Resources

All official content published by AI SPERA is gathered in one place. From product updates to reports and case studies, you can explore it all here.

September 27, 2024

Attack Surface Management for Media Outlets: One in Four Possess CVE Vulnerabilities

This document provides a statistical analysis of the security inspection results on the attack surface management for media outlets, carried out for all media firms registered to the Publication Registration and Management System of the Ministry of Culture, Sports and Tourism…

Blog
Attack Surface Management for Media Outlets: One in Four Possess CVE Vulnerabilities

September 26, 2024

[Criminal IP v1.65.1] 2024-09-26 Release Note

An update to Criminal IP v1.65.1 has been released. [Criminal IP v1.65.1] Regular Maintenance and Update Release Note Maintenance Period: 2024.09.26 05:00~10:00 AM (UTC) [New Changes] New API Integration – IPLocation.io IPLocation.io is a free IP location lookup tool which…

Release Note
[Criminal IP v1.65.1] 2024-09-26 Release Note

September 26, 2024

CVE-2023-22527 Cryptojacking Attack Affects Over 1 Million Confluence Servers

According to a recent threat report from cybersecurity firm Trend Micro, there is a rise in cryptojacking attacks exploiting a critical vulnerability, CVE-2023-22527, in the global collaboration and documentation platform Atlassian Confluence. This vulnerability has a CVSS score…

Blog
CVE-2023-22527 Cryptojacking Attack Affects Over 1 Million Confluence Servers

September 25, 2024

How To Automate Firewall Policies to Block C2 IPs Using Criminal IP’s C2 Threat Feed

Manually configuring firewall policies without a C2 threat feed can be challenging, as it involves managing multiple rules simultaneously. Poor management can result in a pile of outdated rules, leading to indiscriminate traffic blocking and confusion about which rules should be…

Blog
How To Automate Firewall Policies to Block C2 IPs Using Criminal IP’s C2 Threat Feed

September 13, 2024

How To Prevent Internal Management System Exposure With OSINT Threat Intelligence

Criminal IP recently confirmed that the internal management system of a South Korean restaurant chain was exposed. The management system, which should be accessible only from within the organization, was exposed to the outside, allowing hackers to easily access internal systems.…

Notice
How To Prevent Internal Management System Exposure With OSINT Threat Intelligence

September 6, 2024

The Importance of Attack Surface Management Viewed Through NXDomain Hunter Subdomain Scanning Attacks

Recently, the Financial Security Institute (FSI) of South Korea released a detailed analysis report on a new cyber threat targeting financial institutions, called NXDomain Hunter. This hacking group focuses on identifying and exploiting systems with poor security and management…

Blog
The Importance of Attack Surface Management Viewed Through NXDomain Hunter Subdomain Scanning Attacks

September 5, 2024

[Criminal IP v1.64.1] 2024-09-05 Release Note

An update to Criminal IP v1.64.1 has been released. [Criminal IP v1.64.1] Regular Maintenance and Update Release Maintenance Period: 2024.09.05 05:00~10:00 AM (UTC) [New Changes] Update on PCI DSS 4.0 Level 1 Certification on the Pricing Page Criminal IP has obtained PCI DSS 4.0…

Notice
[Criminal IP v1.64.1] 2024-09-05 Release Note

September 4, 2024

CIP Half-year Report: Criminal IP in H1 2024

As of the first half of 2024, Criminal IP has reached its one-year anniversary of global official launch. This milestone marks a year of significant enhancements, including the addition of extensive new data, refined search functions, and successful integrations worldwide. We…

Notice
CIP Half-year Report: Criminal IP in H1 2024

September 2, 2024

Criminal IP Secures PCI DSS v4.0 Certification, Enhancing Payment Security with Top-Level Compliance

Criminal IP has achieved PCI DSS v4.0 certification for its flagship search engine solution, building on last year’s attainment of PCI DSS v3.2.1 (Payment Card Industry Data Security Standard) certification. This accomplishment represents a significant milestone in the company’s…

Notice
Criminal IP Secures PCI DSS v4.0 Certification, Enhancing Payment Security with Top-Level Compliance

August 23, 2024

[Criminal IP v1.63.1] 2024-08-22 Release Note

An update to Criminal IP v1.63.1 has been released. [Criminal IP v1.63.1] Regular Maintenance and Update Release Maintenance Period: 2024.08.22 05:00~10:00 AM (UTC) [New Changes] Improvements to Asset Search Results Data and UI A new feature allows users to view the full banner…

Notice
[Criminal IP v1.63.1] 2024-08-22 Release Note

August 22, 2024

CVE-2024-43044: A Critical RCE Vulnerability in Jenkins With 80,000 Exposed Devices Found

A critical security vulnerability, CVE-2024-43044, was recently discovered in Jenkins, an open-source automation tool. This serious flaw could lead to Remote Code Execution (RCE). In this article, we will explore how the CVE-2024-43044 vulnerability can be exploited, the devices…

Blog
CVE-2024-43044: A Critical RCE Vulnerability in Jenkins With 80,000 Exposed Devices Found

August 14, 2024

Multi-Stage Malware Attack Exploiting Bing Search Engine: Analyzing Attack IP Addresses and Domains with Threat Hunting Tools

A recent article by GBHackers reveals a new malware attack exploiting the Bing search engine. This multi-stage malware attack involves distributing malicious files, executing installers, connecting to C2 domains, and downloading and inserting backdoors to carry out attacks such…

Blog
Multi-Stage Malware Attack Exploiting Bing Search Engine: Analyzing Attack IP Addresses and Domains with Threat Hunting Tools

Business Customer Reports

Experienced any inconvenience?

Let us know right away.

Contact US

Join AI SPERA

Be part of the AI SPERA journey.

Contact US