Month: June 2025
11 posts
What is FIN6? And Why Its Latest Malware Attack Is So Effective
Looking for a new job or employee has become a more perilous task thanks to the recent tactics to spread malware by FIN6.
Here we take a look at some of what makes FIN6 More_eggs attacks work so well.
Weekly Top 10: 06.23.2025: Initial Access Broker of Ransomware Group Ryuk Extradited to the U.S.; Cloudflare Blocked a Record 7.3 Tbps DDoS Attack; Record 16 Billion Credentials Leaked on Hacking Forum, and More.
Initial Access Broker of Ransomware Group Ryuk Extradited to the U.S.; Cloudflare Blocked a Record 7.3 Tbps DDoS Attack; Record 16 Billion Credentials Leaked on Hacking Forum, and 7 more.
The Modern IR Runbook
Incident Response (IR) is an ever-changing realm of cybersecurity that can leave teams scrambling at all hours, scouring runbooks to figure out the next steps during an attack. Automation can simplify much of this work, according to Abby Dykes, Threat Operations & Forensics Team Lead at Novacoast, who walked us through a few IR scenarios at the Nashville Innovate Summit in April.
Weekly Top 10: 06.16.2025: Fog Ransomware: Unusual Toolset Used in Recent Attack; EchoLeak: Critical Zero-Click AI Vulnerability in Microsoft 365 Copilot; Stealth Falcon’s Exploit of Microsoft Zero-Day Vulnerability, and More.
Fog Ransomware: Unusual Toolset Used in Recent Attack; EchoLeak: Critical Zero-Click AI Vulnerability in Microsoft 365 Copilot; Stealth Falcon's Exploit of Microsoft Zero-Day Vulnerability, and 7 more.
The Growing Use of AI and LLMs (Part 1)
Large Language Models (LLMs) and Machine Learning (ML) have emerged as powerful tools enabling advanced threat detection methods. Recently, Eron Howard and Carlos Bello met to discuss AI and LLMs. This article is part one of their conversation.
The Growing Use of AI and LLMs (Part 2)
In this next part of this conversation on large language model (LLM), AI, and Machine Learning (ML), Eron Howard, Novacoast's Chief Operating Officer, and Carlos Bello, an Analyst and Developer at Novacoast, discuss prompt engineering, robotics, security, and how these tools enhance businesses' cybersecurity hygiene.
Weekly Top 10: 06.09.2025: PathWiper Malware Targets Ukrainian Infrastructure; Zero-Click iMessage Exploit Used Against EU and U.S. Officials; Fake AI Tools Used to Distribute Ransomware and More.
PathWiper Malware Targets Ukrainian Infrastructure; Zero-Click iMessage Exploit Used Against EU and U.S. Officials; Fake AI Tools Used to Distribute Ransomware and 7 More.
The State of Cyber Espionage in 2025—Part 2
The cybersecurity space is seeing actual espionage. This is happening in the private sector. It's not stories happening in the news; it's real life, and it seems to be picking up steam, Elise Manna Browne, the VP for Emerging Technologies at Novacoast, said at the Innovate Cybersecurity Conference in Nashville in April 2025.
OpenAI Case Study On Disrupting Malicious Use Of AI
OpenAI has released a comprehensive statement complete with case studies titled “Disrupting Malicious Use of AI” in which…
The State of Cyber Espionage in 2025—Part 1
The cybersecurity space is seeing actual espionage. This is happening in the private sector. It's not stories happening in the news; it's real life, and it seems to be picking up steam, Elise Manna Browne, the VP for Emerging Technologies at Novacoast, said at the Innovate Cybersecurity Conference in Nashville in April 2025.