, the cybersecurity landscape continues to evolve at an alarming rate with more vulnerabilities and breaches every day

Outsourced Security Operations Center for modern businesses, keeping up a solid defence from cyber attacks 24 hours a day, 7 days a week

In this blog post, we’ll be covering some of the most significant news stories from The Hacker News and The Register for the period of May 25th to 31st, 2024.

In the ever-evolving cybersecurity landscape, organisations continuously seek innovative ways to protect assets gain insights into cyber adversaries' tactics.

Advanced Threat Detection and Response: Strengthening Cybersecurity for Modern Businesses when everything is under attack around the clock.

APT34, another formidable group suspected to be linked to Iran, has made its presence felt across multiple industries. Their focus? Financial.

APT35, also known as the Newscaster Team, has a broad target list that spans the the U.S., Western Europe, and the Middle East.

As spring blossoms into full bloom, it's the perfect time for organisations to brush off the cobwebs and spruce up their cybersecurity measures.

In recent developments, Fortinet has issued warnings regarding critical security vulnerabilities affecting its FortiClientEMS software and other products.

Threat-Led Penetration Tests (TLPT) are enhanced security tests reserved for financial entities whose failure would have systemic effects.

In the realm of cybersecurity, a "takedown" is a strategic action undertaken to dismantle and disrupt the infrastructure of cybercriminals.

In the ever-evolving field of cybersecurity, defenders constantly seek innovative ways to slow down, analyze, and ultimately thwart attackers.

A recent incident involving the exploitation of a vulnerability in TeamViewer highlights the complexity and severity of current cyber threats.

In an era where digital threats loom large and cyber resilience is paramount, the United Kingdom stands the forefront of bolstering its cybersecurity measures.

Managed Security Information and Event Management (SIEM), a comprehensive solution designed to fortify digital landscapes against cyber threats.

A health care provider engaged Hedgehog Security's SOC365 team to provide a breach investigation following a major incident and possible breach by the board.

Microsoft acknowledged what we already knew, that a freshly patched newly privilege escalation vulnerability, CVE-2024-21410, was being exploited.

APT2 is a cyber espionage group suspected to operate out of China, with a particular focus on sectors critical to national security, such as Military and Aerosp

APT14, a cyber espionage group with suspected ties to China, has its sights set on sectors that are critical to national security and infrastructure, including

APT15, a cyber espionage group with suspected ties to China, is a significant player in the world of state-sponsored cyber operations. Their targets are global,

APT19, also known as the Codoso Team, is a cyber espionage group suspected to have ties to China, operating with a mix of freelancers who may receive some degre

APT23, a cyber espionage group attributed to China, has its sights set on media and government sectors, particularly in the U.S. and the Philippines.

APT26 often starts with strategic web compromises, a method where they exploit trusted websites to gain initial access to target networks.

APT33 is another Iran-linked cyber threat group that’s made quite a name for itself by zeroing in on key industries—particularly aerospace and energy.

APT39 is suspected to be linked to Iran, but what really matters is how this group is making its mark on industries across the globe.

APT1, also known as Unit 61398 or the Comment Crew, is a cyber espionage group linked to China’s People’s Liberation Army (PLA) General Staff Department’s (GSD)

APT3, also known as the UPS Team, is a highly sophisticated cyber espionage group with suspected ties to China. Their operations target critical sectors includi

APT6 is a cyber espionage group suspected to have ties to China, with a focus on sectors that drive technological and industrial innovation, including transport

APT7 is a cyber espionage group suspected of operating out of China, with a focus on sectors that are critical to national security and economic competitiveness

APT17, also known as Tailgator Team or Deputy Dog, is a cyber espionage group with suspected ties to China. APT17 is primarily focused on conducting network int

APT21, also known as Zhenbao, is a cyber espionage group with ties to China, specifically focused on government and military sectors.

APT22 has been operational since at least early 2014, consistently carrying out intrusions against both public and private sector entities.

APT40 is well-equipped for their cyber missions. They’ve been observed using at least 51 different code families, with 37 of those being non-public tools, speci

APT41, a notorious cyber threat group attributed to China, has made its presence felt across the globe, with confirmed attacks in at least 14 countries since as

AI-augmented phishing refers to the use of artificial intelligence to enhance and customize phishing attacks, making them more sophisticated.

APT12, also known as Calc Team, is a cyber espionage group suspected of having links to the Chinese People’s Liberation Army (PLA). Their targets are aligned wi

APT20, also known as Twivy, is a cyber threat group with suspected links to China. APT20 is primarily focused on data theft from anywhere.

APT24, also known as PittyTiger, is a cyber espionage group linked to China, with a reputation for targeting a broad range of industries.

APT30, a cyber espionage group attributed to China, has its sights set on the members of the Association of Southeast Asian Nations (ASEAN)

APT31, a cyber espionage group linked to China, is quietly yet persistently targeting a wide range of sectors from finance and tech to military

we will walk you through the steps to configure UFW on an Ubuntu server to restrict inbound traffic to HTTP, HTTPS, and SSH, and limit outbound traffic

APT4, also known as Maverick Panda, Sykipot Group, or Wisp, is a cyber espionage group with suspected ties to China. Their operations are particularly focused o

APT5, a cyber espionage group suspected to operate out of China, has been active since at least 2007. Their operations are particularly focused on telecommunica

APT8 is a cyber espionage group suspected of operating out of China, likely as freelancers with some level of nation-state sponsorship. Their targets span a bro

APT9 is a cyber espionage group suspected to operate as freelancers with some level of nation-state sponsorship, possibly from China. Their operations target or

APT10, also known as the Menupass Team, is a Chinese cyber espionage group that has been on the radar since 2009. Their operations are laser-focused on sectors

APT16 is a cyber espionage group attributed to China, with a particular focus on Japanese and Taiwanese organizations. Their targets span across high-tech, gove

APT18, also known as Wekby, is a cyber espionage group with suspected ties to China. Their operations span a wide range of high-stakes sectors, including Aerosp

APT25, also known by names like Uncool, Vixen Panda, Ke3chang, Sushi Roll, and Tor, is a cyber espionage group attributed to China

APT27 brings a robust set of tools to their operations, including malware like PANDORA, SOGU, ZXSHELL, GHOST, WIDEBERTH, QUICKPULSE, and FLOWERPOT.