Vulnerability

DirtyFrag: Two Kernel Bugs Give Root on All Major Linux Distros

May 8, 20262 min read

Vulnerability Phishing

Mitigating the Latest Microsoft Teams Vulnerability with Netskope

July 24, 20233 min read

Vulnerability Phishing

Netskope Threat Coverage: Microsoft Office and Windows Zero Day (CVE-2023-36884)

July 20, 20231 min read

Netskope Threat Coverage: MOVEit Transfer Zero-Day

June 2, 20232 min read

Vulnerability Credential Theft

CVE-2023-21716: Microsoft Word RCE Vulnerability

March 27, 20232 min read

CVE-2023-23397: Microsoft Outlook Zero-Day Exploited by APT28

March 21, 20231 min read

Vulnerability Ransomware

Cloud Threats Memo: The Growing Risk of Misconfigured Internet-facing Servers

August 18, 20222 min read

CVE-2022-30190: New Zero-Day Vulnerability (Follina) in Microsoft Support Diagnostic Tool

June 1, 20223 min read

Vulnerability Cloud

Cloud Threats Memo: What We Can Learn From the Top 15 Routinely Exploited Threats of 2021

May 5, 20222 min read

Two RCE Vulnerabilities Found in Spring Framework

April 6, 20222 min read

Malware Phishing

Microsoft Office: VBA Blocked By Default in Files From the Internet

February 24, 20227 min read

Ransomware Vulnerability

Netskope Threat Coverage: Night Sky

January 11, 20223 min read

CVE-2021-44832: New Vulnerability Found in Apache Log4j

December 29, 20212 min read

CVE-2021-45105: New DoS Vulnerability Found in Apache Log4j

December 20, 20212 min read

Ransomware Malware

Khonsari: New Ransomware Delivered Through Log4Shell

December 16, 20214 min read

CVE-2021-45046: New Log4j Vulnerability Discovered

December 15, 20212 min read

Netskope Threat Coverage: Apache Log4j RCE (CVE-2021-44228)

December 13, 20213 min read

Vulnerability Remote Access

Microsoft Office Document Triggering New Zero-Day

September 13, 20214 min read

Cloud Threats Memo: Continuing Trends in Risks to Remote Working

August 26, 20212 min read

Vulnerability Remote Access

Cloud Threats Memo: Illustrating Big Risks in the Shift to Remote Working

June 17, 20212 min read

Ransomware Malware

Netskope Threat Coverage: DearCry Ransomware

March 15, 20211 min read

Supply Chain Malware

Netskope Threat Coverage: SUNBURST & FireEye Red Team (Offensive Security) Tools

December 15, 20202 min read

Microsoft CryptoAPI Spoofing (CVE-2020-0601)

January 17, 20202 min read

CORS Exploitation in the Cloud

January 9, 20209 min read

Cloud Phishing

Phishing in the public cloud: You've been served

October 3, 20186 min read

TelegramRAT evades traditional defenses via the cloud

December 18, 20177 min read

Targeted Attack BadWolf Exploits Office Vulnerabilities to Exfiltrate Data

December 14, 20175 min read

Stepping Stone Attack launches EternalBlue Internally

November 2, 20175 min read

Malware Ransomware

Resurgence of Locky Ransomware with LUKITUS extension

August 18, 20174 min read

URSNIF malware returns with Microsoft Word document embedded objects

May 19, 20174 min read

Ransomware Vulnerability

Wana Crypt0r 2.0 Ransomware Worm Propagating via MS17-010

May 14, 20172 min read

Latest Microsoft Office Zero-day Served via Godzilla Botnet

April 11, 20171 min read

Macro-based Office Malware using Cloud Services

March 22, 20175 min read

Targeted Attack Campaigns with Multi-Variate Malware Observed in the Cloud

March 8, 20176 min read

Cloudbleed: Analysis of apps affected and what you can do about it

March 4, 20174 min read

Crypto Malware

Cloud CRM Services as a Malware Attack Vector

February 9, 20176 min read

Decoys, RATs, and the Cloud: The growing trend

February 3, 20177 min read

Ransomware + Click Fraud: A New Blended Attack

January 30, 20178 min read

Virlock’s resurgence poses bigger threat to file syncing over the cloud

January 30, 20172 min read

Decoys, Phishing, and the Cloud: The Latest Fan-out Effect

January 18, 20176 min read

URSNIF Data Theft Malware Shared on Microsoft OneDrive

August 2, 20165 min read

Netskope Threat Research Labs Technical Analysis: CloudSquirrel Malware

July 27, 20168 min read

Zepto variant of Locky ransomware delivered via popular Cloud Storage apps

July 19, 20165 min read

CloudSquirrel Malware Squirrels Away Sensitive User Data Using Popular Cloud Apps

July 15, 20162 min read

cuteRansomware Uses Google Docs to Fly Under Radar

July 12, 20165 min read

Anatomy of a Ransomware Attack: Cerber Uses Steganography to “Hide in Plain Sight”

June 30, 20166 min read

Surprise! Nine “Must-Dos” to Protect Against Malware in Remote Support Apps

March 24, 20164 min read

DROWN Vulnerability Remains High

March 8, 20163 min read

Manage the Android Stagefright vulnerability without getting in the way of business

August 5, 20151 min read

The Untapped Power of HTTP Security Headers

July 10, 20155 min read

Logjam Attack — Day 2 Findings and Recommendations

May 21, 20152 min read

LogJam Attack

May 20, 20151 min read

Poodle Attack: 1,632 Cloud Apps Vulnerable

October 15, 20142 min read

Shellshock and Your Enterprise Cloud Apps – Watch Out for Half-baked Patches

September 25, 20141 min read

Vulnerability Found in Uploading.com

June 17, 20142 min read

OpenSSL CCS Injection Vulnerability Countdown

June 16, 20142 min read

OpenSSL ChangeCipherSpec Injection Vulnerability (CVE-2014-0224)

June 6, 20143 min read

OAUTH and OpenID Covert Redirect Vulnerability

May 6, 20142 min read

Heartbleed Remediation Status for Enterprise Cloud Apps

May 1, 20143 min read

IE Vulnerability

May 1, 20141 min read