The team at Jigsaw Security is watching closely a campaign known as Capesand. It appears as though the exploit kit is in active development and we have been tracking activity associated with the threat actor. The exploits observed are not all new but newer vulnerabilities are being leveraged to gain a foothold on victims computers. Observed Vulnerabilities Some of the observed vulnerabilities include CVE-2019-0752 aimed at targeting Internet Explorer users and CVE-2018-4878 a

During a recent review of activity, we noted a large uptick in information coming in concerning APT-C-37. Not knowing what is behind the attacks we have published indicators that may be useful in detecting the activity. In addition we have also published some new APT28 and APT3 indicators that we do not believe were previously disclosed. Disclaimer: Portions of the indicators were observed from Chinese sources and may not be reliable. They are being shared for awareness. Addi

Over the last several years we have been monitoring closely the activities of CDN networks owned and/or operated by Verizon. What we have noted is that nearly daily reports show up from our customers of malicious activity from several IP's associated with this entity. As of today we have fully blocked the entire CDN because they have not responded to previous request to remove the malicious software contained on their endpoints. Additional information is available in the Jigs

What is Cobalt Strike? Cobalt Strike is a platform for conducting offensive cyber operations. Many of the components of this toolset are being used every day by researchers as well as threat actors and hackers. Over the next few days we will be posting some new reports in the home that it helps companies protect their networks from this type of activity. Cobalt Strike is a powerful platform for conducting offensive cyber operations. It contains a wide variety of tools for con