Ongoing Targeted Campaign Against US Law Firms | Google Cloud Blog
… Beginning around March 2025, the cluster shifted tactics to pose as internal corporate IT helpdesk staff. …
Search
Mitigation Guidance for Supply Chain Compromise | Google Cloud Blog
… Use allow-list-only firewall rules to block unauthorized outbound traffic and disrupt command-and-control C2 activities. …
ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit | Google Cloud Blog
… Network Telemetry Outbound Port 445 Monitoring: Monitor outbound firewall logs and NetFlow data for outbound SMB traffic TCP port 445 originating from PeopleSoft hosts to untrusted, external internet destinations. …