Experienced a breach?
Contact us
Experienced a breach?
CONTACT US
Resource Type
Blog
Threat Reports and Advisories
Guides and tools
Datasheet
Webinars
Topics
Cloud
Incident Response
OT Security
Malware
Vulnerabilities
Attack Techniques
Detection
State Actors
Research
Forensics
Email
Cyber Crime
Ransomware
Mitigation and Response
Managed Detection and Response
Tabletop War Games
Threat Intelligence
Security Mitigation
VMware Security
Artificial intelligence (AI)
Threat Research
Blog Incident Response
What is an Incident Response Retainer, Key Features and Benefits, and Why It Matters
Learn about incident response retainers, their key features, benefits, and why they are essential for protecting your organization from cyber threats.
Sygnia Team
23.02.2025
7 min
Blog Attack Techniques Detection Forensics Incident Response Malware Managed Detection and Response Research
A Surge in Identity-based Attacks: Cybersecurity trends from Sygnia’s new 2025 Threat Report
Explore key cybersecurity trends for 2025, including ransomware evolution, supply chain vulnerabilities, and identity-based threats. Discover actionable strategies and expert insights to strengthen your organization’s resilience.
Sygnia Team
2.02.2025
5 min
Blog Incident Response Tabletop War Games
How to Run Incident Response Tabletop Exercises in 2026
Discover how to prepare your organization for cyber threats in 2026 with incident response tabletop exercises. Learn strategies to strengthen your response plans.
Sygnia Team
27.01.2025
10 min
Blog Forensics Incident Response Ransomware
ESXi Ransomware Attacks: Stealthy Persistence through SSH Tunneling
ESXi ransomware attacks target virtualized infrastructures using SSH tunneling to remain undetected. Discover the techniques, forensic insights, and actionable defense strategies to protect your ESXi appliances from evolving threats.
Zhongyuan Hau (Aaron), Ren Jie Yow, Yoav Mazor
21.01.2025
7 min
Blog Incident Response
The Critical Importance of a Robust Incident Response Plan
In today’s challenging cyber threat landscape, having an effective Incident Response (IR) plan is essential. Discover how preparation and decisive action can help organizations minimize risks, maintain business continuity, and build resilience.
Rena Stern
16.01.2025
9 min
Guides and tools Detection Incident Response
Incident Response Readiness: What is it and how to improve it?
The most dangerous cyber attackers have something in common: they are tenacious at their craft and dogged in their determination to find and exploit security weaknesses.
Rena Stern, Director Solutions Marketing, Sygnia
11.08.2024
6 min
Blog Incident Response
Sygnia Recognized for the Third Consecutive Year in The Gartner 2024 Market Guide for Digital Forensics and Incident Response Retainer Services
In June, Sygnia, was named a Representative Vendor in the 2024 Gartner® Market Guide for Digital Forensics and Incident Response Retainer Services (DFIR).
Fred Pulver, Solutions Marketing Manager
10.07.2024
7 min
Forensics Incident Response Ransomware Research
Sygnia’s Annual Field Report series 2024
Learn how to leverage your existing security estate and assets effectively, ensuring a powerful defense against cyber threats. Stay ahead of the curve and download the full report.
Sygnia’s Annual Field Report series 2024
3.06.2024
1 min
Blog Attack Techniques Incident Response
Navigating the Digital Minefield
Part 1: A Thrilling Guide to Mastering Cyber Crisis Management. Explore real-world cyber crises reimagined as high-stakes dramas, from WannaCry to Target's breach.
Fred Metcalf
20.05.2024
7 min
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
Chapter 3 – Reversing DoSvc C++ using Ghidra – Part 1
In this chapter, we’ll finally get started on my favorite part: the reversing phase. Reversing is like looking for a needle in a haystack, so prepare yourselves, because things are about to get technical.
Binyamin Levine, Oleg Lerner
6.05.2024
18 min
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
Chapter 2 – Black Box Research
The intricacies of WUDO (Windows Update Delivery Optimization).
Binyamin Levine, Oleg Lerner
16.04.2024
23 min
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
Chapter 1 – Introduction
The intricacies of WUDO (Windows Update Delivery Optimization).
Binyamin Levine, Oleg Lerner
1.04.2024
6 min
Solutions
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
The Anatomy of a BlackCat (ALPHV) Attack
Explore the thwarted cyber extortion attempt by the BlackCat ransomware group, unraveled by Sygnia's Incident Response team in 2023.
Oren Biderman, Amir Sadon
5.03.2024
28 min
Guides and tools Attack Techniques Incident Response
Building Cyber Readiness: 5 Traits of the World’s Most Cyber-Ready Organizations
The most dangerous cyber attackers have something in common: they are tenacious at their craft and dogged in their determination to find and exploit security weaknesses.
Sygnia Team
19.02.2024
15 min
Threat Reports and Advisories Attack Techniques Incident Response
Mitigation Advisory: Fortinet and Ivanti Exploitable Vulnerabilities
Protect your network against critical remote code execution vulnerabilities in Fortinet and Ivanti (formerly Pulse Secure) devices, now actively exploited in the wild.
Sygnia Team
14.02.2024
4 min
Blog Incident Response
Why monitoring monitors is the key to cyber threat resilience
Protect your organization by monitoring the monitors – a critical defense against cyber threats.
Yotam Meitar
29.11.2023
6 min
Blog Incident Response
Luna Moth Ransomware: The Threat Actors Behind Recent False Subscription Scams
Sygnia’s team identified 'Luna Moth' ransom group. The threat actors resemble false subscription scammers, focusing on corporate data theft.
Oren Biderman, Tomer Lahiyani, Noam Lifshitz, Ori Porag
1.07.2022
8 min
Threat Reports and Advisories Incident Response
Praying Mantis An Advanced Memory Resident Attack
Sygnia researchers identified an advanced threat actor targeting high profile US organizations, using nation-state attack methods, and operating in-memory.
Noam Lifshitz, Amitai Ben Shushan Ehrlich, Asaf Eitani, Amnon Kushnir, Gil Biton, Martin Korman, Itay Shohat and Arie Zilberstein
21.10.2021
4 min
subsctibe decor
Want to get in touch?
Contact us