Resources

All official content published by AI SPERA is gathered in one place. From product updates to reports and case studies, you can explore it all here.

January 8, 2025

What is Attack Surface Management (ASM)?

Due to the widespread digital transformation through cloud adoption and remote work, the attack surface targeting the cybersecurity of businesses and organizations (hereafter referred to as ‘businesses’) is growing daily. Attack Surface Management (ASM) is a cybersecurity…

Blog
What is Attack Surface Management (ASM)?

January 7, 2025

Securing Prometheus Instances: Mitigating Risks from an Expanded Attack Surface

Prometheus, an open-source monitoring and alerting toolkit, is widely used by organizations for its robust functionalities. However, improperly secured Prometheus instances exposed to the internet pose significant security risks. According to Criminal IP’s findings,…

Blog
Securing Prometheus Instances: Mitigating Risks from an Expanded Attack Surface

December 26, 2024

Detecting Vulnerable Versions Targeted by Palo Alto PAN-OS Exploits via Attack Surface-Based TI

A month ago, two critical vulnerabilities were identified in Palo Alto Networks’ (hereafter referred to as Palo Alto) PAN-OS: an authentication bypass vulnerability, CVE-2024-0012, and a privilege escalation vulnerability, CVE-2024-9474. These vulnerabilities allow attackers to…

Notice
Detecting Vulnerable Versions Targeted by Palo Alto PAN-OS Exploits via Attack Surface-Based TI

December 24, 2024

[Young Yoon, CEO of ExploitWareLabs] Criminal IP vs. Shodan: A Comparative Analysis of CVE Data

In the rapidly evolving digital landscape, platforms like Criminal IP and Shodan are gaining attention for their ability to identify and respond to network and system vulnerabilities proactively. Criminal IP is a cyber threat intelligence platform that collects and analyzes…

Blog
[Young Yoon, CEO of ExploitWareLabs] Criminal IP vs. Shodan: A Comparative Analysis of CVE Data

December 19, 2024

[Criminal IP v1.70.0] 2024-12-19 Release Note

An update to Criminal IP v1.70.0 has been released. [Criminal IP v1.70.0] Regular Maintenance and Update Release Maintenance Period: 2024.12.19 05:00~10:00 AM (UTC) [Improvement] Improved File Exposure Logic in Domain Search he File Exposure functionality in the Domain Scan…

Release Note
[Criminal IP v1.70.0] 2024-12-19 Release Note

December 19, 2024

Open-Source Intelligence (OSINT): Publicly Accessible Open Data

Open-source intelligence (OSINT) refers to the sum of information collected from publicly available sources that anyone can access. The use of OSINT in identifying and analyzing cyber threats enables preemptive and flexible responses to today’s volatile business environment. Key…

Blog
Open-Source Intelligence (OSINT): Publicly Accessible Open Data

December 12, 2024

Critical CleanTalk Vulnerabilities: How to Protect Your WordPress Site

Two critical vulnerabilities discovered in CleanTalk, a plugin installed on over 200,000 websites, put nearly 50% of these sites at risk. The identified vulnerabilities—CVE-2024-10542 and CVE-2024-10781—allow unauthorized attackers to remotely execute arbitrary code, potentially…

Notice
Critical CleanTalk Vulnerabilities: How to Protect Your WordPress Site

December 10, 2024

Outlook: Detecting and Blocking Phishing Emails in Real-Time

With the advent of generative AI, phishing email attacks have become increasingly intricate, posing significant threats to individuals and organizations. This article explores how to proactively prevent evolving phishing emails using the Criminal IP Malicious Link Detector…

Notice
Outlook: Detecting and Blocking Phishing Emails in Real-Time

December 5, 2024

[Criminal IP v1.69.0] Regular Maintenance and Update Release

An update to Criminal IP v1.69.0 has been released. [Criminal IP v1.69.0] Regular Maintenance and Update Release Maintenance Period: 2024.12.05 05:00~10:00 AM (UTC) [New Changes] Link Copy Function Added to Domain Search DOM Feature A new feature has been added to the DOM…

Notice
[Criminal IP v1.69.0] Regular Maintenance and Update Release

November 29, 2024

Scheduled Service Maintenance Notice for December 5, 2024

Dear Customers, Thank you for using Criminal IP. We would like to inform you in advance about the scheduled service maintenance that will take place on Thursday, December 5, 2024.During this time, certain pages and features of Criminal IP will be temporarily unavailable. We…

Notice
Scheduled Service Maintenance Notice for December 5, 2024

November 25, 2024

TAG-112: Chinese-Backed Hackers Target Tibetan Websites, Distributing Cobalt Strike Malware

A state-sponsored hacker group in China, known as TAG-112, has been found attacking two Tibetan community websites to distribute Cobalt Strike malware. TAG-112 infiltrated the websites of Gyudmed Tantric University and Tibet Post, a Tibetan media advocating democracy and the…

Blog
TAG-112: Chinese-Backed Hackers Target Tibetan Websites, Distributing Cobalt Strike Malware

November 22, 2024

[Criminal IP v1.68.0] Regular Maintenance and Update Release

An update to Criminal IP v1.68.0 has been released. [Criminal IP v1.68.0] Regular Maintenance and Update Release Maintenance Period: 2024.11.21 05:00~10:00 AM (UTC) [Improvements] Vulnerability CVE Page Data Sort Order Change The data sort order on the CVE page of the…

Notice
[Criminal IP v1.68.0] Regular Maintenance and Update Release

Business Customer Reports

Experienced any inconvenience?

Let us know right away.

Contact US

Join AI SPERA

Be part of the AI SPERA journey.

Contact US