Threat Report Blog Posts

Several critical Microsoft CVEs have been outlined in Microsoft’s February 2024 Patch Tuesday. We are continually monitoring the development of these CVEs and exploring possible detection methods around these vulnerabilities.

The CRU uncovered a campaign spanning back to at least October of 2022 pushing a persistent Chromium extension via software, game, and movie pirating web pages that we are referring to as SmashJacker.

Microsoft released a report detailing the events of a Chinese APT group dubbed Volt Typhoon gaining access to victims through Fortinet FortiGuard devices. The CRU has been threat hunting on these observables for any additional details we can find.