We provide technology that empowers organizations to reimagine their security & protect what matters #SaaS #RiskManagement #CyberThreatIntelligence
Los Angeles, California
Joined July 2016
- Tweets1.3K
- Following1.5K
- Followers5.1K
- Likes1.9K
Resecurity® retweeted
@RESecurity joins Space Information Sharing and Analysis Center, strengthening cyber threat intelligence sharing across global space sector
thedefensepost.com/2026/08/0…
Resecurity® retweeted
INC Ransomware is actively chaining two SonicWall SMA 1000 zero-days to gain root access, according to @RESecurity. If your appliances are internet-facing, investigate, re-image, and re-enroll MFA. #cybersecurity #infosec #CISO #ransomware bit.ly/4wbsvNo
Resecurity® retweeted
Resecurity expands threat intelligence integration ecosystem with IBM QRadar - helpnetsecurity.com/2026/07/… - @RESecurity @IBM #ThreatIntelligence #Cybersecurity #CybersecurityNews
Resecurity® retweeted
@RESecurity flags uptick in reconnaissance activity by foreign adversaries probing national AI infrastructure worldwide
thedefensepost.com/2026/07/1…
Resecurity® retweeted
Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282) - helpnetsecurity.com/2026/07/… - @Adobe @watchtowrcyber @RESecurity @Shadowserver #Exploit #PoC #Vulnerablity #Cybersecurity #CybersecurityNews
Resecurity® retweeted
@RESecurity warns port authorities and maritime operators face growing risk of cyber attacks
thedefensepost.com/2026/06/2…
Resecurity is the first to uncover the SRG's Fast Flux network infrastructure and is sharing this intelligence with the #cybersecurity community to disrupt their malicious activities and enable ISP/DNS providers to counter this threat. resecurity.com/blog/article/…
Resecurity is the first to uncover the SRG's Fast Flux network infrastructure and is sharing this intelligence with the #cybersecurity community to disrupt their malicious activities and enable ISP/DNS providers to counter this threat. resecurity.com/blog/article/…
New #ransomware projects have been identified that could be linked to the Silent Ransom Group (SRG), including Spy Corporate, which emerged in May 2026. Fast Flux provides the SRG with resilient infrastructure to extort AmLaw 100 firms. Overlap in DNS/IP - Learn More: resecurity.com/blog/article/…
Fast Flux provides the SRG with resilient infrastructure to extort victims. The @FBI recently issued an advisory about this #ransomware group, which is actively targeting top AmLaw 100 firms (and other industries) through social engineering and in-person attacks. ic3.gov/CSA/2026/260526.pdf
The nodes are compromised IoTs and Customer Premises Equipment (CPE) — such as routers, modems, and gateways.
Resecurity identified an interesting group of domains mapped to the same IP(s) with references to Wi-Fi (likely involved in the rotation of residential IPs):
- wifi[.]business-data-leaks[.]com
- hotspot[.]mywebb[.]at
- airwave[.]mywebb[.]at
- meraki[.]mywebb[.]at
- wifi[.]mywebb[.]at
The #fastflux nodes were identified in Latin America (Brazil, Mexico, Argentina, Ecuador, Colombia, Bolivia, Costa Rica, Peru, Panama), Eastern Europe (Bulgaria, Croatia, North Macedonia), Central Asia (Uzbekistan, Kyrgyzstan), Middle East/Africa (Egypt, Saudi Arabia, Tunisia), East Asia (South Korea), and Caribbean (Jamaica, Dominican Republic).
DNS Fast Flux, an evasion technique used by #cybercriminals to hide servers behind a rotating network of compromised devices (often a botnet) acting as proxies. By changing the #DNS records and using short Time-To-Live (TTL) values, attackers make their malicious infrastructure resilient against takedowns.
Resecurity is the first to uncover the SRG's Fast Flux network infrastructure and is sharing this intelligence with the #cybersecurity community to disrupt their malicious activities and enable ISP/DNS providers to counter this threat. resecurity.com/blog/article/…
Resecurity collaborated with @MicrosoftDCU to help better understand how Fox Tempest operated. Microsoft also noted coordination with @Europol’s European Cybercrime Centre (EC3) and the @FBI, underscoring the importance of public-private collaboration in disrupting #cybercrime infrastructure. microsoft.com/en-us/security…
On May 19, 2026, @Microsoft unsealed a legal case in the U.S. District Court for the Southern District of New York targeting Fox Tempest, a #cybercrime service that abused Microsoft Artifact Signing to obtain fraudulent code-signing certificates. blogs.microsoft.com/on-the-i…
Resecurity supported @MicrosoftDCU in its disruption of Fox Tempest, a financially motivated threat actor operating a malware-signing-as-a-service (MSaaS) capability used by #cybercriminals to make malicious files appear legitimate. resecurity.com/press/article…
GEOINT in the Iran War: Targeting, Intelligence, and the Battle for Information thedefensepost.com/2026/04/1… via @defensepost