Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Callum Roxan
BrazenBamboo Weaponizes FortiClient Vulnerability to Steal VPN Credentials via DEEPDATA
BrazenBamboo Weaponizes FortiClient Vulnerability to Steal VPN Credentials via DEEPDATA KEY TAKEAWAYS Volexity discovered and reported a vulnerability in Fortinet's Windows VPN client, FortiClient, where user credentials remain in process memory after a user authenticates to the VPN. This vulnerability was abused by BrazenBamboo in their DEEPDATA malware. BrazenBamboo is the threat actor behind development of the LIGHTSPY malware family.
CharmingCypress: Innovating Persistence
CharmingCypress: Innovating Persistence Through its managed security services offerings, Volexity routinely identifies spear-phishing campaigns targeting its customers. One persistent threat actor, whose campaigns Volexity frequently observes, is the Iranian-origin threat actor CharmingCypress (aka Charming Kitten, APT42, TA453).
EvilBamboo Targets Mobile Devices in Multi-year Campaign
EvilBamboo Targets Mobile Devices in Multi-year Campaign Volexity has identified several long-running and currently active campaigns undertaken by the threat actor Volexity tracks as EvilBamboo (formerly named Evil Eye) targeting Tibetan, Uyghur, and Taiwanese individuals and organizations. These targets represent three of the Five Poisonous Groups of Chinese Communist Party (CCP).
3CX Supply Chain Compromise Leads to ICONIC Incident
3CX Supply Chain Compromise Leads to ICONIC Incident by Ankur Saini, Callum Roxan, Charlie Gardner, Paul Rascagneres, Steven Adair, Thomas Lancaster On Wednesday, March 29, 2023, Volexity became aware of a supply chain compromise by a suspected North Korean threat actor, which Volexity tracks as UTA0040*. Endpoints with the 3CX Desktop application installed received a malicious update of this software that was signed by 3CX and downloaded from their servers.
Expert Reaction On Microsoft Disables Office Doc Macros
The implications of turning Macros off by default is a huge win for security as it significantly reduces the potential victim scope of macro-based attacks for cybercriminals. In the past, we relied heavily on users to make security decisions on macros with a warning - this can potentially reduce the risks from curious employees who may just accept the warning and run the macro that could result in stolen credentials or a fully compromised machine. The issue lies in how quickly organizations .....
Zero Trust: Essential in the Modern World vs. Unrealistic and Too Expensive
Sign Up Get up-to-the-minute news and opinions, plus access to a wide assortment of Information Security resources that will keep you current and informed.
F-Secure comment: MI5 warns of spies targeting British officials through LinkedIn
F-Secure comment: MI5 warns of spies targeting British officials through LinkedIn April 2021 by Callum Roxan, head of threat intelligence, F-Secure Following the news around MI5 warning 10,000 British officials had been targeted by spies through LinkedIn - Callum Roxan, head of threat intelligence, F-Secure offers the following comment: "It is no surprise that attackers continue to use online platforms such as LinkedIn to socially engineer individuals.
Does your institution have operational resilience? Testing cyber resilience may be a good way to find out
By Wim Stoop, CDP Customer and Product Director, Cloudera Despite the wave of changes that Brexit has brought financial organisations, from the end of ‘passporting’ to uncertainty over the longer-term equivalence rules, one thing has remained a constant — data privacy regulations are a core responsibility to protect sensitive data and mitigate data breaches.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Callum
Contact Callum, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack