Akira ransomware — Cybersecurity product profile
Akira ransomware was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
Category: Cyber Products
Cybersecurity products, tools, platforms and software categories.
Tailscale: VPN Service Used for Persistent Access
Tailscale is a VPN service that creates encrypted mesh networks. The Poisson operator used it to maintain persistent access to a compromised…
OpenSSH Server: Secure Shell Server Installed on Workstation
OpenSSH Server was installed on a Windows workstation by the attacker to enable key-based SSH access and reverse tunnels, providing a backdoor…
DuckDNS: Free Dynamic DNS Service
DuckDNS is a free dynamic DNS service used by the Poisson operator for C2 infrastructure, highlighting its abuse in low-cost cyber attacks.
Backblaze B2: Cloud Storage Service
Backblaze B2 is a cloud storage service used by the attacker for storing tools and data, part of the free-tier kit employed…
IONOS VPS: Cheap Virtual Private Server
IONOS VPS is a low-cost virtual private server hosting service used by the Poisson operator to host his C2 server in Berlin.
Microsoft Malware Protection Engine (mpengine.dll) Flaw
The Microsoft Malware Protection Engine (mpengine.dll) is the component affected by CVE-2026-50656 (RoguePlanet), a privilege escalation vulnerability.
Microsoft Teams Data Stored in Azure Cosmos DB Potentially Exposed
Microsoft Teams message data is stored in Azure Cosmos DB, making it potentially accessible through the CosmosEscape vulnerability. Wiz did not report…
DbgView64
DbgView64 is a legitimate Microsoft debugging tool that was used as a process injection target for Backdoor.Turn.
Reflectiz PCI DSS Platform: Agentless Script Monitoring for Compliance
The Reflectiz PCI DSS Platform is a security product designed to help merchants comply with PCI DSS v4.0.1 requirements 6.4.3 and 11.6.1.…