cve-2023-42793

cve-2023-2868

cve-2023-46747

cve-2023-44487

enisa.europa.eu

www.misp-project.org

europa.eu

www.europol.europa.eu

ncsc.nl

www.group-ib.com

gist.github.com

decoded.avast.io

apiiro.com

cert.pl

ciras.enisa.europa.eu

www.recordedfuture.com

go.crowdstrike.com

blog.talosintelligence.com

www.cert.ssi.gouv.fr

mockbin.org

blogs.security.com

www.microsoft.com

www.genians.co.kr

www.ncsc.nl

www.zscaler.com

www.cyberark.com

blog.sekoia.io

www.thebureauinvestigates.com

apnews.com

citizenlab.ca

edition.cnn.com

blog.unpac.me

ia.acs.org.au

www.fortinet.com

www.humansecurity.com

arcticwolf.com

www.fsisac.com

asec.ahnlab.com

www.verizon.com

www.mcafee.com

www.nccgroup.com

netenrich.com

www.bitdefender.com

ib.com

www.cybereason.com

journals.sagepub.com

securitylab.amnesty.org

home.treasury.gov

time.com

thehackernews.com

blogs.blackberry.com

cve.mitre.org

nvd.nist.gov

cwe.mitre.org

arxiv.org

www.reliaquest.com

www.helpnetsecurity.com

twitter.com

nvlpubs.nist.gov

socradar.io

cybelangel.com

inquest.net

blog.phylum.io

securityintelligence.com

darktrace.com

www.securityweek.com

www.consilium.europa.eu

www.scmagazine.com

www.hhs.gov

ieeexplore.ieee.org

surfshark.com

blog.barracuda.com

www.cobalt.io

digital-strategy.ec.europa.eu

www.whitehouse.gov

cybermagazine.com

www.infosecurity-magazine.com

blog.cloudflare.com

ddos-guard.net

www.state.gov

www.cloudbric.com

www.cdn.neustar

www.bleepingcomputer.com

vercara.com

www.disarm.foundation

www.nature.com

finance.ec.europa.eu

euvsdisinfo.eu

cdn.openai.com

dfrlab.org

sot.mitre.org

id.im

rs.co

www.iso.org

de.ae

id.am

gv.sc

www.wsav.com

hacked.com

www.aha.org

stixproject.github.io

github.blog

press@enisa.europa.eu

2024.pdf

msg00057.html

cert.pl

earth-freybug.html

www.cer

pawn-storm-uses-brute-force-and-stealth.html

ata-2024-unclassified-report.pdf

index.html

cyber-criminals-are-getting-faster.html

accessencryptionexfiltrationmitigation.pdf

fsisac-navcyber24-report.pdf

ransomware-propagates-to-vcenters-and-esxi-via-custom-pow.html

matter-a-glance-into-the-spyware-industry.pdf

apt44-unearthing-sandworm.pdf

cna.html

grit_ransomware_report_q1_2023.pdf

threatlabz-ransomware-report.pdf

800-171r2.pdf

social-engineering_node.html

video-fbi-take-down-uk-hacker-in-spain-for-stealing-27m-usd-of-bitcoins_1000077536-a.html

231108.pdf

media.cer

liability-495285.aspx

www.spi

threat_report_2h2023.pdf

2023-kio-report.pdf

neustar-cyber-threats-trends-2020-report.pdf

intelligence-1.pdf

20240611_np_sgdsn_viginum_matriochka_en_vf.pdf

reshape-the-global-information-environment_508.pdf

forecasting-misuse.pdf

www.iso

2022-data-breach-investigations-report-dbir.pdf

misp

mattiwatti

blackorbird

223949d5a074ebc3dce9ee78baad9e27

UNC4841

UNC4990

T1190

T1566

T1106

T1197

T1136

T1068

T1140

T1036

T1027

T1497

T1539

T1217

T1069

T1012

T1614

T1124

T1080

T1530

T1039

T1429

T1624.001

T1644

T1568

T1071

T1090

T1041

T1499

T1636.002

T1418

T1422

T1595

T1589

T1591

T1597

T1593

T1583

T1584

T1588

T1078

T1599

T1025

T1020

T1011

T1567

T1537

T1498

T1046

T1203

T1491

T1200

APT29

APT44

https://creativecommons.org/licenses/by/4.0

https://www.enisa.europa.eu/publications/enisa-threat-landscape-

https://github.com/misp/misp-galaxy.

https://blog.f-secure.com/data-breach-and-data-leak-whats-the-difference.

https://www.europol.europa.eu/activities-services/main-reports/internet-

https://www.ic3.gov/media/pdf/annualreport/2023_ic3report.pdf

https://lists.debian.org/debian-security-announce/2024/msg00057.html

https://openssf.org/blog/2024/04/15/open-source-security-openssf-and-openjs-foundations-issue-alert-for-social-

https://www.welivesecurity.com/en/eset-research/nspx30-sophisticated-aitm-enabled-implant-evolving-since-2005

https://blogs.jpcert.or.jp/en/2024/02/lazarus_pypi.html

https://cyware.com/news/north-

https://www.microsoft.com/en-us/security/blog/2023/10/18/multiple-north-korean-threat-actors-exploiting-the-teamcity-cve-

https://ciras.enisa.europa.eu

https://www.mandiant.com/m-trends.

https://www.mandiant.com/resources/blog/gru-disruptive-playbook.

https://www.picussecurity.com/resource/report/picus-red-report-2024.

https://blog.google/threat-analysis-group/active-north-korean-campaign-targeting-security-researchers/.

https://blog.talosintelligence.com/arcanedoor-new-espionage-

https://www.trendmicro.com/en_us/research/24/e/router-roulette.html

https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-espionage-orb-networks/.

https://www.mandiant.com/resources/blog/apt29-evolving-diplomatic-phishing.

https://www.recordedfuture.com/flying-under-the-radar-abusing-github-malicious-infrastructure.

https://www.welivesecurity.com/en/eset-

https://www.microsoft.com/en-us/security/blog/2023/09/14/peach-

https://www.cisa.gov/news-events/cybersecurity-

https://www.microsoft.com/en-

https://blog.google/technology/safety-security/a-review-of-

https://blog.google/threat-analysis-

https://www.enisa.europa.eu/news/joint-statement-on-ivanti.

https://www.mandiant.com/resources/blog/unc4841-post-barracuda-zero-day-remediation.

https://www.mandiant.com/resources/blog/chinese-vmware-exploitation-since-2021.

https://blog.talosintelligence.com/lazarus-quiterat/.

https://www.zscaler.com/blogs/security-

https://research.checkpoint.com/2023/elections-

https://www.blackberry.com/us/en/solutions/threat-intelligence/threat-report.

https://www.dni.gov/files/odni/documents/assessments/ata-2024-unclassified-report.pdf

https://www.iccl.ie/2023/new-iccl-reports-reveal-serious-security-threat-to-the-eu-

https://www.sgdsn.gouv.fr/files/files/20240212_np_sgdsn_viginum_portal-kombat-

https://www.gartner.com/en/newsroom/press-releases/2024-02-13-gartner-forecasts-security-and-risk-management-

https://openai.com/blog/disrupting-malicious-

https://blogs.microsoft.com/on-the-issues/2024/04/04/china-ai-influence-elections-mtac-cybersecurity/.

https://unit42.paloaltonetworks.com/medusa-ransomware-

https://www.microsoft.com/en-us/security/blog/2023/10/25/octo-tempest-crosses-boundaries-to-facilitate-extortion-

https://unit42.paloaltonetworks.com/glupteba-malware-uefi-bootkit

https://www.crowdstrike.com/resources/reports/threat-hunting-report/.

https://www.welivesecurity.com/en/cybersecurity/year-review-10-biggest-security-incidents-2023/.

https://blog.lumen.com/the-darkside-of-themoon/.

https://sec.okta.com/blockanonymizers.

https://cybersecurity.att.com/blogs/labs-research/mac-

https://go.flashpoint.io/2024-global-threat-intelligence-report-download.

https://www.fsisac.com/hubfs/knowledge/lockbit-

https://asec.ahnlab.com/en/64034/.

https://www.paloaltonetworks.com/content/dam/pan/en_us/assets/pdf/reports/2024-unit42-incident-response-report.pdf

https://www.verizon.com/business/resources/reports/dbir/.

https://www.proofpoint.com/uk/blog/cloud-

https://www.proofpoint.com/us/blog/email-and-cloud-threats/cloud-

https://decoded.avast.io/threatresearch/avast-q1-2024-threat-report/.

https://www.fsisac.com/hubfs/knowledge/navigatingcyber/2024/fsisac-navcyber24-report.pdf

https://www.trendmicro.com/en_us/research/23/k/threat-actors-leverage-file-sharing-service-and-reverse-proxies.html

https://unit42.paloaltonetworks.com/url-delivered-ransomware/.

https://www.sentinelone.com/blog/exploiting-repos-6-ways-threat-actors-abuse-github-other-devops-platforms/.

https://www.mcafee.com/blogs/other-blogs/mcafee-labs/redline-stealer-a-

https://www.netskope.com/blog/phishing-with-cloudflare-workers-transparent-phishing-and-html-smuggling.

https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-109a.

https://www.microsoft.com/en-us/security/blog/2023/10/25/octo-tempest-

https://securelist.com/network-tunneling-with-qemu/111803/.

https://www.dragos.com/blog/dragos-industrial-

https://unit42.paloaltonetworks.com/bianlian-ransomware-group-threat-assessment/.

https://www.wiley.law/alert-

https://www.europol.europa.eu/media-

https://www.welivesecurity.com/en/eset-research/eset-threat-report-h2-2023/.

https://www.proofpoint.com/us/blog/threat-insight/security-brief-ta547-targets-german-organizations-rhadamanthys-stealer.

https://www.group

https://underthebreach.medium.com/initial-access-

https://unit42.paloaltonetworks.com/nodestealer-2-targets-facebook-business/.

https://www.sentinelone.com/blog/macos-

https://www.proofpoint.com/us/blog/email-and-cloud-threats/tycoon-2fa-phishing-kit-mfa-bypass.

https://www.sentinelone.com/blog/the-rise-of-drainer-as-a-service-understanding-daas/.

https://journals.sagepub.com/doi/10.1177/20563051231224723.

https://transparency.meta.com/en-gb/metasecurity/threat-reporting.

https://www.euractiv.com/section/digital/opinion/governments-spying-on-citizens-who-is-to-blame-what-can-the-eu-do/.

https://edri.org/our-work/press-release-brussels-

https://www.state.gov/announcement-of-a-visa-restriction-policy-to-promote-accountability-for-the-misuse-of-

https://www.politico.eu/article/israel-hamas-war-hackers-cyberattacks/.

https://services.google.com/fh/files/misc/tool-of-first-resort-israel-hamas-war-cyber.pdf

https://www.sentinelone.com/labs/the-israel-hamas-war-cyber-domain-state-sponsored-activity-of-interest/.

https://thehackernews.com/2024/02/a-new-age-of-hacktivism.html

https://www.secalliance.com/blog/russia-

https://www.jpost.com/israel-

https://www.first.org/events/colloquia/cardiff2023/program#ptime

https://www.first.org/cvss/.

https://cve.mitre.org/cve/cna.html

https://www.cve.org/programorganization/cnas.

https://cwe.mitre.org/top25/index.html

https://csrc.nist.gov/csrc/media/publications/nistir/draft/documents/nist.ir.8374-preliminary-draft.pdf

https://www.reliaquest.com/blog/ransomware-q2-2023-victim-count-hits-new-heights/.

https://www.europol.europa.eu/media-press/newsroom/news/law-enforcement-disrupt-worlds-biggest-ransomware-

https://www.trendmicro.com/en_us/research/24/d/operation-cronos-aftermath.html

https://www.bleepingcomputer.com/news/security/ransomware-payments-drop-to-record-low-of-28-percent-in-q1-2024/.

https://www.bleepingcomputer.com/news/security/dark-angels-ransomware-receives-record-breaking-75-million-ransom/.

https://thehackernews.com/2024/04/ransomware-double-dip-re-victimization.html

https://quointelligence.eu/2024/06/analyzing-shift-in-ransomware-dynamics/.

https://www.europol.europa.eu/media-press/newsroom/news/ragnar-locker-ransomware-gang-taken-down-international-

https://www.bleepingcomputer.com/news/security/ransomware-gang-files-sec-complaint-over-victims-undisclosed-

https://csrc.nist.gov/glossary/term/malware.

https://attack.mitre.org/techniques/t1587/001/.

https://gridinsoft.com/blogs/infostealer-malware-top/.

https://cybelangel.com/how-have-infostealers-evolved-in-2024/.

https://any.run/malware-trends/formbook

https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/yellow-liderc-ships-its-scripts-delivers-

https://inquest.net/blog/top-malware-delivery-tactics-watch-out-2023/.

https://www.fortinet.com/blog/threat-research/scrubcrypt-deploys-venomrat-with-arsenal-of-plugins.

https://www.helpnetsecurity.com/2024/01/03/banking-trojans-mobile-devices/.

https://www.threatfabric.com/blogs/brokewell-do-not-go-broke-by-new-banking-malware.

https://flare.io/learn/resources/blog/malware-as-a-service/.

https://www.trellix.com/blogs/research/the-continued-evolution-of-the-darkgate-malware-as-a-service/.

https://www.europol.europa.eu/media-press/newsroom/news/largest-ever-operation-against-botnets-hits-dropper-

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-242a.

https://www.enisa.europa.eu/topics/incident-response/glossary/what-is-social-engineering.

https://www.consilium.europa.eu/en/policies/cybersecurity/cybersecurity-social-engineering/.

https://www.ic3.gov/media/pdf/annualreport/2022_ic3report.pdf

https://www.ftc.gov/news-events/news/press-releases/2024/03/federal-trade-commission-warns-scammers-pretending-

https://murciatoday.com/video-fbi-take-down-uk-hacker-in-spain-for-stealing-27m-usd-of-bitcoins_1000077536-a.html

https://www.scmagazine.com/news/north-koreas-moonstone-sleet-targets-victims-with-malicious-tools.

https://www.bleepingcomputer.com/news/security/fake-job-interviews-target-developers-with-new-python-backdoor/.

https://twitter.com/parth220_/status/1771589789143478471.

https://unit42.paloaltonetworks.com/luna-moth-callback-phishing/.

https://www.hhs.gov/sites/default/files/baza-r-call-campaigns-analyst-note.pdf

https://blog.f-secure.com/data-breach-and-data-leak-whats-the-difference/.

https://techcrunch.com/2023/08/25/moveit-mass-hack-by-the-numbers/.

https://media.cert.europa.eu/static/memo/2021/tlp-white-cert-eu-threat_landscape_report-volume1.pdf#page=13&zoom=auto

https://cloudsecurityalliance.org/press-releases/2023/06/05/new-cloud-security-alliance-survey-finds-saas-security-has-

https://fedtechmagazine.com/article/2024/01/unpacking-ai-data-poisoning.

https://www.forbes.com/sites/bernardmarr/2024/02/05/five-generative-ai-chatbots-everyone-should-know-about/.

https://siliconangle.com/2024/05/21/immersive-labs-warns-generative-ai-bots-highly-vulnerable-prompt-injection-

https://digital-strategy.ec.europa.eu/en/policies/european-approach-artificial-intelligence.

https://www.whitehouse.gov/ostp/ai-bill-of-rights/.

https://www.insurancebusinessmag.com/uk/news/technology/how-generative-ai-is-reshaping-conversations-around-

https://www.datacenterdynamics.com/en/news/amazons-q-generative-ai-chatbot-leaks-location-of-aws-data-centers/.

https://cybernews.com/security/chatgpt-samsung-leak-explained-lessons/#google_vignette

https://www.forbes.com/sites/forbestechcouncil/2023/10/16/generative-ai-is-the-next-tactical-cyber-weapon-for-threat-

https://www.akamai.com/resources/research-paper/the-evolution-of-ddos-return-of-the-hacktivists.

https://www.akamai.com/blog/security/a-retrospective-on-ddos-trends-in-2023.

https://blog.cloudflare.com/cyber-attacks-in-the-israel-hamas-war/.

https://www.imperva.com/resources/resource-library/reports/2024-imperva-ddos-threat-landscape-report

https://www.netscout.com/threatreport/wp-content/uploads/2024/04/threat_report_2h2023.pdf

https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps.

https://blog.cloudflare.com/ddos-threat-report-for-2024-q1.

https://www.bleepingcomputer.com/news/security/fbi-seized-domains-linked-to-48-ddos-for-hire-service-

https://www.europol.europa.eu/cms/sites/default/files/documents/iocta%202023%20-%20en_0.pdf

https://www.akamai.com/lp/soti/high-stakes-of-innovation.

https://www.accessnow.org/wp-content/uploads/2024/05/2023-kio-report.pdf

https://slovenia.mfa.gov.ua/en/news/russian-group-cyber-army-russia-reborn-announced-cyber-attacks-critical-

https://cloud.google.com/blog/topics/threat-intelligence/apt44-unearthing-sandworm

https://www.fsisac.com/hubfs/knowledge/ddos/fsisac_ddos-heretostay.pdf

https://www.networkcomputing.com/network-security/ransom-ddos-phenomenon-pay-or-get-knocked-offline.

https://www3.weforum.org/docs/wef_the_global_risks_report_2022.pdf

https://www.helpnetsecurity.com/2023/06/19/microsoft-365-azure-ddos/.

https://vercara.com/resources/2023-ddos-statistics-and-trends.

https://www.infosecurity-magazine.com/blogs/2022-ddos-yearinreview/.

https://www.bleepingcomputer.com/news/security/ddos-attacks-target-eu-political-parties-as-elections-begin/.

https://www.akamai.com/newsroom/press-release/akamai-report-finds-ddos-attacks-against-financial-services-gambling-

https://www.akamai.com/blog/security/akamai-prevents-the-largest-ddos-attack-on-a-us-financial-company.

https://www.disarm.foundation/framework.

https://www.enisa.europa.eu/publications/foreign-information-manipulation-interference-fimi-and-cybersecurity-threat-

https://raport.valisluureamet.ee/2023/en/russian-armed-forces/1-3-russia-continues-to-look-for-a-weak-link-in-ukrainian-

https://www.theguardian.com/world/2024/feb/23/2024-global-elections-tracker-voting-dates-us-india-indonesia-belarus-

https://digital-strategy.ec.europa.eu/en/news/new-cybersecurity-compendium-how-protect-integrity-elections-published.

https://edmo.eu/blog/eu-elections-2024-the-battle-against-disinformation-was-won-but-the-attrition-war-is-far-from-over/.

https://vsquare.org/behind-the-hack-and-leak-scandal-in-poland/.

https://www.microsoft.com/en-us/security/security-insider/intelligence-reports/how-russia-is-trying-to-disrupt-the-2024-

https://www.nature.com/articles/s41598-024-60653-y

https://www.state.gov/wp-content/uploads/2023/10/how-the-peoples-

https://www.microsoft.com/en-us/security/security-insider/microsoft-digital-

https://openai.com/index/disrupting-deceptive-uses-of-ai-by-covert-influence-operations

https://blog.sekoia.io/master-of-puppets-uncovering-the-doppelganger-pro-russian-influence-campaign

https://www.ivir.nl/publicaties/download/abc_framework_2019_sept_2019.pdf

https://www.wired.com/story/openai-threat-report-china-russia-ai-propaganda/.

https://openai.com/index/disrupting-deceptive-uses-of-ai-by-covert-

https://healthcyber.mitre.org/blog/resources/attack-navigator

https://attack.mitre.org

https://www.iso.org/standard/27001

https://github.com/circl/ail-framework

https://www.wsav.com/wp-content/uploads/sites/75/2022/01/20220124_itrc-2021-data-breach-report.pdf

https://www.verizon.com/business/resources/reports/2022/dbir/2022-data-breach-investigations-report-dbir.pdf

https://www.f5.com/labs/articles/threat-intelligence/2022-application-protection-report-ddos-attack-trends

https://www.f5.com/labs/articles/threat-intelligence/ddos-attack-trends-for-2020

https://www.eeas.europa.eu/sites/default/files/documents/2023/eeas-datateam-threatreport-2023..pdf

https://carnegieendowment.org/research/2023/03/phase-based-tactical-analysis-of-online-operations?lang=en

https://www.apa.org/monitor/2022/06/news-misinformation-attack

https://www.first.org/global/sigs/vulnerability-coordination/multiparty/guidelines-v1.1