Trovate il ruolo che fa per voi
Azienda > Blog

Notizie e opinioni dalla voce leader nella trasformazione digitale sicura

Informazioni utili e ricerca
DBatLoader: Actively Distributing Malwares Targeting European Businesses
Informazioni utili e ricerca
13 Minuti di lettura

DBatLoader: Actively Distributing Malwares Targeting European Businesses

This Zscaler ThreatLabz research article investigates the latest malware campaign of DBatLoader, which is being used by threat actors to target various businesses in European countries with Remcos RAT and Formbook. The article provides a detailed analysis of DBatLoader's behavior and its attack process, which includes creating a mock trusted direct...
Zscaler + NACD
Informazioni utili e ricerca
4 Minuti di lettura

Zscaler, NACD Partner to Advance Boards’ Cyber Understanding

The SEC’s intent to standardize cybersecurity reporting rules for public companies has caused business leaders to reevaluate their board communications. Board members are increasingly eager to better understand cyber risk threats to their organizations and best practices for mitigating them. Boards of directors act as fiduciaries on behalf of or...
Coverage advisory for CVE-2023-23397
Informazioni utili e ricerca
2 Minuti di lettura

Coverage Advisory for CVE-2023-23397: Microsoft Outlook Elevation of Privilege Vulnerability

Background: On 14th March 2023, Microsoft released a security update guide for a critical severity vulnerability CVE-2023-23397. This vulnerability targets Microsoft Outlook and allows NTLM credentials theft which could be used for privilege escalation attacks. What is the issue? An attacker can send an email to the victim with an extended...
What’s Next for ZTNA? New Insights from the Enterprise Strategy Group
Zscaler Cloud Platform
3 Minuti di lettura

What’s Next for ZTNA? New Insights from the Enterprise Strategy Group

Do you feel like you’ve squeezed a decade's worth of digital transformation into the last three years? I certainly do. As evidence, take a look at the before and after of my home office. It went from a makeshift dining table turned desk to a fully loaded workspace with lights, mics, and cameras - a pandemic innovation! During this time,...
OneNote Malware Campaign
Informazioni utili e ricerca
11 Minuti di lettura

OneNote: A Growing Threat for Malware Distribution

Attackers are increasingly using OneNote documents to distribute malware, due to the heightened security measures against macro-based attacks and the widespread adoption and popularity of the platform. Analyzing several related case studies, this article showcases the obfuscation techniques used by threat actors to bypass threat detection measures ...
Snip3 Crypter
Informazioni utili e ricerca
19 Minuti di lettura

Snip3 Crypter Reveals New TTPs Over Time

Zscaler ThreatLabz researchers observed multiple threat campaigns utilizing the Snip3 crypter, a multi-stage remote access trojan (RAT) loader with new TTPs and available since 2021 as a crypter-as-a-service offering. The Snip3 Crypter service uses advanced evasion, obfuscation, and reflective code loading techniques in its multi-stage infection...
Technical Analysis of Rhadamanthys Obfuscation Techniques
Informazioni utili e ricerca
8 Minuti di lettura

Technical Analysis of Rhadamanthys Obfuscation Techniques

Key Points Rhadamanthys is an information stealer that consists of two components, the loader and the main module (responsible for exfiltrating collected credentials). The malware implements complex anti-analysis techniques by using a public open source library. Rhadamanthys is capable of extracting credentials of various applications suc...
ThreatLabz 2022 Cloud Security Report exposes your risk.
Informazioni utili e ricerca
10 Minuti di lettura

2022 Cloud (In)Security Report

The convenience and ease of public cloud technology have changed our world, enabling scalable business operations, work-from-anywhere, and increased productivity everywhere. As public cloud adoption continues to accelerate, organizations need to hold up their end of the shared responsibility model to protect against cloud security threats. Meanwhil...
Havoc Across the Cyberspace
Informazioni utili e ricerca
13 Minuti di lettura

Havoc Across the Cyberspace

Zscaler ThreatLabz research team observed a new campaign targeting a Government organization in which the threat actors utilized a new Command & Control (C2) framework named Havoc. While C2 frameworks are prolific, the open-source Havoc framework is an advanced post-exploitation command and control framework capable of bypassing the most curren...
Enterprise Security Predictions for 2023
Zscaler Cloud Platform
7 Minuti di lettura

Enterprise Security Predictions for 2023

Across industries, the trend toward hyper-distribution of people, applications, and data is a phenomenon that holds both promise and peril. On one hand, we can connect talent, software, and information faster than ever to innovate and create value. On the other hand, we’ve opened a sprawling attack surface that changes daily and is prone to cyberth...

Esplora Altri Temi