Blog & Resources
The latest advice, opinion and research from our dedicated intelligence analyst team.
How cybercriminals are taking advantage of COVID-19: Scams, fraud, and misinformation
March 12, 2020 | 9 Min Read
Saving the SOC from overload by operationalizing digital risk protection
August 5, 2020 | 4 Min Read
The story of Nulled: Old dog, new tricks
August 4, 2020 | 9 Min Read
BitBazaar Market and The Rise of Neptune Market: The End of the Saga spells hope for another
August 3, 2020 | 8 Min Read
ShadowTalk Update – Garmin ransomware attack, QSnatch malware, and ShinyHunters Stage 2
August 3, 2020 | 3 Min Read
Dark Web Travel Agencies Revisited: The Impact of Coronavirus on the Shadow Travel Industry
July 29, 2020 | 10 Min Read
Account takeover: Expanding on impact
July 27, 2020 | 7 Min Read
ShadowTalk Update – Trickbot trojan mishaps, Emotet resurgence, Twitter takeovers, and APT group updates
July 27, 2020 | 2 Min Read
Ransomware Trends in Q2: How Threat Intelligence Helps
July 22, 2020 | 8 Min Read
Jira Atlassian SearchLight Integration
July 21, 2020 | 2 Min Read
The Rise of OpenBullet: A Deep Dive in the Attacker’s ATO toolkit
July 20, 2020 | 9 Min Read
Abracadabra! – CryptBB demystifying the illusion of the private forum
July 15, 2020 | 8 Min Read
SearchLight’s Credential Validation: Only Focus on What Matters
July 14, 2020 | 4 Min Read
Tax Fraud in 2020: Down But Not Out
July 13, 2020 | 4 Min Read
ShadowTalk Update – PAN-OS Vulnerability, Lazarus Group, BEC scammer “Hushpuppi”, and New Photon ATO Research
July 13, 2020 | 2 Min Read
From Exposure to Takeover: Part 1. Beg, borrow, and steal your way in
July 7, 2020 | 9 Min Read
Digital Risk Reporting Best Practices: Top 10 Ways to Build Killer Reports in SearchLight
June 30, 2020 | 4 Min Read
Multiple vs. Exclusive Sales on the Dark Web: What’s in a sale?
June 29, 2020 | 9 Min Read
ShadowTalk Update – Torigon, Nulledflix, and BlueLeaks, Plus DevSecOps Insights From DS CISO Rick
June 29, 2020 | 2 Min Read
Introducing Nulledflix – Nulled forum’s own streaming service
June 23, 2020 | 8 Min Read
Torigon Forum: A sad case of all show and no go
June 23, 2020 | 11 Min Read
Modern Software Development and DevSecOps: Despite security controls, data leaks persist
June 22, 2020 | 15 Min Read
ShadowTalk Update – Lookback Operators Deploy New Malware Against US Utilities Sector And Honda Cyber Attack
June 22, 2020 | 2 Min Read
Ensuring order in the underground: Recruiting moderators on cybercriminal forums
June 18, 2020 | 10 Min Read
Reducing technical leakage: Detecting software exposure from the outside-in
June 16, 2020 | 6 Min Read
ShadowTalk Update – Maze Ransomware Alliance, EndGame DDoS Protection Tool, And Ransomware Disguises
June 15, 2020 | 2 Min Read
Security Threat Intel Products and Services: Mapping SearchLight
June 10, 2020 | 6 Min Read
CISA and FBI alert: Top vulnerabilities exploited from 2016-2019 and trends from 2020
June 9, 2020 | 7 Min Read
New DDoS protection tool advertised on the dark web
June 9, 2020 | 7 Min Read
SHADOWTALK UPDATE – HACKTIVIST CHOOSES DESTRUCTION OVER PROFIT W/ RANSOMWARE AND COLLECTION 1 HACKER IDENTIFIED
June 1, 2020 | 2 Min Read
Dark Web Digest: Exploring the risk impact of dark web findings, the evolution of forums, and observed trends
May 29, 2020 | 12 Min Read
3 Phishing Trends Organizations Should Watch Out For
May 20, 2020 | 16 Min Read
The 2020 Verizon Data Breach Investigations Report: One CISO’s View
May 19, 2020 | 6 Min Read
SHADOWTALK UPDATE – WANNACRY ANNIVERSARY, WORDPRESS PLUGIN VULNERABILITY, AND WELEAKDATA COMPROMISED
May 18, 2020 | 2 Min Read
A NEW DECADE OF CYBER THREATS: LOOKING BACK AT THE TRENDING CYBER TOPICS OF Q1 2020
May 14, 2020 | 10 Min Read
BitBazaar Market: Deception and Manipulation on the Dark Web
May 12, 2020 | 8 Min Read
Contact Tracing: Can ‘Big Tech’ Come to the Rescue, and at What Cost?
May 11, 2020 | 13 Min Read
ShadowTalk Update – Competitions On English Forums, Purple Teaming, & Hacker Bribes ‘Roblox’ Insider
May 11, 2020 | 2 Min Read
Threat Intelligence Feeds: Why Context is Key
May 7, 2020 | 10 Min Read
Competitions on English-language cybercriminal forums: A stagnant competition model?
May 5, 2020 | 9 Min Read
ShadowTalk Update – Microsoft Teams ATO Vulnerability, APT32, & Uptick In Ransomware
May 1, 2020 | 3 Min Read
Charitable Endeavors on Cybercriminal Forums
April 28, 2020 | 12 Min Read
ShadowTalk Update – Maze Ransomware Infiltrates Cognizant, Czech NCISA Warning, And Third Party Risk Assessment
April 27, 2020 | 3 Min Read
Nulled: The modern cybercriminal forum to go mobile….?
April 22, 2020 | 9 Min Read
What ‘The Wire’ can teach us about cybersecurity
April 21, 2020 | 12 Min Read
ShadowTalk Update – SFO Airport Hack, Fin6, And Sodinokibi Switching From Bitcoin To Monero
April 20, 2020 | 2 Min Read
Zoom Security and Privacy Issues: Week in Review
April 17, 2020 | 10 Min Read
Top Priorities for 3rd party risk assessments
April 16, 2020 | 6 Min Read
COVID-19, Remote Working, and The Future of Cyber Security
April 15, 2020 | 6 Min Read
ShadowTalk Update – COVID-19 Third Party App Risks, Zoom, and DarkHotel Hackers
April 13, 2020 | 3 Min Read
How to minimize cybersecurity breaches in 2020
April 8, 2020 | 9 Min Read
COVID-19: Risks of Third-Party Apps
April 7, 2020 | 7 Min Read
ShadowTalk Update – Zoom Zero-Day Vulnerabilities and Fin7 Delivering Malware Via Snail Mail
April 6, 2020 | 2 Min Read
Recon: Dark web reconnaissance made to look easy
April 3, 2020 | 4 Min Read
Coronavirus as a double-edged sword for cybercriminals: Desperation or opportunity?
April 2, 2020 | 9 Min Read
The Digital Risk Underdog: Remediation
April 1, 2020 | 4 Min Read
COVID-19: Third-party risks to businesses
March 31, 2020 | 5 Min Read
ShadowTalk Update – Remote Worker Threat Model And Cybercrime Updates
March 30, 2020 | 2 Min Read
COVID-19: Companies and Verticals At Risk For Cyber Attacks
March 26, 2020 | 8 Min Read
Threat Model of a Remote Worker
March 25, 2020 | 7 Min Read
Kapusta.World: The fiendish cabbage exemplifying cybercriminal marketing in the modern era
March 24, 2020 | 8 Min Read
ShadowTalk Update – Slack Vulnerability, Apollon Dark Web Exit Scam, And Online Brand Protection
March 23, 2020 | 3 Min Read
COVID-19: Dark Web Reactions
March 19, 2020 | 5 Min Read
The Complete Guide to Online Brand Protection
March 18, 2020 | 17 Min Read
Apollon Dark Web Marketplace: Exit Scams and DDoS Campaigns
March 17, 2020 | 8 Min Read
ShadowTalk Update – Necurs Botnet, SMB Vulnerability, Coronavirus Scams, And Dark Web Updates
March 16, 2020 | 2 Min Read
How cybercriminals are taking advantage of COVID-19: Scams, fraud, and misinformation
March 12, 2020 | 9 Min Read
Love Where You Work – Near and Far We Celebrate Our Team
March 12, 2020 | 6 Min Read
How One Cybercriminal Forum is Helping to Address Suicide Awareness
March 10, 2020 | 4 Min Read
ShadowTalk Update – Banking Trojan Steals Google Authenticator Codes, Ransomware Attacks Epiq, And Tesco Clubcard Fraud
March 9, 2020 | 2 Min Read
Dark Web Search Engine Kilos: Tipping the Scales in Favor of Cybercrime
March 5, 2020 | 7 Min Read
Want to Control Your Ever-Changing Perimeter? Focus on Integrations.
March 4, 2020 | 5 Min Read
FBI IC3 2019: Cybercrime results in over $3.5 billion in reported losses
March 3, 2020 | 8 Min Read
ShadowTalk Update – Data Breaches, Stalkerware, and Dopplepaymer ransomware
March 2, 2020 | 2 Min Read
Mapping MITRE ATT&CK to the Equifax Indictment
February 24, 2020 | 6 Min Read
ShadowTalk Update – OurMine hacks FC Barcelona & Olympics twitter handles, Adsense email extortion, & phishing research
February 24, 2020 | 2 Min Read
The Ecosystem of Phishing: From Minnows to Marlins
February 20, 2020 | 31 Min Read
RSA Conference 2020: CISO Tips for Making the Most of Conference Sessions
February 19, 2020 | 5 Min Read
The evolving story of the Citrix ADC Vulnerability: Ears to the Ground
February 18, 2020 | 4 Min Read
Cybercriminal Forums on Valentine’s Day – A nice night to “Netflix and steal”…
February 17, 2020 | 6 Min Read
ShadowTalk Update – OurMine Hacks, Equifax Indictment, and SWIFT POC attack
February 17, 2020 | 2 Min Read
The Devil, the Details, and the Analysis of Competing Hypothesis
February 13, 2020 | 5 Min Read
ShadowTalk Update – CTI Frameworks, Wawa Breach Updates, APT34, and Coronavirus Phishing Scams
February 10, 2020 | 3 Min Read
The Iowa Caucus: Third-Party Apps Can Be Risky Business
February 6, 2020 | 7 Min Read
Red Team Blues: A 10 step security program for Windows Active Directory environments
February 6, 2020 | 9 Min Read
How to Operationalize Threat Intelligence: Actionability and Context
February 5, 2020 | 5 Min Read
Dark web travel agencies: Take a trip on the dark side
February 4, 2020 | 11 Min Read
ShadowTalk Update – SANS CTI Summit, Snake Ransomware, CacheOut, and Citrix Vuln Update
February 3, 2020 | 3 Min Read
Competitions on Russian-language cybercriminal forums: Sharing expertise or threat actor showboating?
January 30, 2020 | 9 Min Read
Cyber Threat Intelligence Frameworks: 5 Rules for Integrating These Frameworks
January 29, 2020 | 7 Min Read
SANS Cyber Threat Intelligence Summit 2020: A Recap
January 28, 2020 | 9 Min Read
ShadowTalk Update – Citrix Vulnerability, Microsoft Data Breach, and Telnet Credentials Published
January 27, 2020 | 3 Min Read
How Digital Shadows Helped Find and Remediate an Exposed Admin Password on Github
January 23, 2020 | 5 Min Read
Inside Digital Shadows: Davitt Potter Joins as Director of MSSP and Channels in the Americas
January 22, 2020 | 5 Min Read
How the Cybercriminal Underground Mirrors the Real World
January 21, 2020 | 7 Min Read
ShadowTalk Update – NSA Vulnerability Disclosure, Ransomware News, and Iran Updates
January 20, 2020 | 3 Min Read
Third Party Risk: 4 ways to manage your security ecosystem
January 16, 2020 | 5 Min Read
NSA Vulnerability Disclosure: Pros and Cons
January 15, 2020 | 5 Min Read
CVE-2019-19781: Analyzing the Exploit
January 14, 2020 | 4 Min Read
Cryptonite: Ransomware’s answer to Superman…
January 14, 2020 | 4 Min Read
Iran and the United States – start of the long war or return to normal?
January 13, 2020 | 9 Min Read
ShadowTalk Update – Iranian Cyber Threats, Travelex Ransomware Attack, and Exploit Forum updates
January 10, 2020 | 3 Min Read
Iranian APT Groups’ Tradecraft Styles: Using Mitre ATT&CK™ and the ASD Essential 8
January 7, 2020 | 6 Min Read
Iran and Soleimani: Monitoring the Situation
January 7, 2020 | 9 Min Read
Iranian Cyber Threats: Practical Advice for Security Professionals
January 6, 2020 | 8 Min Read
ShadowTalk Update – Jingle Bell Ryuk: NOLA Ransomware, Ring Doorbells, and 2020 Predictions
December 23, 2019 | 3 Min Read
Top Security Blogs of 2019 from Digital Shadows
December 20, 2019 | 4 Min Read
The Closure of Market.ms: A Cybercriminal Marketplace Ahead of Its Time
December 18, 2019 | 9 Min Read
2020 Cybersecurity Forecasts: 5 trends and predictions for the new year
December 18, 2019 | 10 Min Read
Forums are Forever – Part 3: From Runet with Love
December 17, 2019 | 24 Min Read
ShadowTalk Update – Tochka Dark Web Market Offline, Market.ms Closes, and Data Leakage Stories
December 16, 2019 | 3 Min Read
Threat Intelligence: A Deep Dive
December 12, 2019 | 21 Min Read
Forums are Forever – Part 2: Shaken, but not Stirred
December 10, 2019 | 5 Min Read
ShadowTalk Update – Cybercriminal Forum Research, Mixcloud Breach, and International Crackdown on RAT Spyware
December 9, 2019 | 3 Min Read
A Threat Intelligence Analyst’s Guide to Today’s Sources of Bias
December 5, 2019 | 9 Min Read
Forums are Forever – Part 1: Cybercrime Never Dies
December 4, 2019 | 10 Min Read
2.3 billion files exposed across online file storage technologies
December 3, 2019 | 17 Min Read
ShadowTalk Update – RIPlace, Trickbot, and Russian-language forum Probiv
December 2, 2019 | 3 Min Read
Asset Inventory Management: Difficult But Essential
November 27, 2019 | 4 Min Read
Probiv: The missing pieces to a cybercriminal’s puzzle
November 26, 2019 | 10 Min Read
ShadowTalk Update – Black Friday Deals on the Dark Web, Phineas Fisher Manifesto, and DarkMarket
November 25, 2019 | 3 Min Read
Black Friday Deals on the Dark Web: A cybercriminal shopper’s paradise
November 21, 2019 | 10 Min Read
DarkMarket’s Feminist Flight Towards Equality and the Curious Case of Canaries
November 19, 2019 | 4 Min Read
BSidesDFW 2019: OSINT Workshop Recap
November 18, 2019 | 5 Min Read
ShadowTalk Update – BSidesDFW Recap, Dynamic CVV Analysis, and the Facebook Camera Bug
November 18, 2019 | 3 Min Read
VoIP security concerns: Here to stay, here to exploit
November 14, 2019 | 4 Min Read
Dynamic CVVs: 2FA 2Furious
November 12, 2019 | 5 Min Read
ShadowTalk Update – BlueKeep Attacks, Megacortex Ransomware, and Web.com Breach
November 11, 2019 | 3 Min Read
Combatting Domain-Centric Fraud: Why Mimecast is partnering with Digital Shadows
November 7, 2019 | 3 Min Read
ShadowTalk Update – Avast Breach Attempt, NordVPN Breach, and Wifi Security Risks
November 4, 2019 | 4 Min Read
Understanding the Different Cybercriminal Platforms: AVCs, Marketplaces, and Forums
October 31, 2019 | 6 Min Read
Cybercriminal credit card stores: Is Brian out of the club?
October 31, 2019 | 8 Min Read
Your Cyber Security Career – Press start to begin
October 30, 2019 | 13 Min Read
Australia Cyber Threat Landscape report (H1 2019)
October 29, 2019 | 5 Min Read
ShadowTalk Update – Avast Breach Attempt, NordVPN Breach, and Wifi Security Risks
October 25, 2019 | 3 Min Read
Understanding the Consequences of Data Leakage through History
October 24, 2019 | 4 Min Read
WiFi Security: Dispelling myths of using public networks
October 23, 2019 | 9 Min Read
Japan Cyber Threat Landscape report (H1 2019)
October 22, 2019 | 5 Min Read
ShadowTalk Update – Typosquatting and the 2020 U.S. Election, Honeypots, And Sudo Vulnerability
October 18, 2019 | 3 Min Read
Honeypots: Tracking Attacks Against Misconfigured or Exposed Services
October 17, 2019 | 9 Min Read
Typosquatting and the 2020 U.S. Presidential election: Cyberspace as the new political battleground
October 16, 2019 | 15 Min Read
Cybercriminal Forum Developments: Escrow Services
October 15, 2019 | 5 Min Read
ShadowTalk Update – Iran-linked APT35, Skimming by Magecart 4, Rancour, and Emotet Resurgence
October 11, 2019 | 3 Min Read
ANU Breach Report: Mapping to Mitre ATT&CK Framework
October 11, 2019 | 14 Min Read
Dark Web Overdrive: The Criminal Marketplace Understood Through Cyberpunk Fiction
October 9, 2019 | 5 Min Read
ShadowTalk Update – Magecart Five Widens Attack Vectors, Suspected Chinese Threat Actor Targets Airbus Suppliers, and Tortoiseshell Developments
October 4, 2019 | 3 Min Read
Top Threat Intelligence Podcasts to Add to Your Playlist
October 3, 2019 | 4 Min Read
Domain Squatting: The Phisher-man’s Friend
October 1, 2019 | 8 Min Read
ShadowTalk Update – Tortoiseshell Targets IT Providers, the Tyurin Indictment, and Emotet’s Return
September 27, 2019 | 4 Min Read
Singapore Cyber Threat Landscape report (H1 2019)
September 26, 2019 | 7 Min Read
Mapping the Tyurin Indictment to the Mitre ATT&CK™ framework
September 25, 2019 | 7 Min Read
DevSecOps: Continued Database Exposures Point to Growing Challenges
September 24, 2019 | 5 Min Read
ShadowTalk Update – Universities still attracting espionage from Iran, SimJacker exploit, NCSC Threat Trends, and Ransomware Updates
September 20, 2019 | 4 Min Read
Nemty Ransomware: Slow and Steady Wins the Race?
September 19, 2019 | 3 Min Read
NCSC Cyber Threat Trends Report: Analysis of Attacks Across UK Industries
September 18, 2019 | 7 Min Read
Your Data at Risk: FBI Cyber Division Shares Top Emerging Cyber Threats to Your Enterprise
September 17, 2019 | 8 Min Read
ShadowTalk Update – Metasploit Project Publishes Exploit For Bluekeep, plus APT3 and Silence Cybercrime Group Updates
September 13, 2019 | 4 Min Read
Dark Web Monitoring: The Good, The Bad, and The Ugly
September 11, 2019 | 20 Min Read
Mapping the NIST Cybersecurity Framework to SearchLight: Eating our own BBQ
September 10, 2019 | 2 Min Read
ShadowTalk Update – Ryuk Ransomware, Twitter rids SMS tweets, and Facebook Records Exposed
September 9, 2019 | 3 Min Read
Envoy on a Mission to Bring Stability to the Criminal Underground
September 4, 2019 | 3 Min Read
ShadowTalk Update – More Sodinokibi Activity, Imperva Breach, and Weirdest Food at the Texas State Fair
September 2, 2019 | 3 Min Read
Emotet Returns: How To Track Its Updates
August 26, 2019 | 5 Min Read
ShadowTalk Update – Texas Ransomware Outbreaks and Phishing Attacks Using Custom 404 pages
August 23, 2019 | 3 Min Read
Breach! An Analysis of the Modern Digital Breach, with Cyber Defense Lab’s CEO, Bob Anderson
August 22, 2019 | 8 Min Read
The Nouns of Black Hat: People, Places, and Things From Summer Camp 2019
August 19, 2019 | 6 Min Read
Black Hat and DEFCON 2019 – Some of our Favorite Sessions
August 19, 2019 | 9 Min Read
ShadowTalk Update – Nightmare Market in Disarray and SEC Investigation into Data Leak at First American Financial Corp
August 16, 2019 | 3 Min Read
Fresh blow for dark web markets: Nightmare market in disarray
August 13, 2019 | 5 Min Read
Recon Village: Panning for gold
August 1, 2019 | 7 Min Read
Capital One Breach: What we know and what you can do
July 31, 2019 | 5 Min Read
The Account Takeover Kill Chain: A Five Step Analysis
July 30, 2019 | 17 Min Read
ShadowTalk Update – More BlueKeep updates, FSB contractor hacked, and the Enigma Market
July 29, 2019 | 3 Min Read
Surviving and Thriving at Blackhat and DEF CON Summer Camp 2019
July 24, 2019 | 4 Min Read
SearchLight’s Biggest Ever Update: New Ways to Discover, Contextualize, and Prioritize Digital Risks
July 23, 2019 | 6 Min Read
A Growing Enigma: New AVC on the Block
July 19, 2019 | 3 Min Read
ShadowTalk Update – Marriott Faces GDPR Fines, TA505 Global Attacks, Zoom 0-Day, and New Magecart Activity
July 12, 2019 | 3 Min Read
Harnessing Exposed Data to Enhance Cyber Intelligence
July 11, 2019 | 7 Min Read
Welcoming NAB Ventures & Scaling SearchLight for Growth
July 9, 2019 | 2 Min Read
Extortion, Sale, Reconnaissance, & Impersonation: 4 Ways Your Digital Footprint Enables Attackers
July 2, 2019 | 6 Min Read
ShadowTalk Update – Operation Soft Cell, Libra Cryptocurrency Impersonations, and New Cyber Espionage Activity
June 28, 2019 | 4 Min Read
Facebook’s Libra Cryptocurrency: Cybercriminals tipping the scales in their favor
June 27, 2019 | 8 Min Read
ShadowTalk Update – Google Calendar Phishing, Exim Email Server Vulnerability, and Diversity in Cybersecurity
June 24, 2019 | 3 Min Read
Leaky SMB File Shares – So Many Bytes!
June 19, 2019 | 5 Min Read
Managing Digital Risk: 4 Steps to Take
June 18, 2019 | 9 Min Read
ShadowTalk Update – XMRig Cryptocurrency Mining, FIN8 Backdoor, and Attacks Against Office 365
June 17, 2019 | 3 Min Read
Managing Infosec Burnout: The Hidden Perpetrator
June 10, 2019 | 8 Min Read
ShadowTalk Update – “HiddenWasp” and “BlackSquid” malware, TA505 and Turla actvity, and Too Much Information:The Sequel
June 7, 2019 | 3 Min Read
BlueKeep: Cutting through the hype to prepare your organization
May 24, 2019 | 8 Min Read
Automating 2FA phishing and post-phishing looting with Muraena and Necrobrowser
May 21, 2019 | 6 Min Read
Partnering with SecureLink to help organizations minimize their digital risk
May 15, 2019 | 3 Min Read
Mapping Iran’s Rana Institute to MITRE Pre-ATT&CK™ and ATT&CK™
May 15, 2019 | 15 Min Read
Cyber Talent Gap: How to Do More With Less
May 14, 2019 | 5 Min Read
ShadowTalk Update – 5.06.19
May 13, 2019 | 4 Min Read
Enabling Soi Dog’s Digital Transformation: A Case Study
May 8, 2019 | 3 Min Read
Announcing Digital Shadows’ ISO27001 certification
May 7, 2019 | 2 Min Read
ShadowTalk Update – 5.06.19
May 6, 2019 | 3 Min Read
ShadowTalk Update – 4.29.19
April 29, 2019 | 3 Min Read
FBI IC3: Cybercrime Surges in 2018, Causing $2.7 Billion in Losses
April 23, 2019 | 4 Min Read
ShadowTalk Update – 4.22.19
April 22, 2019 | 3 Min Read
ShadowTalk Update – 4.15.19
April 15, 2019 | 4 Min Read