Threat Intelligence Research

MixMode Uncovers Nation-State Attacks, Insider Threats, and Regulatory Risks in Critical Infrastructure Environment within 3 Days of Deployment

In our newest MixMode report, we break down how a critical infrastructure provider uncovered active nation-state and insider threats within three days of deploying our AI-driven security platform.

MixMode Uncovers Nation-State Attacks, Insider Threats, and Regulatory Risks in Critical Infrastructure Environment within 3 Days of Deployment Read More →

Threat Research Report: Web Browsers as an Overlooked Risk in Cybersecurity

Web browsers have evolved from passive document viewers into complex platforms essential for cloud-based work. But this transformation has also made them a prime target for cyber threats, leaving enterprises and government networks vulnerable.

Threat Research Report: Web Browsers as an Overlooked Risk in Cybersecurity Read More →

Hiding in Plain Sight: The Hidden Dangers of Geolocation in Cloud Security

One of the biggest challenges organizations face today is detecting malicious activity in cloud environments. As highlighted in MixMode’s latest Threat Research Report, cybercriminals are increasingly leveraging trusted cloud providers like AWS, Microsoft Azure, and Google Cloud to disguise their attacks, a strategy known as infrastructure laundering.

Hiding in Plain Sight: The Hidden Dangers of Geolocation in Cloud Security Read More →

Securing OAuth Authentication Risks with AI-Driven Monitoring

As organizations continue to integrate cloud-based services and third-party applications, OAuth authentication has become a cornerstone of modern security frameworks. However, recent cybersecurity incidents highlight a growing concern: OAuth-based vulnerabilities remain an overlooked entry point for attackers, particularly in Zero Trust environments.

Securing OAuth Authentication Risks with AI-Driven Monitoring Read More →

Codefinger Ransomware: Detection and Mitigation Using MixMode

The Codefinger ransomware represents a new frontier in cyber threats, specifically targeting AWS S3 buckets. By exploiting Server-Side Encryption with Customer-Provided Keys (SSE-C), attackers gain control over the encryption process, rendering recovery impossible without their AES-256 keys.

Codefinger Ransomware: Detection and Mitigation Using MixMode Read More →

APT 1, COMMENT PANDA – PLA Unit 61398, CHINA

APT 1, COMMENT PANDA – PLA Unit 61398, CHINA Table of Contents Add a header to begin generating the table of contents Creation Date  09/25/2023 Last Update  09/25/2023 Author(s)  Jeremy Pickett, MixMode Change Log  0.04 Technical Updates  0.03 Initial MixMode version   Details on APT1  PLA Unit 61398, commonly known as APT1 or Comment Panda

APT 1, COMMENT PANDA – PLA Unit 61398, CHINA Read More →