CFOtech UK - Technology news for CFOs & financial decision-makers
United Kingdom

Cobalt Strike Stories

UK Stories

Cobalt Strike stories

Global Stories

Cobalt Strike stories

ReliaQuest warns of SonicWall MFA bypass after patching
Ransomware

ReliaQuest warns of SonicWall MFA bypass after patching

Patching alone has left some older SonicWall devices exposed to VPN attacks, with reliaQuest finding the first known in-the-wild use of CVE-2024-12802.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 22nd May 2026
Proofpoint details TA584's fast-evolving 2025 attacks
Malware

Proofpoint details TA584's fast-evolving 2025 attacks

Cyber gang TA584 triples 2025 email attacks as it adopts ClickFix lures and new Tsundere Bot malware, Proofpoint researchers warn.

By Mark Tarre • 5 min read • Fri, 30th Jan 2026
Cybercriminals to weaponise AI & exploit open-source risks in 2026
Malware

Cybercriminals to weaponise AI & exploit open-source risks in 2026

In 2026, cybercriminals will exploit AI tools and open-source vulnerabilities, escalating ransomware threats with both noisy and stealthy tactics.

By Sean Mitchell • 4 min read • Sat, 22nd Nov 2025
AI-driven DNS threats & malicious adtech surge worldwide
Malware

AI-driven DNS threats & malicious adtech surge worldwide

Infoblox's 2025 report reveals a surge in AI-driven DNS threats and widespread malicious adtech affecting global organisations, urging proactive cyber defence.

By Catherine Knowles • 4 min read • Tue, 5th Aug 2025
AI-driven DNS threats & malicious adtech fuel cybercrime surge
Phishing

AI-driven DNS threats & malicious adtech fuel cybercrime surge

Infoblox reports a surge in AI-driven DNS threats and malicious adtech, with 25% of new domains found malicious, urging firms to adopt proactive cyber defences.

By Melvin Hipolito • 4 min read • Tue, 5th Aug 2025
Elastic report: Azure outpaces AWS in 2024 cyber threats analysis
Hyperscale

Elastic report: Azure outpaces AWS in 2024 cyber threats analysis

In a significant shift, Microsoft Azure has eclipsed AWS as the leading environment for cyber threats, accounting for 64% of anomalous signals, according to Elastic's new report.

By Melania Watson • 3 min read • Wed, 2nd Oct 2024
Elastic report: misconfigurations & OSTs heighten cyber risk
Encryption

Elastic report: misconfigurations & OSTs heighten cyber risk

Elastic's 2024 Global Threat Report reveals that misconfigurations and offensive security tools significantly elevate cyber risks, notably in cloud environments.

By Sean Mitchell • 3 min read • Wed, 2nd Oct 2024
Elastic discovers new attack vector in Microsoft Management Console
Malware

Elastic discovers new attack vector in Microsoft Management Console

Elastic Security Labs has unveiled GrimResource, a new attack technique exploiting the Microsoft Management Console, allowing full code execution with minimal security alerts.

By Sean Mitchell • 3 min read • Wed, 26th Jun 2024
Cybersecurity firm Group-IB tracks major new threat actor GambleForce
Advanced Persistent Threat Protection

Cybersecurity firm Group-IB tracks major new threat actor GambleForce

Threat actor GambleForce has struck 24 organisations in 8 countries in 3 months, exploiting SQL vulnerabilities to steal sensitive data.

By Catherine Knowles • 3 min read • Thu, 14th Dec 2023
Huge increase in threat actors using Cobalt Strike - Proofpoint research
DevOps

Huge increase in threat actors using Cobalt Strike - Proofpoint research

Proofpoint cybersecurity company has released research finding a 161% increase in threat actors using the threat emulation tool Cobalt Strike.

By Ryan Morris-Reade • 3 min read • Wed, 7th Jul 2021
Hackers using spearphishing to target banks –Bitdefender
Malware

Hackers using spearphishing to target banks –Bitdefender

To limit the risk of being discovered, attackers operated outside of normal business hours and cashout operations were planned for weekends.

By Kai Ping Lew • 2 min read • Tue, 21st Aug 2018

Stories from Other Regions

Cobalt Strike stories

Microsoft & Fortra's joint fight against Cobalt Strike abuse
Malware

Microsoft & Fortra's joint fight against Cobalt Strike abuse

Microsoft, Fortra, and Health ISAC unite against cybercrime, significantly reducing Cobalt Strike misuse by 80% through international cooperation and proactive strategies.

By Catherine Knowles • 3 min read • Wed, 12th Mar 2025
RansomEXX ransomware disrupts India's banking services
Malware

RansomEXX ransomware disrupts India's banking services

A cyberattack by RansomEXX has disrupted services at around 300 Indian banks, affecting ATMs and UPI transactions. CloudSEK investigates the breach.

By Kaleah Salmon • 3 min read • Wed, 7th Aug 2024