Latest news with #CyberCube
Yahoo
3 days ago
- Business
- Yahoo
Scattered Spider poses serious risk to several hundred major companies
This story was originally published on Cybersecurity Dive. To receive daily news and insights, subscribe to our free daily Cybersecurity Dive newsletter. The cybercrime group Scattered Spider's tactics put a group of roughly 300 major companies at heightened risk of attack, according to a new report from security firm CyberCube. The 287 firms represent approximately 2% of organizations with revenues above $500 million, according to CyberCube's analysis of more than 15,000 companies in key global markets. The analysis covers eight regions, including the U.S., the U.K., Canada, Australia, Germany, France, Japan and Singapore. Each company uses at least three technologies that Scattered Spider is known to target and has security conditions that are ripe for the group's attacks. 'The high-risk designation is primarily based on the presence of technologies Scattered Spider has exploited in past attacks,' William Altman, cyber threat intelligence lead at CyberCube, said via email. Scattered Spider has abused Microsoft Active Directory, Okta and multiple remote-management and help-desk tools. Since emerging in 2022, Scattered Spider has frequently used sophisticated voice phishing and other social-engineering methods to trick IT help desks into providing credentials or bypassing multifactor authentication. The group recently launched a new wave of attacks, first targeting American and British retailers in April, before switching to insurance companies in June and later airlines and other transportation companies. The hackers first achieved global prominence in 2023 after crippling attacks on the hospitality industry, including MGM Resorts in Las Vegas. CyberCube said that manufacturing, retail, education and IT are the sectors most at risk from the threat group. The company's report is designed to give some early guidance to the insurance sector about how to potentially mitigate risk. Recommended Reading Okta CEO pushes for passwordless future in wake of phishing attacks Error in retrieving data Sign in to access your portfolio Error in retrieving data Error in retrieving data Error in retrieving data Error in retrieving data
Business Wire
04-07-2025
- Business
- Business Wire
CyberCube Flags Sectors at Highest Risk for Scattered Spider Attacks
LONDON--(BUSINESS WIRE)--CyberCube, the global leader in cyber risk analytics, has identified Manufacturing, Education, IT, and Retail as the sectors most at risk of attacks from Scattered Spider, the versatile extortion crew behind the recent spate of high-profile hacks. Scattered Spider has evolved from a newly identified social‑engineering crew in 2022 into one of the most aggressive ransomware‑and‑extortion outfits on today's threat landscape. Since April this year, Scattered Spider has been moving swiftly across industries, leaving financial losses in its wake. The group has expanded its campaigns across seemingly unrelated sectors, including retail, insurance, and airlines, using sophisticated social engineering tactics such as help desk impersonation and authentication bypass to infiltrate high-value corporate networks. Cyber risk exposure managers can leverage CyberCube's Portfolio Threat Actor Intelligence (PTI) solution to pinpoint organizations in their portfolios most at risk of being targeted by Scattered Spider. CyberCube has analyzed a portfolio of approximately 15,000 companies from key global markets, segmenting them into risk tiers based on their exposure to Scattered Spider, specifically their technology footprint and observed security weaknesses. The analysis found that 2% of companies with revenues over $500 million across eight key cyber (re)insurance markets — USA, UK, Canada, Australia, Germany, France, Japan, and Singapore — face the highest likelihood of being targeted by Scattered Spider. CyberCube identified 287 high-risk companies (2%) that use three or more technologies frequently targeted by Scattered Spider, combined with security lapses the group is known to exploit. Notably, high-risk companies also tolerate security conditions that may allow the threat actor to complete critical steps across the attack lifecycle and ultimately achieve their objectives. Medium-risk companies (1,037, or 7%) use at least one of the group's preferred technologies and exhibit security weaknesses that could enable only partial progression through the attack lifecycle. In a blog published online, CyberCube has also provided an industry breakdown of the high-risk companies for potential Scattered Spider attacks. William Altman, Head of Cyber Threat Intelligence Services and blog author, said: 'CyberCube's analysis reveals both a current cluster of elevated risk in the market and a strategic opportunity for cyber (re)insurers to act preemptively by managing exposure and incentivizing better security before Scattered Spider strikes again. For portfolio managers, our findings reinforce the need to move beyond broad sector assumptions and focus on mapping technological and security posture overlaps across seemingly unrelated sectors and insureds.' Portfolio Threat Actor Intelligence (PTI) harnesses the power of Artificial Intelligence (AI) to map the behaviour of cyber threat actors and the technologies they most frequently target. It is included as part of the CyberCube Concierge Threat Intelligence service — a first-of-its-kind offering designed specifically for the unique needs of cyber (re)insurers, built by experts in cyber threat intelligence, risk, and insurance. CyberCube's blog can be found here: CyberCube: 2% of Large Firms at Highest Scattered Spider Risk. About CyberCube CyberCube is the leading provider of software-as-a-service cyber risk analytics to quantify cyber risk in financial terms. Driven by data and informed by insight, we have harnessed the power of artificial intelligence to supplement our multi-disciplinary team. Our clients rely on our solutions to make informed decisions about managing and transferring cyber risks. We unpack complex cyber threats into clear, actionable strategies, translating cyber risk into financial impact on businesses, markets, and society as a whole. The CyberCube platform was established in 2015 within Symantec and now operates as a standalone company. Our models are built on an unparalleled ecosystem of data and validated by extensive model calibration, internally and externally. CyberCube is the leader in cyber risk quantification for the insurance industry, serving over 100 insurance institutions globally. The company's investors include Forgepoint Capital, HSCM Bermuda and Morgan Stanley Tactical Value. For more information, please visit or email info@
Associated Press
19-05-2025
- Business
- Associated Press
CyberCube and Aviva Partner to Harness AI for Cyber Threat Actor Intelligence and Advanced Portfolio Risk Management
LONDON--(BUSINESS WIRE)--May 19, 2025-- CyberCube, a global leader in cyber risk analytics, and Aviva plc, a leading UK insurer, are harnessing the power of Artificial Intelligence (AI) to map the behaviour of cyber threat actors and the technologies they most frequently target. Utilising CyberCube's 'Portfolio Threat Actor Intelligence' service and its suite of cyber analytics software, the collaboration aims to strengthen Aviva's cyber exposure management strategy. By leveraging AI, specifically large language models (LLMs), to glean threat intelligence from extensive digital forensics data and data leaks tied to leading ransomware groups, Aviva has gained deep insights into how these threat actors operate and the tactics they use to execute attacks. With these insights, Aviva can pinpoint companies in its commercial portfolio that are most vulnerable to specific cyber threat actors, bringing a new level of precision and innovation to exposure management. Aviva is the first insurer to integrate 'Portfolio Threat Actor Intelligence' into its exposure management strategy on a recurring basis, marking a significant step in enhancing the company's threat-informed underwriting and portfolio oversight capabilities. James Mitchell, Senior Cyber Pricing and Exposure Manager, Aviva, said: 'As cyber-attacks continue to rise, including the targeting of high-profile organisations, it's crucial that businesses are properly protected. 'Over the past year, Aviva has rigorously tested Portfolio Threat Actor Intelligence against several ransomware groups. These threat actors were selected based on their relevance to Aviva's commercial portfolio - specifically their targeting preferences - and our ability to confidently map tactics, techniques, and procedures across the cyber kill chain. 'By incorporating this unique blend of cyber analytics and threat intelligence into current underwriting and exposure management processes, (re)insurers can gain deeper insights into their portfolios, enabling them to better manage cyber risk for both themselves and their customers. 'Customers identified as higher risk can then receive more tailored advice from (re)insurers. For instance, assisting customers with the selection of appropriate cybersecurity tabletop exercises that are specifically linked to the tactics of the higher-risk threat actors.' William Altman, Head of Cyber Threat Intelligence Services, CyberCube, said: 'Portfolio Threat Actor Intelligence is an innovative solution that takes the management of cyber insurance portfolio risk to the next level. Through this capability, CyberCube supports Aviva's Exposure Management team in identifying companies within its portfolio that display firmographic traits, technology dependencies, and security gaps likely to attract specific cyber threat actors.' Aviva will utilise Portfolio Threat Actor Intelligence on a quarterly basis, as part of creating a differentiated and more nuanced approach to portfolio risk management. This will help Aviva keep pace with the dynamic and fast-paced cyber threat landscape. CyberCube and Aviva regularly review threat intelligence to update threat actor kill chains and ensure analyses reflect the latest threats. Notes to Editors About CyberCube CyberCube is the leading provider of software-as-a-service cyber risk analytics to quantify cyber risk in financial terms. Driven by data and informed by insight, we have harnessed the power of artificial intelligence to supplement our multi-disciplinary team. Our clients rely on our solutions to make informed decisions about managing and transferring cyber risks. We unpack complex cyber threats into clear, actionable strategies, translating cyber risk into financial impact on businesses, markets, and society as a whole. The CyberCube platform was established in 2015 within Symantec and now operates as a standalone company. Our models are built on an unparalleled ecosystem of data and validated by extensive model calibration, internally and externally. CyberCube is the leader in cyber risk quantification for the insurance industry, serving over 100 insurance institutions globally. The company's investors include Forgepoint Capital, HSCM Bermuda and Morgan Stanley Tactical Value. For more information, please visit or email [email protected]. About Aviva View source version on CONTACT: For media enquiries, please contact: CyberCube: Yvette Essen, Head of Communications & Market Engagement,[email protected], +44 (0)7956 877 206 Aviva: Karmen Ivey, Senior Media Relations Manager, Global Corporate & Specialty,[email protected], +44 (0)7385 013 292 KEYWORD: CHINA INDIA NORTH AMERICA ASIA PACIFIC CANADA EUROPE IRELAND UNITED KINGDOM INDUSTRY KEYWORD: TECHNOLOGY INSURANCE FINANCE SECURITY FINTECH PROFESSIONAL SERVICES SOFTWARE DATA ANALYTICS DATA MANAGEMENT ARTIFICIAL INTELLIGENCE SOURCE: CyberCube Copyright Business Wire 2025. PUB: 05/19/2025 04:00 AM/DISC: 05/19/2025 04:01 AM
Yahoo
19-05-2025
- Business
- Yahoo
CyberCube and Aviva Partner to Harness AI for Cyber Threat Actor Intelligence and Advanced Portfolio Risk Management
LONDON, May 19, 2025--(BUSINESS WIRE)--CyberCube, a global leader in cyber risk analytics, and Aviva plc, a leading UK insurer, are harnessing the power of Artificial Intelligence (AI) to map the behaviour of cyber threat actors and the technologies they most frequently target. Utilising CyberCube's 'Portfolio Threat Actor Intelligence' service and its suite of cyber analytics software, the collaboration aims to strengthen Aviva's cyber exposure management strategy. By leveraging AI, specifically large language models (LLMs), to glean threat intelligence from extensive digital forensics data and data leaks tied to leading ransomware groups, Aviva has gained deep insights into how these threat actors operate and the tactics they use to execute attacks. With these insights, Aviva can pinpoint companies in its commercial portfolio that are most vulnerable to specific cyber threat actors, bringing a new level of precision and innovation to exposure management. Aviva is the first insurer to integrate 'Portfolio Threat Actor Intelligence' into its exposure management strategy on a recurring basis, marking a significant step in enhancing the company's threat-informed underwriting and portfolio oversight capabilities. James Mitchell, Senior Cyber Pricing and Exposure Manager, Aviva, said: "As cyber-attacks continue to rise, including the targeting of high-profile organisations, it's crucial that businesses are properly protected. "Over the past year, Aviva has rigorously tested Portfolio Threat Actor Intelligence against several ransomware groups. These threat actors were selected based on their relevance to Aviva's commercial portfolio - specifically their targeting preferences - and our ability to confidently map tactics, techniques, and procedures across the cyber kill chain. "By incorporating this unique blend of cyber analytics and threat intelligence into current underwriting and exposure management processes, (re)insurers can gain deeper insights into their portfolios, enabling them to better manage cyber risk for both themselves and their customers. "Customers identified as higher risk can then receive more tailored advice from (re)insurers. For instance, assisting customers with the selection of appropriate cybersecurity tabletop exercises that are specifically linked to the tactics of the higher-risk threat actors." William Altman, Head of Cyber Threat Intelligence Services, CyberCube, said: "Portfolio Threat Actor Intelligence is an innovative solution that takes the management of cyber insurance portfolio risk to the next level. Through this capability, CyberCube supports Aviva's Exposure Management team in identifying companies within its portfolio that display firmographic traits, technology dependencies, and security gaps likely to attract specific cyber threat actors." Aviva will utilise Portfolio Threat Actor Intelligence on a quarterly basis, as part of creating a differentiated and more nuanced approach to portfolio risk management. This will help Aviva keep pace with the dynamic and fast-paced cyber threat landscape. CyberCube and Aviva regularly review threat intelligence to update threat actor kill chains and ensure analyses reflect the latest threats. Notes to Editors Portfolio Threat Actor Intelligence is included as part of the CyberCube Concierge Threat Intelligence service. Concierge is a first-of-its-kind offering designed specifically for the unique needs of cyber (re)insurers, built by experts in cyber risk and insurance. Definitions: Cybersecurity tabletop exercise – a role play exercise where stakeholders in a business react to a fictional cyberattack. About CyberCube CyberCube is the leading provider of software-as-a-service cyber risk analytics to quantify cyber risk in financial terms. Driven by data and informed by insight, we have harnessed the power of artificial intelligence to supplement our multi-disciplinary team. Our clients rely on our solutions to make informed decisions about managing and transferring cyber risks. We unpack complex cyber threats into clear, actionable strategies, translating cyber risk into financial impact on businesses, markets, and society as a whole. The CyberCube platform was established in 2015 within Symantec and now operates as a standalone company. Our models are built on an unparalleled ecosystem of data and validated by extensive model calibration, internally and externally. CyberCube is the leader in cyber risk quantification for the insurance industry, serving over 100 insurance institutions globally. The company's investors include Forgepoint Capital, HSCM Bermuda and Morgan Stanley Tactical Value. For more information, please visit or email info@ About Aviva We are the UK's leading diversified insurer and we operate in the UK, Ireland and Canada. We also have international investments in India and China. We help our 20.5 million customers make the most out of life, plan for the future, and have the confidence that if things go wrong we'll be there to put it right. We have been taking care of people for more than 325 years, in line with our purpose of being 'with you today, for a better tomorrow'. In 2024, we paid £29.3 billion in claims and benefits to our customers. In 2021, we announced our ambition to become Net Zero by 2040, the first major insurance company in the world to do so. While we are working towards our sustainability ambitions, we recognise that while we have control over Aviva's operations and influence over our supply chain, when it comes to decarbonising the economy in which we operate and invest, Aviva is one part of a far larger global system. Nevertheless, we remain focused on the task and are committed to playing our part in the collective effort to enable the global transition. Find out more about our climate goals at and our sustainability ambition and action at Aviva is a Living Wage, Living Pension and Living Hours employer and provides market-leading benefits for our people, including flexible working, paid carers leave and equal parental leave. Find out more at As at 31 December 2024, total Group assets under management at Aviva Group were £407 billion and our estimated Solvency II shareholder capital surplus as at 31 December 2024 was £7.9 billion. Our shares are listed on the London Stock Exchange and we are a member of the FTSE 100 index. For more details on what we do, our business and how we help our customers, visit View source version on Contacts For media enquiries, please contact: CyberCube: Yvette Essen, Head of Communications & Market Engagement, yvettee@ +44 (0)7956 877 206Aviva: Karmen Ivey, Senior Media Relations Manager, Global Corporate & Specialty, +44 (0)7385 013 292 Error in retrieving data Sign in to access your portfolio Error in retrieving data Error in retrieving data Error in retrieving data Error in retrieving data
Business Wire
19-05-2025
- Business
- Business Wire
CyberCube and Aviva Partner to Harness AI for Cyber Threat Actor Intelligence and Advanced Portfolio Risk Management
LONDON--(BUSINESS WIRE)--CyberCube, a global leader in cyber risk analytics, and Aviva plc, a leading UK insurer, are harnessing the power of Artificial Intelligence (AI) to map the behaviour of cyber threat actors and the technologies they most frequently target. Utilising CyberCube's 'Portfolio Threat Actor Intelligence' service and its suite of cyber analytics software, the collaboration aims to strengthen Aviva's cyber exposure management strategy. By leveraging AI, specifically large language models (LLMs), to glean threat intelligence from extensive digital forensics data and data leaks tied to leading ransomware groups, Aviva has gained deep insights into how these threat actors operate and the tactics they use to execute attacks. With these insights, Aviva can pinpoint companies in its commercial portfolio that are most vulnerable to specific cyber threat actors, bringing a new level of precision and innovation to exposure management. Aviva is the first insurer to integrate 'Portfolio Threat Actor Intelligence' into its exposure management strategy on a recurring basis, marking a significant step in enhancing the company's threat-informed underwriting and portfolio oversight capabilities. James Mitchell, Senior Cyber Pricing and Exposure Manager, Aviva, said: 'As cyber-attacks continue to rise, including the targeting of high-profile organisations, it's crucial that businesses are properly protected. 'Over the past year, Aviva has rigorously tested Portfolio Threat Actor Intelligence against several ransomware groups. These threat actors were selected based on their relevance to Aviva's commercial portfolio - specifically their targeting preferences - and our ability to confidently map tactics, techniques, and procedures across the cyber kill chain. 'By incorporating this unique blend of cyber analytics and threat intelligence into current underwriting and exposure management processes, (re)insurers can gain deeper insights into their portfolios, enabling them to better manage cyber risk for both themselves and their customers. 'Customers identified as higher risk can then receive more tailored advice from (re)insurers. For instance, assisting customers with the selection of appropriate cybersecurity tabletop exercises that are specifically linked to the tactics of the higher-risk threat actors.' William Altman, Head of Cyber Threat Intelligence Services, CyberCube, said: 'Portfolio Threat Actor Intelligence is an innovative solution that takes the management of cyber insurance portfolio risk to the next level. Through this capability, CyberCube supports Aviva's Exposure Management team in identifying companies within its portfolio that display firmographic traits, technology dependencies, and security gaps likely to attract specific cyber threat actors.' Aviva will utilise Portfolio Threat Actor Intelligence on a quarterly basis, as part of creating a differentiated and more nuanced approach to portfolio risk management. This will help Aviva keep pace with the dynamic and fast-paced cyber threat landscape. CyberCube and Aviva regularly review threat intelligence to update threat actor kill chains and ensure analyses reflect the latest threats. Notes to Editors Portfolio Threat Actor Intelligence is included as part of the CyberCube Concierge Threat Intelligence service. Concierge is a first-of-its-kind offering designed specifically for the unique needs of cyber (re)insurers, built by experts in cyber risk and insurance. Definitions: Cybersecurity tabletop exercise – a role play exercise where stakeholders in a business react to a fictional cyberattack. About CyberCube CyberCube is the leading provider of software-as-a-service cyber risk analytics to quantify cyber risk in financial terms. Driven by data and informed by insight, we have harnessed the power of artificial intelligence to supplement our multi-disciplinary team. Our clients rely on our solutions to make informed decisions about managing and transferring cyber risks. We unpack complex cyber threats into clear, actionable strategies, translating cyber risk into financial impact on businesses, markets, and society as a whole. The CyberCube platform was established in 2015 within Symantec and now operates as a standalone company. Our models are built on an unparalleled ecosystem of data and validated by extensive model calibration, internally and externally. CyberCube is the leader in cyber risk quantification for the insurance industry, serving over 100 insurance institutions globally. The company's investors include Forgepoint Capital, HSCM Bermuda and Morgan Stanley Tactical Value. For more information, please visit or email info@ About Aviva We are the UK's leading diversified insurer and we operate in the UK, Ireland and Canada. We also have international investments in India and China. We help our 20.5 million customers make the most out of life, plan for the future, and have the confidence that if things go wrong we'll be there to put it right. We have been taking care of people for more than 325 years, in line with our purpose of being 'with you today, for a better tomorrow'. In 2024, we paid £29.3 billion in claims and benefits to our customers. In 2021, we announced our ambition to become Net Zero by 2040, the first major insurance company in the world to do so. While we are working towards our sustainability ambitions, we recognise that while we have control over Aviva's operations and influence over our supply chain, when it comes to decarbonising the economy in which we operate and invest, Aviva is one part of a far larger global system. Nevertheless, we remain focused on the task and are committed to playing our part in the collective effort to enable the global transition. Find out more about our climate goals at and our sustainability ambition and action at Aviva is a Living Wage, Living Pension and Living Hours employer and provides market-leading benefits for our people, including flexible working, paid carers leave and equal parental leave. Find out more at As at 31 December 2024, total Group assets under management at Aviva Group were £407 billion and our estimated Solvency II shareholder capital surplus as at 31 December 2024 was £7.9 billion. Our shares are listed on the London Stock Exchange and we are a member of the FTSE 100 index. For more details on what we do, our business and how we help our customers, visit
