Research

Cyber Threat Intelligence Reports | Cybersecurity Risk Research

The latest industry news, interviews, technologies, and resources.

Research 2024-03-05

Exploiting Document Templates: Stego-Campaign Deploying Remcos RAT and Agent Tesla

EXECUTIVE SUMMARY At CYFIRMA, our commitment is to provide timely insights into prevalent threats and malicious tactics affecting both organizations and individuals. Our research team recently identified a malicious .docx…

Research 2024-02-29

The ScreenConnect Saga: A Deep Dive into the LockBit Connection

THE SCREENCONNECT SAGA: A DEEP DIVE INTO THE LOCKBIT CONNECTION In the ever-evolving landscape of cybersecurity threats, a recent storm has been brewing around ConnectWise's remote support software, ScreenConnect. The…

Research 2024-02-28

Exploit Analysis: SSRF and Command Injection for Unauthenticated RCE in Ivanti Connect Secure

EXECUTIVE SUMMARY CYFIRMA’s Research team conducted a comprehensive analysis of a server-side request forgery (SSRF) vulnerability CVE-2024-21893 and a command injection vulnerability CVE-2024-21887, affecting Ivanti Connect Secure. Discovered on January…

Research 2024-02-26

CYFIRMA INDUSTRY REPORT : ENERGY

EXECUTIVE SUMMARY The CYFIRMA Industry Report delivers original cybersecurity insights and telemetry-driven statistics of global industries, covering one sector each week for a quarter. This report focuses on the energy…

Research 2024-02-23

Xeno RAT: A New Remote Access Trojan with Advance Capabilities

EXECUTIVE SUMMARY At CYFIRMA, we are dedicated to providing current insights into prevalent threats and strategies utilized by malicious entities, targeting both organizations and individuals. This in-depth examination focuses on…

Research 2024-02-21

IRAN CONTRIBUTES TO THE ESCALATING GEO-POLITICAL THREAT LANDSCAPE

EXECUTIVE SUMMARY The situation is escalating between Iran and the United States in the Middle East: on Sunday, January 28, three U.S. service members were killed in an Iranian-linked drone…

Research 2024-02-19

CYFIRMA INDUSTRY REPORT : LOGISTICS

Research 2024-02-16

Jenkins (CVE-2024-23897) – Vulnerability Analysis and Exploitation

EXECUTIVE SUMMARY The Jenkins CVE-2024-23897 vulnerability poses a severe threat, allowing remote code execution (RCE) and arbitrary file read. Exploiting this flaw could lead to unauthorized access, data breaches, and…

Research 2024-02-13

Malware Development Competition Fuels Creation of 20+ Malware

EXECUTIVE SUMMARY In this report, we discuss the recently observed XSSLite Stealer that is being discussed within multiple hacking communities. It was released as part of a malware development competition…