Experienced a breach?
Contact us
Experienced a breach?
CONTACT US
Topics
Cloud
Incident Response
OT Security
Malware
Vulnerabilities
Attack Techniques
Detection
State Actors
Research
Forensics
Email
Cyber Crime
Ransomware
Mitigation and Response
Managed Detection and Response
Tabletop War Games
Threat Intelligence
Security Mitigation
VMware Security
Artificial intelligence (AI)
Threat Research
Featured Blog OT Security
Building An ICS/OT Threat Detection Strategy
Learn how to build a tailored ICS/OT threat detection strategy to safeguard critical infrastructure. Explore Sygnia's four-phase framework: Know, Assess, Plan, and Optimize.
Tamir Margalit
18.12.2024
3 min
Threat Reports and Advisories Attack Techniques Detection Research
XZ Utils Backdoor – Advisory for Mitigation and Response
Organizations Urged to Address Newly Discovered Security Flaw to Prevent Unauthorized Access to Linux Machines.
Lahav Meir, Omer Kidron
2.04.2024
7 min
Threat Reports and Advisories
Sygnia’s Annual Field Report series
Learn how to leverage your existing security estate and assets effectively, ensuring a powerful defense against cyber threats. Stay ahead of the curve and download the full report.
Sygnia’s Annual Field Report series
4.03.2024
1 min
Threat Reports and Advisories Attack Techniques Incident Response
Mitigation Advisory: Fortinet and Ivanti Exploitable Vulnerabilities
Protect your network against critical remote code execution vulnerabilities in Fortinet and Ivanti (formerly Pulse Secure) devices, now actively exploited in the wild.
Sygnia Team
14.02.2024
4 min
Threat Reports and Advisories Attack Techniques Detection Malware Ransomware Research
Revealing Emperor Dragonfly: Night Sky and Cheerscrypt – A Single Ransomware Group
The outcome of investigation by Sygnia's incident response teams - Cheerscrypt & Night Sky are rebrands of one ransomware group, named ‘Emperor Dragonfly’.
Oren Biderman, Amnon Kushnir, Noam Lifshitz, Ori Porag, Yoav Mazor, Erez Kalman, Haim Nachmias
3.10.2022
12 min
Threat Reports and Advisories Attack Techniques Malware Ransomware
Key Takeaways Leak of Conti crime group information
Shared thoughts and insights following our analysis of the leaked Conti (cyber crime group) information and the groups modus operandi.
Amnon Kushnir, Yoav Mazor, Noam Lifshitz, Etai Livne, Yoav Flint, Amir Becker
17.04.2022
5 min
Threat Reports and Advisories Attack Techniques State Actors
Potential Okta Breach
In light of evidence of a successful Okta breach, we recommend taking several steps to mitigate potential risk for organizations leveraging Okta solutions.
Potential Okta Breach
22.03.2022
3 min
Threat Reports and Advisories State Actors
Russia–Ukraine Conflict Escalation
An advisory to keep leadership updated & support global organizations enhance cyber resilience as we monitor the conflict between Russia & Ukraine.
Russia–Ukraine Conflict Escalation
28.02.2022
6 min
Threat Reports and Advisories
Elephant Beetle: Uncovering an Organized Financial-Theft Operation
Sygnia’s IR team has identified the Elephant Beetle threat group, an organized, significant financial-theft operation threatening global enterprises. 
Amnon Kushnir, Noam Lifshitz, Yoav Mazor, Oren Biderman, Boaz Wasserman, Itay Shohat and Arie Zilberstein
5.01.2022
4 min
Threat Reports and Advisories Attack Techniques Detection Malware State Actors Vulnerabilities
Log4Shell Remote Code Execution
Critical remote code execution vulnerability in a software logging package called “Log4Shell” (CVE-2021-44228) is impacting millions of devices globally
Log4Shell Remote Code Execution
11.12.2021
7 min
Threat Reports and Advisories Incident Response
Praying Mantis An Advanced Memory Resident Attack
Sygnia researchers identified an advanced threat actor targeting high profile US organizations, using nation-state attack methods, and operating in-memory.
Noam Lifshitz, Amitai Ben Shushan Ehrlich, Asaf Eitani, Amnon Kushnir, Gil Biton, Martin Korman, Itay Shohat and Arie Zilberstein
21.10.2021
4 min
Threat Reports and Advisories Attack Techniques Detection Malware Ransomware Vulnerabilities
Kaseya Ransomware Supply Chain Attack
Get a deep dive into the Kaseya ransomware attack, and how you can deploy effective defense strategies.
Kaseya Ransomware Supply Chain Attack
1.08.2021
3 min
Solutions
Threat Reports and Advisories
Lazarus Group’s Mata Framework Leveraged To Deploy TFlower Ransomware
Sygnia: Double extortion ransomware attack - threat actor leveraged an undocumented variant of MATA to distribute and execute the TFlower ransomware.
Amitai Ben Shushan, Noam Lifshitz, Amnon Kushnir, Martin Korman and Boaz Wasserman
1.08.2021
19 min
Threat Reports and Advisories Attack Techniques Detection State Actors
Detection And Hunting Of Golden SAML Attack
Get actionable insights on how to detect a Golden SAML attack vector and an overview of the compromise at SolarWinds.
Detection And Hunting Of Golden SAML Attack
21.07.2021
9 min
Threat Reports and Advisories Detection Vulnerabilities
Demystifying The PrintNightmare Vulnerability
Learn about the PrintNightmare vulnerability, why it's such a cause for concern and how to mitigate the risk.
Shlomo Zarinkhou, Haim Nachmias, Oren Biderman, Doron Vazgiel
1.07.2021
19 min
subsctibe decor
Want to get in touch?
Contact us