By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.
PreferencesDenyAccept

Email Lists

We have a small number of email lists for News and Threat Intelligence Briefings

Our Lists

Our email lists are used for the distribution of cyber security news and threat intelligence briefings. We will never sell your contact information, misuse the list data or spam you.

From this page you can subscribe and unsubscribe from our lists at will.



Thank you!
Your message has been received!
Sorry, something went wrong while submitting the form. Please refresh and try again.

Stories from our Insights blog

Category

Insight blog title

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

News

Cybersecurity News: A Week of Warnings, Breaches, and Arrests

This week in cybersecurity has seen significant developments in various sectors, from nuclear waste facilities to global airlines, with implications that span a

News

DrayTek Router Vulnerabilities: A Call to Action for Enterprises and Households

DrayTek Router Vulnerabilities: A Call to Action for Enterprises and Households to protect them from very easy takeover by attackers

News

Critical Zimbra Vulnerability CVE-2024-45519 Under Mass Exploitation: Immediate Action Required

Zimbra Vulnerability CVE-2024-45519 Exploited. This Remote Code Execution (RCE) flaw, disclosed on September 27, 2024, is under active exploitation

News

Rising Clipper Malware Threats Targeting Financial Services, Fintech, and Cryptocurrency Users

Rising incidents of Clipper Malware Threats Targeting Financial Services, Fintech, and Cryptocurrency Users using simple python powered malware

Blue Team

CVE-2024-38812: Critical Remote Code Execution (RCE) Vulnerability Patched in VMware vCenter Server and Cloud Foundation

CVE-2024-38812: A new Critical Remote Code Execution (RCE) Vulnerability Patched in VMware vCenter Server and Cloud Foundation

News

Weekly News Roundup: September 16-22, 2024 – Cyber Threats, Data Breaches, and Global Law Enforcement Successes

Weekly News Roundup: September 16-22, 2024 – bring you the latest in Cyber Threats, Data Breaches, and Global Law Enforcement Successes

News

UK Labels Data Centers as Critical National Infrastructure: What This Means for Businesses

UK Labels Data Centers as Critical National Infrastructure: What This Means for Businesses within the United Kingdom and how will it affect them

News

Capgemini Data Breach: 20GB of Sensitive Information Stolen

Capgemini Data Breach: 20GB of Sensitive Information Stolen—A Deeper Analysis of the breach and the events leading up the breach

News

Hunters International Targets ICBC London

Hunters International Targets ICBC London: A Deep Dive into the Ransomware Attack on the World’s Largest Bank and how it could have been prevented.

News

This Week in Cybersecurity 13 September 2024

This Week in Cybersecurity sees a lot of databreaches with some of the breaches within institutions that simply should know better.

News

CVE-2024-29847 - Ivanti & Zyxel Critical Vulnerability Patches: Update Now

Critical patches released for Ivanti Endpoint Manager and Zyxel NAS devices. Protect your systems from severe vulnerabilities—update to the latest versions now.

News

Mastering Incident Response: Prepare & Protect with Guardian Assurance Retainer

Discover the essentials of incident response and how Hedgehog's Guardian Assurance Retainer equips businesses to handle cyber threats effectively.

News

CVE-2024-7261

CVE-2024-7261 | GPT Zyxel patches critical vulnerability (CVE-2024-7261) in APs and routers; potential threat actor exploitation looms.

News

Cyber Security News

Cyber Security News for August 6th 2024 - keeping you informed on what is happening in the Cyber Threat Actor world and helping keep you safe.

Guides

A Guide to Attack Surface Analysis

Discover the essential steps and tools for conducting an effective Attack Surface Analysis. This guide offers a deep dive into identifying and mitigating vulner

Blue Team

APT1: The Persistent Data Hoarder

APT1, also known as Unit 61398 or the Comment Crew, is a cyber espionage group linked to China’s People’s Liberation Army (PLA) General Staff Department’s (GSD)

Blue Team

APT2: The Intellectual Property Raider

APT2 is a cyber espionage group suspected to operate out of China, with a particular focus on sectors critical to national security, such as Military and Aerosp

Blue Team

APT3: The Sophisticated Exploiter

APT3, also known as the UPS Team, is a highly sophisticated cyber espionage group with suspected ties to China. Their operations target critical sectors includi

Blue Team

APT4: The Defense Industrial Base Infiltrator

APT4, also known as Maverick Panda, Sykipot Group, or Wisp, is a cyber espionage group with suspected ties to China. Their operations are particularly focused o

Blue Team

APT5: The Telecom and Tech Manipulator

APT5, a cyber espionage group suspected to operate out of China, has been active since at least 2007. Their operations are particularly focused on telecommunica

Blue Team

APT6: The Industry Competitor

APT6 is a cyber espionage group suspected to have ties to China, with a focus on sectors that drive technological and industrial innovation, including transport

Blue Team

APT7: The Corporate Lateral Mover

APT7 is a cyber espionage group suspected of operating out of China, with a focus on sectors that are critical to national security and economic competitiveness

Blue Team

APT8: The Intellectual Property Raider

APT8 is a cyber espionage group suspected of operating out of China, likely as freelancers with some level of nation-state sponsorship. Their targets span a bro

Blue Team

APT9: The Competitive Edge Thief

APT9 is a cyber espionage group suspected to operate as freelancers with some level of nation-state sponsorship, possibly from China. Their operations target or

Blue Team

APT10: The Strategic Infiltrator

APT10, also known as the Menupass Team, is a Chinese cyber espionage group that has been on the radar since 2009. Their operations are laser-focused on sectors

Blue Team

APT12: The PRC’s Cyber Operative

APT12, also known as Calc Team, is a cyber espionage group suspected of having links to the Chinese People’s Liberation Army (PLA). Their targets are aligned wi

Blue Team

APT14: The Military Data Hunter

APT14, a cyber espionage group with suspected ties to China, has its sights set on sectors that are critical to national security and infrastructure, including

Blue Team

APT15: The Strategic Operator

APT15, a cyber espionage group with suspected ties to China, is a significant player in the world of state-sponsored cyber operations. Their targets are global,

Blue Team

APT16: The Political Insider

APT16 is a cyber espionage group attributed to China, with a particular focus on Japanese and Taiwanese organizations. Their targets span across high-tech, gove

Blue Team

APT17: The Forum Infiltrator

APT17, also known as Tailgator Team or Deputy Dog, is a cyber espionage group with suspected ties to China. APT17 is primarily focused on conducting network int

Blue Team

APT18: The Opportunistic Predator

APT18, also known as Wekby, is a cyber espionage group with suspected ties to China. Their operations span a wide range of high-stakes sectors, including Aerosp

Blue Team

APT19: The Legal and Investment Infiltrator

APT19, also known as the Codoso Team, is a cyber espionage group suspected to have ties to China, operating with a mix of freelancers who may receive some degre

Blue Team

APT20: The Data Collector

APT20, also known as Twivy, is a cyber threat group with suspected links to China. APT20 is primarily focused on data theft from anywhere.

Blue Team

APT21: The State Security Shadow

APT21, also known as Zhenbao, is a cyber espionage group with ties to China, specifically focused on government and military sectors.

Blue Team

APT22: The Silent Intruder

APT22 has been operational since at least early 2014, consistently carrying out intrusions against both public and private sector entities.

Blue Team

APT23: The Political Operative

APT23, a cyber espionage group attributed to China, has its sights set on media and government sectors, particularly in the U.S. and the Philippines.

Blue Team

APT24: The Strategic Spy

APT24, also known as PittyTiger, is a cyber espionage group linked to China, with a reputation for targeting a broad range of industries.

Blue Team

APT25: The Data Thief

APT25, also known by names like Uncool, Vixen Panda, Ke3chang, Sushi Roll, and Tor, is a cyber espionage group attributed to China

Blue Team

APT26: The Strategic Thief

APT26 often starts with strategic web compromises, a method where they exploit trusted websites to gain initial access to target networks.

Blue Team

APT27: The Intellectual Property Thief

APT27 brings a robust set of tools to their operations, including malware like PANDORA, SOGU, ZXSHELL, GHOST, WIDEBERTH, QUICKPULSE, and FLOWERPOT.

Blue Team

APT30: The Persistent Operator

APT30, a cyber espionage group attributed to China, has its sights set on the members of the Association of Southeast Asian Nations (ASEAN)

Blue Team

APT31: The Silent Strategist

APT31, a cyber espionage group linked to China, is quietly yet persistently targeting a wide range of sectors from finance and tech to military

Blue Team

APT40: Navigating the Cyber Seas

APT40 is well-equipped for their cyber missions. They’ve been observed using at least 51 different code families, with 37 of those being non-public tools, speci

Blue Team

APT41: The Chameleon of Cyber Espionage

APT41, a notorious cyber threat group attributed to China, has made its presence felt across the globe, with confirmed attacks in at least 14 countries since as

Blue Team

APT33: The Aerospace Stalker

APT33 is another Iran-linked cyber threat group that’s made quite a name for itself by zeroing in on key industries—particularly aerospace and energy.

Blue Team

APT34: The Silent Operator

APT34, another formidable group suspected to be linked to Iran, has made its presence felt across multiple industries. Their focus? Financial.

Blue Team

APT35: The Persistent Threat

APT35, also known as the Newscaster Team, has a broad target list that spans the the U.S., Western Europe, and the Middle East.

Blue Team

APT39: A Closer Look

APT39 is suspected to be linked to Iran, but what really matters is how this group is making its mark on industries across the globe.

Guides

The Future of Cyber Defense: Trends to Watch in 2024 and Beyond

With each passing year, cyber threats become more sophisticated, and the tools and strategies needed to combat them must advance in kind.

Guides

Ransomware: How to Protect Your Business and Respond Effectively

Ransomware: How to Protect Your Business and Respond Effectively and stay safe from evolving malware threats. Lets delve into the murky world of ransomware.

Guides

The Role of AI in Modern Cyber Defense: Enhancing Security with Machine Learning

As cybercriminals adopt more sophisticated tactics, businesses must stay ahead by leveraging advanced technologies like Artificial Intelligence (AI) and ML.

Guides

How to Build a Cyber Defense Strategy for Small Businesses: A Comprehensive Guide

How to Build a Cyber Defense Strategy for Small Businesses: A Comprehensive Guide for small and larger businesses to improve their cybersecurity footing.

Guides

The Top Cyber Threats of 2024: What Your Business Needs to Know

The Top Cyber Threats of 2024: What Your Business Needs to Know to Stay Protected from Cyber Threats for the last 6 months of the year.

Guides

Purchasing Managed SOC Services: Top Tips

In today’s rapidly evolving cyber landscape, businesses face an ever-growing array of threats. From sophisticated phishing attacks to ransomware, the dangers ar

Blue Team

APT42

APT42 is an Iranian state-sponsored cyber espionage group tasked with conducting information collection and surveillance operations against individuals and orgs

News

Weekly Cybersecurity Roundup - Lots of cyberattacks

Welcome back to the weekly roundup! This is your go-to source for the latest in cybersecurity, handpicked and narrated by yours truly, Emily Roberts.

Red Team

Continuous Penetration Testing: A Strategic Must for Modern Cyber Defense

Discover the importance of Continuous Penetration Testing and how it helps protect your organization from evolving cyber threats.

News

Critical SonicWall Firewall Vulnerability: Patch Now to Secure Your Network

SonicWall issues a critical patch for CVE-2024-40766, a firewall vulnerability that risks unauthorized access. Update your devices now

News

News Insights 23rd August 2023

News Insights 23rd August 2023 - Every week feels like a new chapter in a high-stakes game of chess. Latest insights from the SOC365 Team.

Blue Team

CVE-2024-38189: A Critical Elevation of Privilege Vulnerability in Microsoft Products

CVE-2024-38189: A Critical Elevation of Privilege Vulnerability in Microsoft Products that should be patched as soon as possible.

News

August’s Patch Cycle from Microsoft: A Critical Update for Organizations

August’s Patch Cycle from Microsoft: A Critical Update for Organizations everywhere, with patches already being exploited my criminals.

Guides

Empowering Cyber Defence: The AI-Driven Advantage of SOC365

Explore how SOC365 leverages AI for proactive cyber defense, ensuring robust security and compliance. Discover client success stories and key features.

News

Cybersecurity and DnD A comparison

The journey of cybersecurity can be intriguingly compared to a Dungeons & Dragons (D&D) campaign, drawing parallels between the strategic, dynamic nature of bot

Guides

SOC365: A Comprehensive Guide to Modern Cybersecurity

In today's world, where cyber threats are becoming more advanced and persistent, organizations must invest in advanced cybersecurity solutions to safeguard.

Guides

Wazuh & Crowdstrike Compared

We present a comprehensive comparison of three leading security solutions: CrowdStrike Falcon, Wazuh, and SOC365. We draw insights from real user experiences

News

Scammers hit Gibraltar

Scammers hit Gibraltar with a banking fraud scam powered by Anydesk to steal money from personal and business bank accounts. These criminals really dont care.

News

Advanced Threat Detection and Response: Strengthening Cybersecurity for Modern Businesses

Advanced Threat Detection and Response: Strengthening Cybersecurity for Modern Businesses when everything is under attack around the clock.

News

Outsourced Security Operations Center

Outsourced Security Operations Center for modern businesses, keeping up a solid defence from cyber attacks 24 hours a day, 7 days a week

News

Managed SOC Services for Businesses

Managed SOC Services for Businesses, how SOC365 helps businesses defend against persistent and effective cyber attacks and keep trading.

News

SOC365 Achieves Prestigious CREST Accreditation

Hedgehog Security, a leading provider of managed security services, is proud to announce that it has achieved the prestigious CREST accreditation for its Manage

Guides

Configuring UFW on Ubuntu for a Web Server: A Step-by-Step Guide

we will walk you through the steps to configure UFW on an Ubuntu server to restrict inbound traffic to HTTP, HTTPS, and SSH, and limit outbound traffic

Red Team

Understanding Pass the Hash Attack: How Hackers Exploit Password Vulnerabilities

The theft of personal information, such as login credentials, financial data, or sensitive personal details, can lead to identity theft, financial fraud, and ot

Red Team

Unleashing the Power of Physical Penetration Testing

In cybersecurity, it's not just virtual threats that keep experts up at night—physical breaches can be just as detrimental. That's where the art of intrusion co

News

SOC365: The Premier Darktrace Alternative for Comprehensive Cybersecurity

Discover why SOC365 is the best Darktrace alternative, offering advanced threat detection, comprehensive SOC services, and superior scalability for robust cyber

Guides

Managed Wazuh

Managed Wazuh SIEM as a Service - monitor your cyber world from a price point starting as low as £0. Monitor your state of security today.

Guides

Why SOC365 is your top choice for SOC as a Service defence

SOC365 service is not just another MSSP offering. It proactive cybersecurity, keeping data and applications are protected and readily accessible without risk.

Guides

Understanding SOC Services with SOC365

Managed SOC (Security Operations Center) services provide a centralized approach to monitoring and managing suspicious activities within your IT infrastructure.

Guides

SOC Services with SOC365: A Detailed Explanation

SOC Services Expained - why you need to be using a SOC Service to ensure that your business is defended from relentless cyber attacks.

News

Lessons from the TeamViewer Incident

A recent incident involving the exploitation of a vulnerability in TeamViewer highlights the complexity and severity of current cyber threats.

News

GRIZZLY STEPPE: Insights into the Cyber Threat

In recent months, the role of the Russian government in the cyberattack on the Democratic National Committee (DNC) has been a topic of intense debate.

News

TeamViewer Hack - What you need to know

TeamViewer detected a breach in its internal corporate IT network on June 26, 2024, unrelated to its customer-facing services.

Blue Team

Who is APT29? Uncovering the Notorious Cyber Espionage Group

APT29 is a threat actor (APT) active since 2008 and considered to be a product of the Russian government’s Foreign Intelligence Service (SVR).

Audit and Compliance

Comprehensive Overview of Cyber Security Programs for Businesses

The Hedgehog Security Cyber Security Program Overiew - how we ensure that we keep you information and data safe from people who should never have it.

Audit and Compliance

Understanding Compliance, Regulations, and Standards in Cybersecurity

We incorporate the required technical and organisational security measures and safeguard the protection of the rights of the data subject.

Blue Team

A Day in the life of a SOC Analyst

My job is to quickly identify, prioritize, and respond to these threats in real-time, ensuring the security and integrity of our clients’ networks.

News

Snowflake Breach Analysis: A Technical Perspective

Snowflake Breach Analysis: A technical perspective on the recent Snowflake breach, what you should consider about the breach and the lessons learnt from it.

News

Security News Update June 2024

As we reach the midpoint of the month, it’s essential to stay informed about the latest cyber security developments and trends.

News

Cyber Security News: June 8th - 14th, 2024

It’s been another eventful week in the world of cybersecurity, with a string of high-profile breaches and attacks leaving many wondering whats gone wrong.

Guides

How to conduct a Data Privacy Impact Assessment simply

A Guide to Conducting a Data Privacy Impact Assessment - As a business owner, you understand the importance of protecting your customers’ personal data.

News

Cyber Security & Defence News: May 25th - 31st, 2024

In this blog post, we’ll be covering some of the most significant news stories from The Hacker News and The Register for the period of May 25th to 31st, 2024.

News

SMS Phishing Campaign: Two Arrested

Law enforcement authorities have arrested two individuals in connection with a massive SMS phishing campaign that targeted millions of people worldwide.

News

Azure Service Tags abused by Hackers

In recent news, Microsoft has issued a warning about a potential vulnerability in its Azure Service Tags feature that is potentially exploitable.

News

Cybersecurity News: June 1-7, 2024

As we kick off the second half of the year, the cybersecurity landscape continues to evolve at an alarming rate with more vulnerabilities and breaches every day

News

Wazuh based ultimate SIEM to Detect, Defend and Disrupt

At Hedgehog Security, we have developed an advanced SIEM solution that combines the power of Wazuh, Graylog, and our proprietary Hedgey AI.

Guides

What is a Takedown and How Does It Work?

In the realm of cybersecurity, a "takedown" is a strategic action undertaken to dismantle and disrupt the infrastructure of cybercriminals.

Guides

What are Tarpits? Understanding Cybersecurity Deception Tools

In the ever-evolving field of cybersecurity, defenders constantly seek innovative ways to slow down, analyze, and ultimately thwart attackers.

Guides

Honeypots in Cybersecurity: Explained and Demystified

In the ever-evolving cybersecurity landscape, organisations continuously seek innovative ways to protect assets gain insights into cyber adversaries' tactics.

Guides

Understanding Threat Detection: Key Concepts Explained

For organisations aiming to protect their sensitive data and systems, understanding "What is threat detection" is crucial to ensure that they stay defended.

News

Understanding the SOC Maturity Model

Organisations must continuously adapt to new threats and challenges in the dynamic cybersecurity landscape in order to maintain a reasonable cyber defence.

Guides

Understanding Common Cyber-Attacks: A Guide for Businesses

Phishing is a type of scam email that pretends to be from a reputable organisation or person in order to trick people into revealing personal information

Defending your data
Services
SOC as a Service
SIEM as a Service
Who we help
Legal
Transportation and Logistics
Maritime
Financial Services
Healthcare
Engineering
Case studies
Insights
The Future of Cyber Defense: Trends to Watch in 2024 and Beyond
Cybersecurity News: A Week of Warnings, Breaches, and Arrests
DrayTek Router Vulnerabilities: A Call to Action for Enterprises and Households
More Insights
Company
Partnerships
About us
Contact
2024© All rights reserved.
T&CsPrivacy policyCompliance

Get a consultation

Find out how Hedgehog can help protect your company's data with a no obligation consultation with our team.

Get a free trial

Find out how Hedgehog can help protect your company's data with a 30 day free trial of SOC365.

Become a partner

Talk to our team about how you could benefit from becoming a Hedgehog partner.

Get SIEM as a Service

Talk to our team about getting your organisation protected by Hedgehog's SIEM services.

Thank you!
Your message has been received!
Sorry, something went wrong while submitting the form. Please refresh and try again.