Russia's APT29, a.k.a "Midnight Blizzard," is arguably one of the world's most notorious threat actors. You might recall their involvement in the 2019 SolarWinds attack where they operated under the alias "Cozy Bear."

The group is back with more relentless attacks—breaching cloud credentials and targeting over 100 organizations worldwide.

In this episode of State of Cybercrime, Matt and David dive into some of the hottest cybersecurity news and recent breaches, including Midnight Blizzard. Discover how these sophisticated attacks are happening and what you can do to stay a step ahead.

Hosts Matt Radolec and David Gibson explain how cybercriminals are manipulating AI models like ChatGPT to plant false memories and steal data, along with other cybercrime-related stories like Salt Typhoon.

Salt Typhoon is a Chinese hacking group that has reportedly breached multiple key U.S. broadband providers, raising significant concerns about the security of sensitive communications data.

The hackers may have had access to these networks for months, raising significant concerns about the security of sensitive communications data.

More from Varonis ⬇️

Visit our website: https://www.varonis.com

LinkedIn: https://www.linkedin.com/company/varonis

X/Twitter: https://twitter.com/varonis

Instagram: https://www.instagram.com/varonislife/

#Cybercrime #DataSecurity

The North Korean Lazarus group is running multiple high-risk campaigns: one exploiting Windows and another installing malware through fraudulent blockchain job offers.

State of Cybercrime hosts Matt Radolec and David Gibson discuss the various APT groups, including a prolific ransomware-as-a-service operation and a Chinese cyber espionage gang known as Volt Typhoon, and other vulnerable vulnerabilities in this episode, including:

+ Lazarus FudModule rootkit attacks and the concurrent Eager Crypto Beavers campaign

+ RansomHub attacks on Halliburton, Change Healthcare, and hundreds more

+ Large-scale extortion of AWS environments through exposed ENV files

+ Hundreds of exposed servers from Volt Typhoon’s ISP targeting

+ Payment gateway breach of over 1.7 million credit card owners