/
initial_access_vector:phishing × victim_sectors:energy × limpar

Resultados

6 casos · pág. 1/1

welivesecurity.com · low

ESET: SMBs seek simple, supervised MDR-style protection amid AI-driven threats and tool sprawl

This ESET WeLiveSecurity blog post argues that small and midsize businesses (SMBs) want advanced protection that is simple, guided and manageable. It cites ESET data showing 75% of SMBs are concerned about global conflicts and cyber warfare, nearly half had at least one cyber incident in the past year, and 58% believe they are more vulner…

welivesecurity.com · high

UAC-0099 evolves MATCHBOIL C# downloader targeting Ukrainian transport, manufacturing and energy firms

ESET documented the evolution of MATCHBOIL, a custom C downloader used by the Russia-aligned cyberespionage group UAC-0099. Samples span April 2024 to April 2026, although CERT-UA first documented the malware in August 2025. Each iteration became more sophisticated, with new obfuscation, sandbox checks and persistence methods. All victims…

Silent Lynx (UAT-6275) uses WinRAR CVE-2025-8088 and reverse shells against CIS government targets

Silent Lynx, tracked as UAT-6275 by Cisco Talos and TAG-193 by Recorded Future Insikt Group, has been linked to a new set of attacks on government organizations across the Commonwealth of Independent States. The activity ran from June 2025 through August 2026 and used four infection chains to deploy custom reverse shells (FoalShell, Chvos…

industrialcyber.co · medium

Resilience claims analysis: ransomware drives ~70% of energy-sector cyber losses; MFA bypass and exposed OT controllers widen exposure

Resilience's report Cyber risk in energy and utilities analyzes cyber insurance claims filed between Jan. 1, 2023 and Sept. 5, 2026. Email compromise made up 21% of energy and utilities claims, against 10% across the rest of the portfolio. Ransomware was only 9% of claims but about 70% of incurred losses including reserves. In several cas…

recordedfuture.com · high

TAG-193 Espionage Campaign Targets Central Asian and CIS Governments with Spearphishing, WinRAR CVE-2025-8088 and Reverse Shells

Recorded Future's Insikt Group reports on TAG-193, a cluster that ran a sustained intelligence-collection campaign against government bodies from early 2025 through May 2026. Targets include diplomacy, economic development, agriculture and environmental agencies in Russia, Tajikistan, Belarus, Armenia and Uzbekistan. Lure documents and im…

securityweek.com · medium

Rapid7 Q3 2026: High-severity flaws exploited in 3 days on average, ransomware dominates, AI limited to 8% of incidents

Rapid7's Q3 2026 threat landscape report finds that high-severity vulnerabilities were exploited an average of three days after disclosure, with 71% exploited within the first seven days. 79% of them are classed as 'holy grail' flaws, meaning remote and needing no credentials or user interaction. Ransomware remains the dominant threat. Th…