ReliaQuest

In this report, we explore Scattered Spider's evolution from low-level cybercrimes to partnering with ransomware groups to target major organizations

Cloud-based attacks are diverse and constantly changing, with threat actors directly targeting cloud environments or using cloud services to carry out malicious activities like phishing.

Cloud-based attacks are diverse and constantly changing, with threat actors directly targeting cloud environments or using cloud services to carry out malicious activities like phishing.

Detection engineering is traditionally manual, slow, and prone to error. The better way is detection orchestration. Apply it in these 4 phases.

Detection engineering is traditionally manual, slow, and prone to error. The better way is detection orchestration. Apply it in these 4 phases.

Q3 2024 saw a slight increase in ransomware activity, with 1,266 organizations listed on ransomware data-leak sites—a 2.3% increase from 1,237 in the previous quarter.

Q3 2024 saw a slight increase in ransomware activity, with 1,266 organizations listed on ransomware data-leak sites—a 2.3% increase from 1,237 in the previous quarter.

Nearly 30% of incidents across all sectors began with spearphishing, with the HSA sector disproportionately accounting for 13% of these attacks.

Agentic AI and generative AI are often embedded into security software and hardware, working alongside human operators to enhance overall effectiveness.

The threat actor gained access to multiple file servers and exfiltrated business-related data. The report details stages of the attack lifecycle, from initial access to exfiltrating data.

ReliaQuest anticipates election-related targeting will pose substantial threats to businesses through phishing, distributed denial of service (DDoS), and data theft.

Stay ahead of cyber threats in the PSTS sector with ReliaQuest's latest insights. Download the report for detailed analysis and expert strategies.

ReliaQuest partners with Junior Achievement to empower students with hands-on cybersecurity education through immersive programs like Biztown and 3DE.

Discover how to define use cases, scale SecOps automation, and align technologies to enhance your security operations and stay ahead of modern threats.

Exploiting poorly managed RDP is a top method for threat actors. Learn how to secure RDP by avoiding weak credentials and limiting internet exposure.

This report details the various stages of an Inc Ransomware attack intrusion lifecycle, from exploiting a firewall to the use of Windows log manager and PowerShell for defense evasion.

This report defines the abuse of CAMO, explores related cybercriminal discussions, and showcases real-world intrusions using this technique.

custom excerpt