Following the emergence of data-leak sites (DLSs) for new extortion groups Kairos, Chort, Termite, and CONTfr, Cyjax has observed a DLS for a group going by the name ’Argonauts Group’. This group has claimed 10 victims so far. This brings the total of new DLSs discovered this month to seven, with a few days remaining in November.

Today, businesses don’t just rely on digital networks—they’re woven into them, with partners, third-party apps, and cloud platforms shaping their every move. Yet, every click, swipe, and connection opens a new door for attackers. As of August 2024, a staggering 52,000 new common vulnerabilities and exposures (CVEs) were identified worldwide, with last year alone witnessing a record 29,000 CVEs. These numbers paint a clear picture: cyber threats are multiplying at an alarming rate.

NIS2, PCI DSS, GDPR, HIPAA or CMMC... this long list of acronyms reminds us that complying with cybersecurity regulations is crucial in today’s threat landscape to protect sensitive information and maintain trust in our organization. Moreover, non-compliance not only exposes companies to security risks, but can lead to significant financial penalties and reputational damage. Compliance also facilitates more agile audits.

Attack surface analysis is the process of mapping out an organization’s attack surfaces. These consist of the set of attack vectors that an attacker could use to target an organization. Organizations have both external and internal attack surfaces. An external attack surface includes all potential attack vectors that could be used to gain initial access to an organization’s environment from the public Internet.

Humans are often regarded as the weakest link in a cybersecurity program. Whether resulting from manipulative cybersecurity tactics or limited cybersecurity awareness, human errors remain the most prevalent attack vectors in every information security program, no matter how sophisticated your cybersecurity stack may be.

Welcome back to The Evolution of Scalper Bots series. In our previous blog, we analyzed the rise of professional scalper bot ecosystems. This included cook groups, bots-as-a-service platforms, and retail scalping’s emergence. As technical advancements drove fierce competition, we unraveled the complex dynamics of this controversial industry.

In 2024, the demand for ransomware payments reached new and extreme highs, with the average cost of an extortion payment from a ransomware attack reaching $5.2 million. While traditional backups provide good data security, they are still vulnerable to ransomware and other cyberattacks. Another, more secure option to prevent a breach in your personal or business storage is immutable backups.

In the realm of cybersecurity, understanding how unauthorized access can compromise sensitive systems is critical—this is where the concept of privilege escalation comes into play. In this article, we will look at what privilege escalation is, how it exploits vulnerabilities and best practices for protecting your organization against privilege escalation.