In this post, we ask a fundamental question: How vulnerable is Apple's on-device foundation language model? With the rollout of iOS 18, iPadOS 18, and macOS Sequoia, Apple's foundation model now runs by default on millions of devices, powering Apple Intelligence across platforms. Its security is paramount.

Data breaches in healthcare and biotech now result in operational, legal, and reputational damage with long-term consequences for business operations, legal standing, and public trust. Case studies from 23andMe and CrazyHunter show how missed warning signs can lead to collapse. This article provides guidance for CISOs and executives to lead a proactive defense rooted in early detection, regulatory readiness, and strategic resilience.

This article dives into a recent credit card data breach targeting a hybrid cloud-on-premises infrastructure, reconstructing the attack path and analyzing the malicious programs and techniques employed by the attackers.

This post discusses the definition of intelligence sources, their relationship with Cyber Threat Intelligence (CTI), how reliable intelligence sources assist organizations and communities in detecting and defending against threats, and how compromised intelligence sources can undermine the trust that organizations built over time.​

CyCraft's research team identified potential risks in Microsoft Entra ID's new features, which could be exploited for privilege escalation attacks. This article analyzes these potential attack paths and provides mitigation plans to proactively address them before any incidents occur.

Valentine’s Day this year saw the end of a truly toxic relationship — a prolonged supply chain attack targeting the Taiwan financial and securities trading sector that had begun back in November 2021. Evidence uncovered during a CyCraft incident response (IR) investigation ties these attacks to APT10 — a China state-sponsored hacker group widely believed to be associated with the Chinese Intelligence Agency, the Ministry of State Security (MSS).

CyCraft uncovered intelligence regarding the November 2021 cyberattacks targeting the Taiwan financial and securities trading sector; CyCraft further attributed the cyberattacks to APT10 — a China state-sponsored hacker group widely believed to be associated with the Chinese Intelligence Agency, the Ministry of State Security (MSS).

The road to constructing an effective novel response against ransomware begins with understanding the recent trends of the underground ransomware ecosystem: common targets of ransomware, typical ransomware behavior, common ransomware encryption schemes, as well as the construction and application of decryptors and other effective response approaches and tools.

PK Tsung, Co-Founder & CSO of CyCraft Technology, spoke at SEMICON TAIWAN on the dangers of, and the solutions to, four common pain points targeting electronics manufacturing, design supply chain, and other SEMI member-related industries.

Following the announcement of CVE-2021–4228, CyCraft issued an emergency advisory to all CyCraft Customers outlining mitigation best practices. This advisory was updated as additional related vulnerabilities came to light.

In a year of threat landscape defining vulnerabilities (ProxyLogon, Log4j) and supply chain attacks with never before seen blast radiuses (SolarWinds, Kaseya), one threat has been consistently booming in the most recent years, dominating much of the cybersecurity dialog in both 2020 and 2021 — ransomware.

A Compromise Assessment (CA) is a comprehensive, automated, evidence-based analysis and evaluation of an organization’s entire digital environment and cybersecurity posture and is designed to identify all ongoing and past incidents of unauthorized access, malicious activity, and indicators of compromise.