Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

bluevoyant

Investigating the Oyster Backdoor Campaign and its Targeting of IT Professionals

Aug 26, 2025 By Thomas Elkins, Joshua Green, and Ian Harte In BlueVoyant
BlueVoyant investigated the latest Oyster malware attacks, delivered in a widespread campaign targeting IT professionals by impersonating legitimate IT tools. The campaign was originally discovered by outside researchers, but when BlueVoyant’s SOC observed suspicious behavior in a client environment within the healthcare sector, the team, including the Threat Fusion Cell (TFC), decided to delve deeper.
Read Post

Five-Year Plans, Forever Wars: China's Blueprint for Cyber Dominance

Aug 26, 2025 By Rubrik In Rubrik
Chinese state-backed cyber operations are often misunderstood as a single, centrally controlled machine. In reality, they are fragmented, diverse, and strategically aligned with China’s national objectives, from economic development to critical infrastructure positioning. In this episode of Data Security Decoded, join Caleb Tolin as he sits down with Mei Danowski, Co-Founder of Natto Thoughts and expert in geopolitical intelligence, to explore how China’s cyber ecosystem operates and how it is shaped by cultural, political, and economic structures.
View Video
foresiet

Inside the Kimsuky APT Leak: Stolen GPKI Certificates, Rootkits, and a Personalized Cobalt Strike from North Korea's Cyber Unit

Aug 25, 2025 By Foresiet In Foresiet
In a rare and unprecedented incident, a massive operational dump belonging to the North Korean Kimsuky APT group was leaked on a dark web forum. The leak containing virtual machine images, VPS dumps, phishing kits, rootkits, and thousands of credentials offers an unparalleled look into the inner workings of one of Pyongyang’s most prolific cyber espionage groups.
Read Post
CrowdStrike

MURKY PANDA: A Trusted-Relationship Threat in the Cloud

Aug 21, 2025 By Counter Adversary Operations In CrowdStrike
Since 2023, CrowdStrike Services and CrowdStrike Counter Adversary Operations have investigated multiple intrusions conducted by MURKY PANDA, a sophisticated adversary leveraging advanced tradecraft to compromise high-profile targets. MURKY PANDA, active since at least 2023, is a cloud-conscious adversary with a broad targeting scope; the adversary’s operations have particularly focused on government, technology, academia, legal, and professional services entities in North America.
Read Post

Can threat actors make ChatGPT malware? #ai #cybersecurity #gpt5

Aug 21, 2025 By LimaCharlie In LimaCharlie
GPT-5 was jailbroken in under 24 hours using simple "storytelling" techniques that bypass safety guardrails. The key insight from our podcast? Individual AI requests appear legitimate but become dangerous when combined. Bad actors can request network code in one session, convincing emails in another, and credential collection forms in a third. Each task seems normal individually, but together they form a complete phishing toolkit.
View Video
CrowdStrike

Falcon Platform Prevents COOKIE SPIDER's SHAMOS Delivery on macOS

Aug 20, 2025 By Maddie Stewart - Suweera De Souza - Ash Leslie - Doug Brown In CrowdStrike
Between June and August 2025, the CrowdStrike Falcon platform successfully blocked a sophisticated malware campaign that attempted to compromise over 300 customer environments. The campaign deployed SHAMOS, a variant of Atomic macOS Stealer (AMOS) developed by the cybercriminal group COOKIE SPIDER. Operating as malware-as-a-service, COOKIE SPIDER rents this information stealer to cybercriminals who deploy it to harvest sensitive information and cryptocurrency assets from victims.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.