Update: A new joint CISA/FBI/CNMF advisory has confirmed that Scattered Spider uses commercial data brokers. Read more here. The hacker collective known as Scattered Spider is once again dominating headlines with a wave of high-profile cyberattacks that span multiple industries. According to threat intelligence sources, the group has pursued a sector-by-sector strategy, recently hitting retailContinue reading "Scattered Spider’s Use of Data Brokers: Reconnaissance, Targeting, and Threats"

CrowdStrike’s 2025 Global Threat Report reveals adversaries are increasingly using identity compromise and social engineering to gain initial access and perform lateral movement.  In 2024, CrowdStrike Intelligence tracked a sharp rise in distinct campaigns leveraging telephone-based social engineering for initial access, including vishing and help desk impersonation tactics. Multiple adversaries incorporated vishing into their intrusionsContinue reading "CrowdStrike’s 2025 Global Threat Report Reveals Phone-Based Social Engineering Is Surging"