Skip to content
      Featured Incident Response Threat Research

      Revealing Emperor Dragonfly: Night Sky and Cheerscrypt - A Single Ransomware Group

          Key Takeaways Sygnia recently investigated a Cheerscrypt ransomware attack which utilized Night Sky ransomware TTPs. Further analysis       revealed that Cheerscrypt and...

      Read More

      Advisory

        Filter by Topic

        Advisory
        Featured Incident Response Threat Hunting

        Sygnia Advisory: Key Takeaways Leak of Conti crime group information

        The ongoing war between Russia and Ukraine has led to a wide range of impacts and outcomes globally, and across industries. In the cyber domain, one of the most recent... Read More
        Advisory
        Featured Incident Response Threat Hunting

        Sygnia Advisory: Potential Okta Breach

        executive summary On March 22nd, 2022, the LAPSUS$ threat group published potential evidence of a successful breach of Okta, a widely used identity provider. This... Read More
        Advisory
        Featured Incident Response Threat Hunting

        Advisory: Russia–Ukraine Conflict Escalation

        executive summary As we continue to closely monitor the unfolding conflict between Russia and Ukraine, we're publishing this advisory to support global organizations. The... Read More
        Advisory
        Incident Response Threat Hunting

        Sygnia Advisory: Log4Shell Remote Code Execution

        Updated - December 17, 2021 On December 9, a critical remote code execution (RCE) vulnerability in Java logging library Apache Log4j was made public. The vulnerability,... Read More
        Advisory
        Incident Response Threat Hunting Ransomware

        Kaseya Ransomware Supply Chain Attack

        On July 2nd, several managed service providers reported numerous ransomware incidents affecting their clients via Kaseya VSA – an endpoint monitoring and patch management... Read More
        Advisory
        Incident Response Threat Hunting Ransomware

        Detection And Hunting Of Golden SAML Attack

        The SolarWinds software supply chain attack is known to have affected U.S. government agencies, critical infrastructure entities, and private sector organizations by an... Read More