Cybersecurity Threat Intelligence: Actionable Insights

Customer Awareness Advisory

03.21.23

Customer Advisory | Threat Actors Exploited Microsoft Outlook for Windows (CVE-2023-23397) as Early as April 2022

Cyber Intel Brief

03.20.23

Cyber Intel Brief: Mar 09 – 15, 2023

Customer Awareness Advisory

03.09.23

PoC Exploit Released for Critical Windows Word Vulnerability CVE-2023-21716

Cyber Intel Brief

Cyber Intel Brief: Mar 02 – 08, 2023

Cyber Intel Brief

03.02.23

Cyber Intel Brief: Feb 23 – Mar 01, 2023

Cyber Intel Brief

02.23.23

Cyber Intel Brief: Feb 15 – 22, 2023

Cyber Intel Brief

02.16.23

Cyber Intel Brief: Feb 09 – 15, 2023

Cyber Intel Brief

02.10.23

Cyber Intel Brief: Feb 02 – 08, 2023

Cyber Intel Brief

02.03.23

Cyber Intel Brief: Jan 25 – Feb 01, 2023

Cyber Intel Brief

01.27.23

Cyber Intel Brief: Jan 19 – 25, 2023

Customer Awareness Advisory

01.20.23

Customer Advisory | Threat Actors Actively Exploiting ManageEngine Vulnerability CVE-2022-47966

Cyber Intel Brief

01.19.23

Cyber Intel Brief: Jan 12 – 18, 2023

Cyber Intel Brief

01.12.23

Cyber Intel Brief: Jan 5 – 11, 2023

Cyber Intel Brief

01.05.23

Cyber Intel Brief: Dec 29, 2022 – Jan 4, 2023

Cyber Intel Brief

12.29.22

Cyber Intel Brief: Dec 21 – 28, 2022

Cyber Intel Brief

12.23.22

Cyber Intel Brief: Dec 15 – 21, 2022

Cyber Intel Brief

12.15.22

Cyber Intel Brief: Dec 8 – 14, 2022

Customer Awareness Advisory

12.14.22

Customer Advisory: Citrix ADC and Citrix Gateway Critical Vulnerability (CVE-2022-27518) Actively Exploited

Customer Awareness Advisory

12.13.22

Customer Advisory: FortiOS SSL-VPN Vulnerability (CVE-2022-42475) Exploited in the Wild

Cyber Intel Brief

12.08.22

Cyber Intel Brief: Dec 1 – 7, 2022

Cyber Intel Brief

12.01.22

Cyber Intel Brief: Nov 24 – 30, 2022

Cyber Intel Brief

11.25.22

Cyber Intel Brief: Nov 17 – 23, 2022

Cyber Intel Brief

11.17.22

Cyber Intel Brief: Nov 10 – 16, 2022

Cyber Intel Brief

11.10.22

Cyber Intel Brief: Nov 3 – 9, 2022

Cyber Intel Brief

11.07.22

Cyber Intel Brief: Oct 27 – Nov 3, 2022

Cyber Intel Brief

10.27.22

Cyber Intel Brief: Oct 20 – 26, 2022

Customer Awareness Advisory

10.22.22

Customer Advisory: Adversaries Are Scanning For and Exploiting Text4Shell Vulnerability (CVE-2022-42889)

Cyber Intel Brief

10.20.22

Cyber Intel Brief: Oct 13 – 19, 2022

Cyber Intel Brief

10.13.22

Cyber Intel Brief: Oct 6 – 12, 2022

Cyber Intel Brief

10.07.22

Cyber Intel Brief: Sept 29 – Oct 5, 2022

Customer Awareness Advisory

09.30.22

Customer Advisory | Microsoft Exchange Zero-day Vulnerabilities CVE-2022-41040 and CVE-2022-41082, Actively Exploited

Cyber Intel Brief

09.29.22

Cyber Intel Brief: Sept 22 – 28, 2022

Cyber Intel Brief

09.23.22

Cyber Intel Brief: Sept 14 – 21, 2022

Threat Report

09.22.22

Gootloader Poisoned Blogs Uncovered by Deepwatch’s ATI Team

Cyber Intel Brief

09.15.22

Cyber Intel Brief: Sept 8 – 14, 2022

Threat Report

09.12.22

How Deepwatch’s Adversary Tactics and Intelligence Team Approaches Cyber Threat Intelligence

Cyber Intel Brief

09.09.22

Cyber Intel Brief: Sept 1 – 7, 2022

Cyber Intel Brief

09.01.22

Cyber Intel Brief: Aug 25 – 31, 2022

Cyber Intel Brief

08.26.22

Cyber Intel Brief: Aug 18 – 24, 2022

Cyber Intel Brief

08.19.22

Cyber Intel Brief: Aug 11 – 18, 2022

Customer Awareness Advisory

08.18.22

Customer Advisory | Exploit Code Released for Critical Vulnerability, CVE-2022-27255, Affecting Thousands of Routers

Cyber Intel Brief

08.12.22

Cyber Intel Brief: Aug 4 – 10, 2022

Customer Awareness Advisory

08.10.22

Customer Advisory | Microsoft’s Support Diagnostic Tool Vulnerability, AKA DogWalk, Actively Exploited

Cyber Intel Brief

08.05.22

Cyber Intel Brief: July 28 – Aug 03, 2022

Threat Report

08.02.22

Deepwatch ATI detects and responds to never before discovered backdoor deployed using Confluence vulnerability for suspected Espionage

Cyber Intel Brief

07.28.22

Cyber Intel Brief: July 21 – 27, 2022

Customer Awareness Advisory

07.26.22

Customer Advisory | Brace for Exploitation; Hardcoded Password for Questions for Confluence App Leaked

Cyber Intel Brief

07.22.22

Cyber Intel Brief: July 14 – 20, 2022

Cyber Intel Brief

07.08.22

Cyber Intel Brief: June 30 – July 6, 2022

Cyber Intel Brief

07.01.22

Cyber Intel Brief: June 23 – 29, 2022

Cyber Intel Brief

06.24.22

Cyber Intel Brief: June 16 – 22, 2022

Customer Awareness Advisory

06.22.22

Customer Advisory | Splunk Critical Vulnerability

Cyber Intel Brief

06.16.22

Cyber Intel Brief: June 9 – 15, 2022

Cyber Intel Brief

06.10.22

Cyber Intel Brief: June 2 – 8, 2022

Customer Awareness Advisory

06.03.22

Customer Advisory | Critical RCE Vulnerability in Atlassian’s Confluence Server and Data Center Actively Exploited

Cyber Intel Brief

Cyber Intel Brief: May 26 – June 1, 2022

Customer Awareness Advisory

05.31.22

Customer Advisory | Microsoft Office Used to Exploit “Follina” (CVE-2022-30190) an RCE Vulnerability in Microsoft’s Support Diagnostic Tool

Cyber Intel Brief

05.27.22

Cyber Intel Brief: May 19 – 25, 2022

Cyber Intel Brief

05.20.22

Cyber Intel Brief: May 12 – 18, 2022

Customer Awareness Advisory

05.16.22

Customer Advisory | Critical Vulnerability in Zyxel Firewalls and VPNs Actively Exploited

Cyber Intel Brief

05.12.22

Cyber Intel Brief: May 05 – 11, 2022

Customer Awareness Advisory

05.10.22

Customer Advisory | Exploit Code Released for Critical RCE Vulnerability in F5s BIG-IP

Cyber Intel Brief

05.09.22

Cyber Intel Brief: April 28- May 4, 2022

Cyber Intel Brief

05.02.22

Cyber Intel Brief: April 21-27, 2022

Customer Awareness Advisory

04.25.22

Customer Advisory | Threat Actors Exploiting Critical WSO2 Vulnerability

Cyber Intel Brief

Cyber Intel Brief: April 14-20, 2022

Cyber Intel Brief

04.18.22

Cyber Intel Brief: April 7-13, 2022

Customer Awareness Advisory

04.15.22

Customer Advisory | Threat Actors Exploiting Critical VMWare Vulnerability

Cyber Intel Brief

04.11.22

Cyber Intel Brief: March-31-April 6, 2022

Cyber Intel Brief

04.04.22

Cyber Intel Brief: March-24-30, 2022

Customer Awareness Advisory

03.31.22

Customer Advisory | Spring4Shell: What You Need to Know

Cyber Intel Brief

03.28.22

Cyber Intel Brief: March-17-23, 2022

Customer Awareness Advisory

03.23.22

Customer Advisory | President Warns of Russian Government Exploring Options for Cyber Attacks

Customer Awareness Advisory

03.09.22

Customer Advisory | Linux Vulnerability: Dirty Pipe Has Exploit Code Released

Customer Awareness Advisory

03.02.22

Customer Advisory | NVIDIA Confirms Data Was Stolen as Lapsus$ Takes Credit

Customer Awareness Advisory

02.22.22

Customer Advisory | Cyber Attacks in Ukraine: What You Need to Know

Customer Awareness Advisory

02.17.22

Customer Advisory | Exploit Code Released for Critical Cisco Vulnerability: CVE-2022-20699

Customer Awareness Advisory

02.15.22

Customer Advisory | Critical 0-Day Vulnerability in Adobe Commerce and Magento Open Source Platforms Under Active Exploitation

Customer Awareness Advisory

02.02.22

Customer Advisory | Exploit Code Released for Windows 10 Vulnerability: CVE-2022-21882

Customer Awareness Advisory

01.27.22

Customer Advisory | PwnKit: Exploit Released for Polkit’s pkexec Component

Customer Awareness Advisory

01.20.22

Customer Advisory | Exploit Code Released for CVE-2022-21907: Critical Windows HTTP Vulnerability

Significant Cyber Event (SCE)

12.10.21

Significant Cyber Event | Log4j Zero-day With Proof-of-Concept Code and Active Scanning Gets Security Fix

Customer Awareness Advisory

12.08.21

Customer Advisory for Awareness | Grafana Issues a Security Patch After an Exploit for CVE-2021-43798 is Made Public

Customer Awareness Advisory

12.03.21

Customer Advisory for Awareness | With an Active Campaign Against ServiceDesk Plus, APT Expands Attack on ManageEngine

Customer Awareness Advisory

11.15.21

Customer Advisory for Awareness | Zero-Day Disclosed in Palo Alto Networks GlobalProtect VPN (CVE-2021-3064)

Customer Awareness Advisory

10.05.21

Customer Advisory for Awareness | Apache HTTP Server Actively Exploited, Patch is Available, Patch Now!

Customer Awareness Advisory

09.23.21

Customer Advisory for Awareness | CISA, FBI, and NSA Issue Joint Advisory Regarding Increased Conti Ransomware Attacks

Customer Awareness Advisory

09.08.21

Customer Advisory for Awareness | Microsoft Warns of New RCE Zero-Day Exploited in Targeted Office Attacks

Significant Cyber Event (SCE)

09.02.21

Significant Cyber Event | Exchange Exploitation and Labor Day Weekend

Customer Awareness Advisory

09.01.21

Customer Advisory for Awareness | Confluence Enterprise Server & Data Center are Being Actively Exploited

Customer Awareness Advisory

08.27.21

Customer Advisory for Awareness | Azure Cosmos DB Flaw Could Allow for Complete Database Compromise

Customer Awareness Advisory

08.16.21

Customer Awareness: Windows Print Spooler RCE Vulnerability CVE-2021-36958

Significant Cyber Event (SCE)

08.13.21

Significant Cyber Event | Microsoft Exchange Servers are being Actively Scanned for ProxyShell

Customer Awareness Advisory

07.26.21

PetitPotam NTLM Relay Attack

Significant Cyber Event (SCE)

07.21.21

Significant Cyber Event | CVE-2021-36934 – SeriousSAM Microsoft Windows 10 Vulnerability

Customer Awareness Advisory

CVE-2021-33909 & CVE-2021-33910 – Long Path Name in Mountpoint Flaws in the Kernel and Systemd

Customer Awareness Advisory

07.19.21

U.S. Federal Cybersecurity Advisory: TTPs of Chinese State-Sponsored Cyber Operations

Customer Awareness Advisory

07.02.21

Kaseya VSA Compromise – REvil Ransomware Attack

Customer Awareness Advisory

07.01.21

CVE-2021-1675 – PrintNightmare Vulnerability

Customer Awareness Advisory

06.22.21

CVE-2021-3044 Vulnerability: Cortex XSOAR

Significant Cyber Event (SCE)

05.28.21

Significant Cyber Event | Intelligence Report – Nobelium

Customer Awareness Advisory

05.26.21

CVE-2021-21985 – Vulnerability Found in VMware vCenter Servers and Cloud Foundation

Customer Awareness Advisory

04.22.21

CVE-2021-22893 – Pulse Secure VPN Zero-Day & Active Exploits

Customer Awareness Advisory

03.03.21

Microsoft Exchange Server Zero-Days

Customer Awareness Advisory

02.26.21

Chasing Silver Sparrow: Keeping an Eye on the Mysterious macOS Malware

Customer Awareness Advisory

02.25.21

CVE-2021-21972 – Vulnerability Found in VMware vCenter Servers and Cloud Foundation

Customer Awareness Advisory

02.22.21

Windows Event 4688 – Part I – Eh to Excellent

Customer Awareness Advisory

02.18.21

SolarWinds Attack – Part II – Is MITRE ATT&CK Falken’s Maze?

Customer Awareness Advisory

01.27.21

Sudo Vulnerability

Customer Awareness Advisory

12.29.20

SolarWinds Attack – Part I – From Infrastructure to Endpoint

Customer Awareness Advisory

12.18.20

Summary of Deepwatch’s Actions in Response to Sunburst IOC

Customer Awareness Advisory

11.04.20

Oracle WebLogic Vulnerability

Customer Awareness Advisory

10.19.20

ZeroLogon Threat Review

Customer Awareness Advisory

10.14.20

Bad Neighbor Vulnerability

Customer Awareness Advisory

09.14.20

Zerologon Vulnerability

Customer Awareness Advisory

07.29.20

BootHole Vulnerability SPOT Report

Customer Awareness Advisory

07.14.20

SAP RECON Vulnerability

Customer Awareness Advisory

07.06.20

F5 Networks BIG-IP Vulnerabilities

Customer Awareness Advisory

06.30.20

SPOT Report – Palo Alto Networks Authentication Bypass

Customer Awareness Advisory

05.15.20

Palo Alto Networks & Cisco Kerberos Authentication Bypass

Threat Report

04.05.20

Meet the Threat: The Inside Workings of Magecart Breaches

Customer Awareness Advisory

04.03.20

SPOT Report – Zoom Zero-Day

Customer Awareness Advisory

03.05.20

SPOT Report – Apache Tomcat – GhostCat

Customer Awareness Advisory

02.06.20

SPOT Report – Cisco – CDPwn Vulnerabilities

Customer Awareness Advisory

01.15.20

SPOT Report – Microsoft Crypt32 Certificate Validation flaw

Customer Awareness Advisory

12.24.19

SPOT Report – Citrix ADC & Gateway Vulnerability

Customer Awareness Advisory

08.28.19

SPOT Report – Imperva Security Breach

Customer Awareness Advisory

08.16.19

Seven Monkeys Vulnerability – SPOT Report – August 2019 Patch Tuesday

Customer Awareness Advisory

06.20.19

SPOT Report – WebLogic Remote Code Execution

Customer Awareness Advisory

SPOT Report – SACK Vulnerabilities

Customer Awareness Advisory

05.15.19

SPOT Report – ZombieLoad

Customer Awareness Advisory

SPOT Report – Patch Tuesday Vulnerabilities

Customer Awareness Advisory

SPOT Report – Cisco – Thrangrycat

Threat Report

05.13.19

Profile of an Adversary – FIN7

Customer Awareness Advisory

05.01.19

SPOT Report – Oracle WebLogic Remote Code Execution CVE-2019-2725

Customer Awareness Advisory

04.25.19

1-day Vulnerabilities: The Limits of Following the Patch Tuesday Cycle

Customer Awareness Advisory

03.07.19

Google Chrome FileReader Vulnerability

Customer Awareness Advisory

02.11.19

Runc Docker Vulnerability

Customer Awareness Advisory

01.25.19

MS Exchange Privilege Escalation Attack

Customer Awareness Advisory

01.10.19

DNS Infrastructure Hijacking Campaign

Customer Awareness Advisory

12.21.18

IE – Scripting Engine Memory Corruption Vulnerability CVE-2018-8653

Customer Awareness Advisory

12.02.18

Zoom Desktop Conferencing CVE-2018-15715

Deepwatch Labs

Early Discovery by Deepwatch ATI Finds Adobe ColdFusion Threats