Business Email Compromise (BEC) attacks continue to escalate, with reported losses reaching $2.9 billion in 2023 alone, according to the FBI Internet Crime Report. When an incident happens, incident responders are under immediate pressure to determine:
Imagine receiving an email that looks like it's from your CEO, asking for an urgent transfer of funds or confidential information. You follow the instructions, only to realize later that the email was a cleverly disguised fraud.
Detecting malware on a potentially infected system requires more than just waiting for alerts—it demands an investigative mindset. Proactive threat hunting and forensic analysis are crucial for uncovering hidden threats that may evade conventional detection.
The seemingly unending work to detect the silent workings of malware is a constant and stark reminder of the stakes in modern incident response. In one recent Incident Response (IR) engagement, the Binalyze CERT (Customer Experience Response Team) uncovered a prolonged campaign involving the well-known malware family AsyncRAT.
In late 2024, a wave of cyberattacks compromised several legitimate Chrome browser extensions, including Cyberhaven’s data loss prevention tool. Attackers injected malicious code into these extensions, turning them into tools for harvesting browser cookies and authentication tokens.
As we close the chapter on 2024, I’m filled with immense pride for what Binalyze has accomplished this year. This has been a year of transformation and recognition, marked by groundbreaking achievements, an evolving brand identity, and our inclusion in the emerging Cloud Investigation and Response Automation (CIRA) category identified by Gartner®.
Time is critical in cybersecurity. The faster your team can detect, investigate, and respond to threats, the less damage, expense, and reputational embarrassment is caused. Yet, as threat actors grow more sophisticated, security teams face an uphill battle, juggling growing data volumes and increasingly complex attack methods.
The recent warning from GCHQ that the UK is losing its edge in defending against cyber attackers is a crucial reminder for businesses and governments to prioritize resilience.
As the complexity and frequency of cyber threats escalate, organizations are recognizing the inadequacy of traditional security methods focused solely on prevention and detection. The new reality demands a shift—a pivot towards an "assume breach" mindset and proactive measures that go beyond detection to robust investigation and response.
We think this addition not only highlights the growing importance of Investigation and Response Automation but also cements Binalyze AIR as a pioneering force within this evolving category.
Binalyze AIR 4.25, packed with six new feature enhancements and fixes designed to streamline and automate your investigations and incident response workflows. These updates will improve task efficiency, increase flexibility, and provide more control over the investigation process.
We’re excited to announce the release of AIR v4.23! This version introduces powerful new features, including enhanced Windows Event Log support and other improvements such as, AIR’s File Explorer now supporting disk image mounting from Azure Blob storage.
