Our new @threatinsight report is a comprehensive overview of TA4922, a newly designated Chinese-speaking, financially motivated threat actor that largely targets East Asia. It currently conducts more unique campaigns than any other cybercriminal we track. www.proofpoint.com/us/blog/thre...

TA4922: The Suspected Chinese Crime Group is Going Global | Proofpoint US

Key Findings: TA4922 is a highly sophisticated threat actor demonstrating a rapid operational tempo and continually evolving malware arsenal. The group has been

proofpoint.com

Proofpoint has directly observed a targeted email campaign that delivers DarkSword RCE, and we attribute the messages to Russian FSB threat actor TA446 with high confidence. 🧵

Now is your time to PIVOT!

Pasquale Stirparo 🇺🇦 🇪🇺@pstirparo.bsky.social · 7mo ago

We are less than a month away from #PIVOTcon26 #CfP deadline,come present your best research in a trusted,vetted environment attended by some of the best researchers. We created such an environment so that we can feel safe to exchange beyond the blogposts #CTI #ThreatResearch #ThreatIntel #MemeGuide

Impose Cost. This isn't an option, it's how we win. Huge respect for the CTI community, industry partners, researchers, analysts, law enforcement professionals et al who made this possible. Let’s make the threat landscape harder for TAs every single day. #OperationEndgame

CyberScoop@cyberscoop.bsky.social · 9mo ago

Rhadamanthys, VenomRAT, and the Elysium botnet were targeted in the takedowns. via @gregotto.bsky.social cyberscoop.com/operation-en...

The Washington Post is notifying nearly 10,000 employees and contractors that some of their personal and financial data has been exposed in the Oracle data theft attack.

Washington Post data breach impacts nearly 10K employees, contractors

The Washington Post is notifying nearly 10,000 employees and contractors that some of their personal and financial data has been exposed in the Oracle data theft attack.

bleepingcomputer.com

New day, new #UserAgent. Threat actors are getting creative… brute-force run now comes with a fresh disguise. Just in time for Halloween! #cyberthreatIntelligence FTW

ThreatInsight@threatinsight.proofpoint.com · 10mo ago

Researchers at Proofpoint have uncovered a recent brute force campaign, tracked as UNK_CustomCloak, targeting the first-party app, Windows Live Custom Domains. Activity was observed from September 20-30th, affecting nearly half a million users in over 4,000 tenants.

how do we know if a cyber attack is just spying or an act of war? from a national security perspective, there are some challenges in responses when it's unclear if an action constitutes traditional espionage or a form of asymmetric/guerrilla attack, esp. in the cyber? www.wsj.com/politics/nat...

Exclusive | Chinese Hackers Pretended to Be a Top U.S. Lawmaker During Trade Talks

The FBI is investigating a scheme to spy on trade groups using fake emails from China committee chair Rep. John Moolenaar.

wsj.com