Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Trustwave

To Report or Not to Report Ransom Payments - Possibly Not Worth the Effort

Jul 3, 2025 By Craig Searle In Trustwave
Just a recap - Trustwave in no way endorses ransom payments. We believe the best way to deal with a ransomware situation is to: A: Create a strong defensive posture that will deter, if not stop, an attack. B: Have in place a solid and well-practiced incident response plan that includes backups so an organization can quickly recover from any attack.
Read Post
Trustwave

To Report or Not to Report Ransom Payments - A Helpful and Useful Idea

Jul 3, 2025 By Ed Williams In Trustwave
Just a recap - Trustwave in no way endorses ransom payments. We believe the best way to deal with a ransomware situation is to: A: Create a strong defensive posture that will deter, if not stop, an attack. B: Have in place a solid and well-practiced incident response plan that includes backups so an organization can quickly recover from any attack.
Read Post
splunk

When Installers Turn Evil: The Pascal Script Behind Inno Setup Malware Campaign

Jul 3, 2025 By Splunk Threat Research Team In Splunk
Software installer packages are a cornerstone of user-friendly software distribution. Tools like Inno Setup, NSIS (Nullsoft Scriptable Install System), and InstallShield help developers bundle their applications into a single, streamlined installer that users can run with just a few clicks. These installers often include everything needed to set up a program, files, configurations, and even system dependencies, making software installation seamless and accessible.
Read Post

Ransomware Strikes! What to Do in the First 60 Minutes: Understanding the Threat (Part 2)

Jul 2, 2025 By VISTA InfoSec In VISTA InfoSec
Are you prepared for a ransomware attack? In this 2nd part of our "Ransomware Strikes! What to Do in the First 60 Minutes" series, we move forward on one of the most terrifying cyber threats facing businesses today. Join VISTA InfoSec, an officially empaneled organization with CREST, PCI Council, CSRO SG, SWIFT, and CERT-IN, as we dive deep into the reality of ransomware in 2024. We'll reveal staggering statistics and solutions that you ought to execute to escape the mess.
View Video
Arctic Wolf

Malvertising Campaign Delivers Oyster/Broomstick Backdoor via SEO Poisoning and Trojanized Tools

Jul 2, 2025 By Andres Ramos In Arctic Wolf
Since early June 2025, Arctic Wolf has observed a search engine optimization (SEO) poisoning and malvertising campaign promoting malicious websites hosting trojanized versions of legitimate IT tools such as PuTTY and WinSCP.
Read Post
CrowdStrike

CrowdStrike Services Observes SCATTERED SPIDER Escalate Attacks Across Industries

Jul 2, 2025 By Counter Adversary Operations In CrowdStrike
SCATTERED SPIDER, an eCrime adversary, has recently broadened its target scope to include the aviation sector, in addition to its established focus on the insurance and retail industries, as observed by CrowdStrike Services. Throughout Q2 2025, SCATTERED SPIDER's activities have primarily centered on U.S.-based insurance and retail entities, along with U.K.-based retail entities.
Read Post
What Ransomware Teaches Us About Weak Links in the Development Pipeline

What Ransomware Teaches Us About Weak Links in the Development Pipeline

Jul 2, 2025 By SecuritySenses In SecuritySenses
Ransomware attacks aren't just hitting banks and government agencies anymore-they're going straight for the jugular of how modern software is made. That's right: the development pipeline has become prime hunting ground. And while companies scramble to patch after the damage is done, the smarter ones are shifting focus to where it all begins-the code, the pipeline, and the people pushing it live.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.