Network Security

The Good | Authorities Apprehend Iranian Cybercriminal & Extradite UNC3944 Hacker Montenegrin law enforcement, alongside the FBI, have apprehended a 39-year-old dual Iranian and Turkish citizen wanted by the U.S. government for several cybercrime offenses. Arrested in Kotor, the suspect faces charges in the Southern District Court of New York for conspiracy to commit computer […]

This post revisits SentinelOne’s Autonomous SOC maturity model, first introduced in “Autonomous SOC Is a Journey, Not a Destination” (December 2024). When SentinelOne® introduced the Autonomous SOC maturity model, we made a deliberate choice: describe a journey, not promise a destination. The industry had no shortage of vendors declaring that AI would transform security operations.

The Good | Authorities Dismantle Malware Networks and Seize Cambodian Scam Infrastructure Following the seizure of a major Phishing-as-a-Service last week, the latest move, part of Operation Endgame, dismantled operational infrastructure supporting the Amadey and StealC malware families. The joint effort by Europol and private sector partners successfully took 326 servers and 142 malicious domains

The Good | Authorities Dismantle PhaaS Network & Clean Sites Infected with SocGholish A coordinated action between government and the private sector led by the FBI has led to the dismantling of Outsider Enterprise, a Chinese Phishing-as-a-Service (PhaaS) operation. Operating since 2023, the syndicate combined AI and distributed phishing kits to impersonate trusted brands across

The security industry spent the last decade solving detection. Endpoint. Cloud Workloads. Identities. AI. We built better models. We moved beyond signatures. We reduced false positives. We got the alert into the right queue. Then, we discovered the harder problem had been waiting behind it. The constraint in every SOC today is not detection. It’s

Enterprise adoption of Claude across teams, workflows, and business functions is happening at a pace unlike virtually any technology before it. While the innovation opportunity is obvious, so are many of the risks. From the exposure of sensitive data and secrets through shadow IT to new attack vectors like prompt injection, security teams need the

The Good | Authorities Dismantle Crypto Laundering Empire & Seize Espionage Domains Europol has dismantled a major cryptocurrency laundering network called “AudiA6”, known for actively facilitating illicit transactions for ransomware syndicates and cybercriminals worldwide. Since 2022, the platform allegedly laundered more than $380 million by obscuring the origin of cybercrime proceeds through complex transaction routes

The Good | Fraud Networks Disrupted, Crypto Exchanges Sanctioned & Doxer Arrested This week, the DoJ’s Scam Center Strike Force unveiled results from “Disruption Week,” a first-of-its-kind joint initiative between U.S. agencies and private industry targeting cyber-enabled cryptocurrency investment fraud. Federal investigators from the FBI, Secret Service, and HSI shared threat intelligence with major technology

The Good | Authorities Dismantle Malicious Hosting Network & Sentence Oregon State Cyberattacker Web hosting firm, Stark Industries, was the subject of scrutiny this week from financial crime investigators in the Netherlands (FIOD). Founded just before the 2022 invasion of Ukraine, the firm had deep ties to Russian and Belarusian entities all sanctioned by the

The Good | Joint Operations Dismantle Cybercrime Infrastructure, Infostealers & Malicious VPNs Over 200 individuals and another 382 suspects have been rounded up in Interpol’s Operation Ramz, an initiative targeting cybercrime networks across the Middle East and North Africa. Spanning thirteen countries and working alongside cybersecurity partners, police seized 53 servers used for malware distribution,