Live and recent posts from across the Fediverse tagged #threathorizon, aggregated by home.social.
A sophisticated threat actor with possible links to Russian hybrid-threat groups impersonated Trend Micro security advisories to target defense contractors, energy companies, and cybersecurity firms.
#SecurityLand #ThreatHorizon #APT #TrendMicro #ShadowVoid042 #Cybercrime #SpearPhishing
Read More: https://www.security.land/shadow-void-042-cybercriminals-fake-security-alerts/
Chinese threat actor UAT-9686 has been compromising Cisco email security systems since late November with a custom backdoor called AquaShell. Organizations should immediately check Cisco Talos advisories for indicators and remediation guidance.
#SecurityLand #ThreatHorizon #Cisco #UAT9686 #EmailSecurity #APT #China
Read More: https://www.security.land/uat-9686-chinese-apt-cisco-email-gateway-attack/
Zscaler ThreatLabz documents BlindEagle APT's sophisticated attack on Colombian government infrastructure using steganography, compromised email accounts, and dual malware deployment (Caminho + DCRat). The September 2025 campaign demonstrates evolved tradecraft including Discord CDN abuse and fileless execution chains.
#SecurityLand #ThreatHorizon #Zscaler #BlindEagle #Colombia #Government #Ecuador #APT #RAT #Malware
Read More: https://www.security.land/blindeagle-colombian-government-caminho-dcrat-attack/
Security researchers from Koi have uncovered 17 malicious Firefox extensions hiding multi-stage malware inside PNG logo files, affecting 50,000+ users. The sophisticated steganography-based campaign strips browser security protections and enables remote code execution while evading detection through probabilistic activation and delayed payloads.
#SecurityLand #ThreatHorizon #Steganography #Malware #PNG #BrowserSecurity #Cybersecurity
Read More: https://www.security.land/firefox-extensions-png-steganography-malware-ghostposter/
New infrastructure analysis from Censys reveals how the pro-Russian hacktivist group NoName057(16) maintains DDoSia operations through rapid server rotation. Monitoring since mid-2025 shows an average of 6 control servers active simultaneously, but with a mean lifespan of only 2.53 days.
#SecurityLand #ThreatHorizon #Research #Censys #DDoSia #DDoS #DDoSAttack #NoName057 #Ukraine #Russia #Hacktivism
Read More: https://www.security.land/ddosia-infrastructure-censys-research-noname057/
The notorious Lazarus Group, along with other North Korean hackers crypto organizations, has evolved their strategy beyond conventional exchange attacks. Instead of breaking down digital walls, they’re now walking through the front door with fabricated credentials and compelling cover stories.
#SecurityLand #ThreatHorizon #Cybersecurity #Crypto #Scam #HumanFactor #NorthKorea #CryptoExchange
VoidProxy phishing-as-a-service bypasses MFA & SSO for Microsoft 365/Google accounts. Okta Threat Intelligence reveals sophisticated AitM attacks defeating modern authentication. Enterprise security teams: reassess your defenses NOW.
#SecurityLand #ThreatHorizon #CyberSecurity #PhishingAttack #EnterpriseSecurity #AitM #Phishing #VoidProxy
ReversingLabs researchers have uncovered a sophisticated malware campaign by Banana Squad targeting developers through 67 compromised GitHub repositories. The threat group used advanced obfuscation techniques to disguise malicious Python tools as legitimate security software, successfully evading detection while compromising developer systems.
#SecurityLand #ThreatHorizon #CyberSecurity #GitHub #Malware #SupplyChain #BananaSquad
ReversingLabs researchers have uncovered a sophisticated malware campaign by Banana Squad targeting developers through 67 compromised GitHub repositories. The threat group used advanced obfuscation techniques to disguise malicious Python tools as legitimate security software, successfully evading detection while compromising developer systems.
#SecurityLand #ThreatHorizon #CyberSecurity #GitHub #Malware #SupplyChain #BananaSquad
🚨 FBI & CISA issue joint advisory on LummaC2 malware targeting critical infrastructure. This sophisticated information stealer uses fake CAPTCHAs and software impersonation to steal financial credentials, crypto wallets, and MFA details. 71.7% increase in attacks reported. Organizations must implement comprehensive defense strategies immediately.
#SecurityLand #ThreatHorizon #Cybersecurity #Malware #LummaC2 #CriticalInfrastructure #FBI #CISA
A previously unknown ransomware group called Nova is making headlines with its bold entry into the cybercrime scene. Security researchers have just begun tracking the group after it claimed responsibility for multiple attacks — one of the most recent targeting the Municipality of Pisa.
#SecurityLand #ThreatHorizon #CyberThreat #Ransomware #NovaGroup #CyberSecurity #Pisa #EmergingThreats #Cybercrime
Read More: https://www.security.land/new-ransomware-group-nova-emerges-latest-target-municipality-of-pisa/
Security researchers have uncovered Mustang Panda's return with six sophisticated new cyber weapons targeting organizations in Myanmar. The Chinese-linked threat actor has significantly upgraded their TONESHELL backdoor with advanced evasion techniques and process injection capabilities. Discover the technical details and protection strategies in our latest threat analysis.
#SecurityLand #ThreatHorizon #CyberSecurity #APT #ThreatIntelligence
Researchers have uncovered a new breed of sophisticated phishing malware hiding in SVG files. With multiple anti-analysis features, this threat can bypass security tools and trick users into revealing credentials. Learn how to protect your organization.
#SecurityLand #ThreatHorizon #Cybersecurity #Malware #Phishing #SVG
https://www.security.land/new-svg-phishing-malware-emerges-with-advanced-anti-analysis-techniques/
This article provides a comprehensive overview of the current state of APTs, examining their evolving tactics, key targets, and the essential strategies for mitigation in the immediate years ahead. We’ll delve into the “who, where, what, and why” of these threats, offering valuable insights for both technical professionals and those seeking a deeper understanding of the modern threat landscape.
#securityland #threathorizon #apt #cyberthreats #AdvancedPersistentThreats
https://www.security.land/advanced-persistent-threats-apt-in-2025-tactics-targets-and-mitigation/
Ideally, security schemes ought to _shrink_ the #AttackSurface.
But shrunken attack surfaces are not very glossy. Complexity must be introduced in order to sell bolting on yet another business plan, products and services.
Here a vulnerability and easy low-skill common point of unauthorized entry was purchased at great cost by customers thinking they were becoming safer, even as by so doing they were expanding the perimeter of their #ThreatHorizon.
https://www.theregister.com/2025/01/09/zeroday_exploits_ivanti/