Under attack?

Get in touch

Cybersecurity challenges

Identify Your Vulnerabilities and Risks

Develop and Manage Your IT Securely

Detect and Respond to Intrusion

Respond to and Quickly Overcome a Cyber Attack

Get Cybersecurity Advice

Essential cybersecurity capabilities

How We Help

Predict

Prevent

Detect

Respond

Recover

Our Services

Are you under attack?

Why Truesec

Who We Are

Cases

Our Experts

Career

Knowledge & Resources

Events

Tech Talks

Trainings

Blog

News

Knowledge Hub

Main menu

UAParser.js npm Package Supply Chain Attack: Impact and Response

Cybersecurity

Supply Chain

Kaseya Supply-Chain Attack Targeting MSPs to Deliver REvil Ransomware

Human Threat Intel

<h2>The jury’s motivation: </h2>
<blockquote>“In the last 12 months, we have seen both substantial growth in volume and several large well-known cases of cyber breaches and ransomware attacks. Consequently, increased security is now on everyone’s agenda and top-of-mind for far many more than before. Therefore, it feels safe to have the “Security Partner of the Year” in our corner: <a href="https://www.linkedin.com/company/truesec/">Truesec</a>!”</blockquote>
<figure><img src="https://optimise2.assets-servd.host/jealous-emu/production/MicrosoftTeams-image-18.png?w=1800&auto=compress%2Cformat&fit=crop&fp-x=0.5&fp-y=0.5&dm=1633331351&s=e9c912674bfbb6e8f56c49d9739bdea4" alt="Microsoft Partner of the year" /></figure>

Truesec awarded Microsoft's "Security Partner of the Year" 2021

When the Cyberthreat Comes From the Inside

Using PetitPotam to NTLM Relay to Domain Administrator

HiveNightmare a.k.a. SeriousSam Local Privilege Escalation in Windows - CVE-2021-36934

How the Kaseya VSA Zero Day Exploit Worked

Threat Intelligence

Origin of the Kaseya Breach

Secure Your Software Supply Chain – Trusting 3rd Parties

Secure Development

Secure Your Software Supply Chain  – Threats And Mitigations

Fix for PrintNightmare CVE-2021-34527 exploit to keep your Print Servers running while a patch is not available

Exploitable Critical RCE Vulnerability Allows Regular Users to Fully Compromise Active Directory – PrintNightmare CVE-2021-1675 CVE-2021-34527

Mitigating NTLM Relay Attacks on Active Directory Certificate Services (AD CS) – ADV210003 – KB5005413 – PetitPotam

Ransomware continues to increase in both frequency and scope. <a href="https://www.willistowerswatson.com/sv-SE">Willis Towers Watson</a> and Truesec have therefore determined guidelines for how each company should establish a good cybersecurity posture.
An increasing number of companies are suffering from cyber attacks, and in recent times this has led both to the suspension of healthcare and to entire communities being affected when critical infrastructure is attacked, an example of that is the US fuel pipeline that led to rising gasoline prices and pains.
To make it easier for organizations that want to strengthen their cybersecurity, Truesec, and WTW, have developed clear guidelines that support companies to establish good cybersecurity. The guidelines are intended as a basic level, where each organization can decide the next steps, based on its conditions and goals.

Truesec and WTW Announce Joint Guidelines to Help Companies Strengthen Their Cybersecurity

Getting Started with Microsoft Security Baselines

From May 1, 2021, the specialist company Angelis &amp; Hansen will form Truesec's new business area, Human Threat Intelligence, led by Carolina Angelis and Leif Hansen. With 20 years in the Swedish Intelligence Service, Carolina has a unique insight into the methods used to conduct intelligence gathering and how to counteract them. Leif has a background in the military and is a specialist in security protection and background checks.
<blockquote>”Recently, we have seen that qualified threat actors combine cyber attacks with person-based methods to gain physical access to IT environments, for example, by recruiting agents. We are happy for Carolina and Leif to join Truesec to help society and our customers protect themselves against this type of threat”, says Marcus Murray, Founder of Truesec. </blockquote>
<figure><img src="https://optimise2.assets-servd.host/jealous-emu/production/News/carolina-angelis-truesec-human-threat-intelligence-lead.jpg?w=6112&auto=compress%2Cformat&fit=crop&fp-x=0.5&fp-y=0.5&dm=1633331359&s=6ce0cf13ef47451f437fd82f39d2259b" alt="Carolina Angelis" /><figcaption>Carolina Angelis, Human Threat Intelligence Lead</figcaption></figure>
<h2>Humans Are the Greatest Vulnerability</h2>
Through Human Threat Intelligence, Truesec strengthens its ability to help organizations prevent and avert hybrid threats involving methods such as infiltration, psychological influence, espionage, extortion, digital interception and personal threats. 
<blockquote>”The attackers are looking for vulnerabilities that they can exploit. The methods today are not only technical or human but a hybrid of both. In order to counteract, we must reflect the attackers and their methods, says Carolina Angelis”, Human Threat Intelligence Lead at Truesec. </blockquote>
<blockquote>”We are enthusiastic about developing the area of ​​Human Threat Intelligence together with Carolina and Leif. Angelis &amp; Hansen has been a close and long-term partner which has helped us minimize the risk associated with recruitment. Now that we are joining forces, we are strengthening our ability to prevent cyber breach by being able to anticipate risk and vulnerabilities with Human Threat Intelligence", says Anna Averud, CEO of Truesec Group.</blockquote>
<h3>For more information, contact:</h3>
Anna Averud CEO Truesec Group anna.averud@truesec.com +46 (0)70 918 30 48
Marcus Murray Founder Truesec marcus.murray@truesec.se +46 (0)70 918 30 01
Carolina Angelis Human Threat Intelligence Lead Carolina.angelis@truesec.se +46 (0)73 378 28 26
<h3>About Truesec</h3>
As a global cybersecurity company, we’re proud to be at the forefront of protecting organizations and our society against cyber threats. Our purpose has been clear since day one: Creating safety and sustainability in a digital world by preventing cyber breach and minimizing impact.

Truesec Launches Human Threat Intelligence

Are Evil Corp Actually Russian Spies?

Secure Your VMware ESXi Hosts Against Ransomware

Russia is Part of the Ransomware Problem

<blockquote>
“The development of Ransomware-as-a-service platforms combined with inadequate cybersecurity capabilities have contributed to a record increase in ransom attacks in Sweden during 2020. Compared to 2019, the attacks have tripled”, says Marcus Murray, founder of Truesec.
</blockquote>
<h2>Companies are Blackmailed for Record-high Ransom Amounts</h2>
The Truesec report shows an increase in ransomware attacks paired with another form of ransom attack. Attackers steal data from the victim´s network and then blackmail them by threatening to release sensitive corporate information on the internet. There are cases of demands over 290 million SEK.
<blockquote>
“More and more cybercriminals steal data and threaten to release sensitive corporate information unless the targeted companies pay multimillion ransom amounts. This means it’s not enough to have backup of data, it´s crucial to detect and disarm the attacks in time”, says Marcus Murray.
</blockquote>
<h2>The Cyberthreat in Sweden is Greater Than Ever</h2>
Truesec’s <a href="https://www.truesec.com/hub/report/threat-intelligence-report-2021" target="_blank" rel="noreferrer noopener">Threat Landscape Report</a> offers an overview of the current cyberthreats in Sweden. It is based on Truesec’s Threat Intelligence analysis, including its own global incident responses, SOC-monitoring, and collaboration with external partners. The report shows an apparent increase in attacks on Swedish organizations during 2020.
<ul>
	<li>The costs of cybercrime in Sweden 2020 amounted to over 30 billion SEK, almost double the previous year's cost. 
 
</li>
	<li>Half (49%) of all severe cyberattacks were so-called ransom attacks aimed at blackmailing victims and demanding a ransom amount. There is an increase in cybercriminals also threatening to release sensitive corporate data that has been stolen in ransom attacks. 
 
</li>
	<li>Truesec has extensive experience in Threat Intelligence analysis, aiming to increase awareness of cyber threats and threat actors, to apply correct preventive measures. 
 
</li>
</ul>
<h3>For more information, please contact:</h3>
Marcus Murray 
Founder and cybersecurity expert 
+46 (0)70 918 30 01 
marcus.murray@truesec.se 
Mattias Wåhlén 
Threat Intelligence Lead 
+46 (0)76-004 05 14 
mattias.wahlen@truesec.se
<h3> About Truesec</h3>
As a global cybersecurity company, we’re proud to be at the forefront of protecting organizations and our society against cyber threats. Our purpose has been clear since day one: Creating safety and sustainability in a digital world by preventing cyber breach and minimizing impact.

Cyberattacks Against Swedish Companies Have Tripled

The threat actors are well funded, well organized, and in many cases quite skilled. Our job at Truesec is to find them, contain them, and take them down in close collaboration with our customers and law enforcement. To live up to our mission of making the world a more secure place and to better serve our customers in North America, Truesec is investing for significant growth during 2021.
We see the demand for our services within Secure Infrastructure, Cybersecurity, Incident Response, and Managed Detection propel our footprint in the U.S. In the past thirty days, we are pleased to announce the addition of four new fighters to our team, bringing with them a combined 70+ years of experience: 
 
<a href="https://www.linkedin.com/in/solutionsguru/">Spencer Hyde</a>, with more than 20 years of consulting experience focusing on network security. He has worked with several Fortune 100 companies. 
 
<a href="https://www.linkedin.com/in/mtwetherell/">Matthew Wetherell</a>, with a background as a system architect and over 20 years of experience working in highly regulated businesses. 
 
<a href="https://www.linkedin.com/in/john-louch/">John Louch</a>, adding 20 years of experience managing very large, complex, global Active Directory and MS3665 environments. 
 
<a href="https://www.linkedin.com/in/%F0%9F%92%AF-benjamin-bidmead-645a47164/">Ben Bidmead</a>, founder of the 0x00sec.org security community and creator of several tools for pen-testing. He also brings with him 5 years of experience working with offensive cybersecurity assignments. 
We will continue adding to the team and will have more exciting announcements to share in just a few weeks.
<h2><a href="https://career.truesec.com/">Join an exceptional team of experts!</a></h2>

Truesec investing for success in the U.S.

Tracking Microsoft Exchange Zero-Day ProxyLogon and HAFNIUM

Infrastructure

Today, cybercrime has grown into a trillion-dollar business, and companies in all industries and of all sizes have become potential targets. The demand for Truesec's cybersecurity experts' assistance during incident response is greatly increasing, together with the need for proactive, secure designs and solutions. Tomas Sjöström will focus on growing the US team and helping customers with Forensic, Recovery, and Rebuild and providing proactive services to prevent cyber breaches.
<blockquote>
”An investment in the US is a natural development for Truesec, and Tomas is the right person to lead our continued growth in the US market", says Anna Averud, CEO of Truesec Group."</blockquote>
<h3>About Thomas Sjöström </h3>
Sjöström has more than 15 years of senior management experience, including a decade of strategic development and plan execution at multi-national companies, most recently as Global Sales Director at RapidiOnline, a cloud-enabled integration service company. Before that, Sjöström served as Senior Director of development at Verifone and Head of Development &amp; Innovation at PostNord Group. Sjöström holds a BSc Degree from the University of Georgia and a diploma in Business Management from the Stockholm School of Economics.
<blockquote>
"Truesec has an exceptional mix of talent dedicated to a clear mission. I believe the need for security providers such as Truesec has never been greater, most recently demonstrated with the SolarWinds compromise”, says Tomas Sjöström. “Bringing Truesec concepts of prevention, detection, and protection against cyber threats to the larger US market has shown great potential over the past years. I am looking forward to leading the expansion of our US business."
</blockquote>
<blockquote>

“I'm thrilled that Tomas chose to join Truesec to lead our continued growth in the US market”, says Markus Lassfolk, CEO of Truesec AB, a Swedish subsidiary of Truesec Group. "Our international customers are seeking more security expertise from Truesec in the US and being in several time zones has many benefits for our customers, especially during time-critical assignments and incidents".

</blockquote>
<h3>For more information, contact:</h3>
Anna Averud 
CEO Truesec Group 
+46 (0)70 918 30 48 
<a href="mailto:anna.averud@truesec.se">anna.averud@truesec.se</a>
Tomas Sjöström 
CEO Truesec Inc 
+1 (904) 441-9873 
<a href="mailto:tomas.sjostrom@truesec.com">tomas.sjostrom@truesec.com</a>
Markus Lassfolk 
CEO Truesec AB 
+46 (0)70 918 30 12 
<a href="mailto:markus.lassfolk@truesec.se">markus.lassfolk@truesec.se</a>

Tomas Sjöström new CEO of Truesec Inc

In global comparison, Swedish companies are heavily exposed to cyber attacks due to digital transformation. The fact that many companies have facilitated work from home during the past year has also proved to be a major safety risk – and has resulted in many more attacks compared to previous years. 
 
”We know who the attackers are”, says Marcus. These are large criminal organizations that make a lot of money from hacking and demanding ransom. 
 
<a href="https://www.svt.se/nyheter/inrikes/cyberattacker-med-utpressning-okar-kraftigt-mot-svenska-foretag">Watch the SVT video interview with Marcus (in Swedish)</a> and get a glimpse of how our security experts work behind the scenes.

Marcus Murray on Swedish Television About Ransomware Attacks in Sweden

Avoid Supply-chain Attacks Similar to SolarWinds Orion

Collaboration Between FIN7 and the RYUK Group

Truesec’s founder <a href="https://www.linkedin.com/in/ACoAAAAoHsQBkZfKtXncHMB4lU0m3zHr_LMBo5s">Marcus Murray</a> was interviewed yesterday on Swedish national television, <a href="https://www.linkedin.com/company/svt/">SVT</a>, about the SolarWinds supply chain attack, and shared insights about the impact on Swedish organisations. 
 
MSB, The Swedish Civil Contingencies Agency, is now urging large Swedish companies to act immediately. (interview in Swedish).
<a href="https://www.svt.se/nyheter/svt-avslojar-hackare-byggde-bakdorrar-in-i-svenska-storforetag">Watch the news segment on SVT here &gt;</a>

Marcus Murray about the SolarWinds Supply Chain Attack

Foreign criminal and state-sponsored actors carry out daily cyberattacks against Swedish corporations and government agencies. In the current threat landscape, there is an increasing importance of Threat Intelligence that can be translated into preventive actions that can significantly minimize the risks.
Mattias Wåhlén's task is to lead and further develop Truesec's Threat Intelligence capabilities for anticipating data breaches and averting threats. The goal is to map all major actors threatening Swedish and global interests and monitor their activities. <blockquote>"The unique expertise and experience that Mattias brings in the field of Threat Intelligence has great value to our customers. Together, we increase security in society by being one step ahead of the threat actors," says Marcus Murray, Founder of Truesec.</blockquote>

<h2>Mattias Wåhlén Has a Background in FRA</h2>
Mattias has for the past 12 years been active as a senior analyst in FRA's cyber defense operations. Mattias has extensive experience in the field and has spent almost 35 years in the Swedish intelligence services, both at FRA and Swedish Defence Forces.
<blockquote>"In order to overcome your adversaries, you have to understand how they operate. Through improved threat analysis, we can strengthen our ability to closely monitor the attackers' activities. It gives us a strong advantage when it comes to protecting our global customers against cyber-attacks”, says Mattias Wåhlén.</blockquote>
<h2>Brief Facts About Threat Intelligence</h2>
<ul><li>Threat Intelligence includes charting threat actors and their activities – it provides valuable insights into investigations of cyberattacks.</li><li>The need for Threat Intelligence increases as cybercrime grows while few threat actors are prosecuted.</li><li>Truesec has been working with Threat Intelligence for many years. This includes intelligence collection from our own global incident investigations, SOC monitoring, and cooperation with external partners.</li></ul><h3>For more information, contact:</h3>
Marcus Murray Founder &amp; VP Cyber programs +46 (0)70-918 30 01 marcus.murray@truesec.se Mattias Wåhlén Threat Intelligence Lead +46 (0)76 004 05 14 mattias.wahlen@truesec.se

Truesec Recruits Mattias Wåhlén From FRA

The SolarWinds Orion SUNBURST Supply-Chain Attack

Lets Automate Things Securely!

Time to Stop Being Defensive and Go On the Offensive!

TIBER - Improving the Financial Stability of Sweden

ConfigMgr Patch Reporting

Invoke-WebRequest or Invoke-RestMethod?

Finding DNS Servers

Consuming ReST API with PowerShell

SIGRed (CVE-2020-1350) affects ALL Windows DNS Servers

<a href="https://www.microsoft.com/en-us/security/business/intelligent-security-association">Microsoft Intelligent Security Association (MISA) </a>is an ecosystem of independent software vendors and managed security service providers that have integrated with Microsoft security to better defend against a world of increasing cyberthreats.
Truesec is proud to have been selected, as one of the only MSSPs in Sweden, to be included in Microsoft Intelligent Security Association. It is an indication for customers that Truesec provides smart and top security services available to defend against a world of increasing threats.
<blockquote>”Our customers security is the most important thing to us. To have a technology partner that delivers continuous innovation and stability is key to our success in keeping our customers safe from cyber incidents. We value our relationship with Microsoft greatly and look forward to develop it further by being a part of Microsoft Intelligent Security Association,”

- Fredrik Sjöberg, CEO of Truesec Detect.
</blockquote>
<div> </div>
<blockquote>
“The Microsoft Intelligent Security Association has grown into a vibrant ecosystem comprised of the most reliable and trusted security experts across the globe. Our members, like Truesec, share Microsoft’s commitment to collaborate within the cybersecurity community to improve our customers’ ability to predict, detect, and respond to security threats faster.”
- Rani Lofstrom, Senior Product Marketing Manager, Microsoft Security
</blockquote>
<div> </div>
<h2>Microsoft technology integrated in Truesec Security Operations Center (SOC)</h2>
Truesec offers a <a href="https://www.truesec.com/security/truesec-managed-detection-and-response-service/">24/7, 365 Detect &amp; Disarm SOC-service </a>to customers using Microsoft’s leading security technology. Adding in-depth knowledge of highly skilled cyber security experts to analyze alerts to filter out false positives to only communicate relevant incidents and recommendations to customers. If needed, Truesec experts can help with incident response or forensics.
By joining Microsoft Intelligent Security Association, Truesec will be able to share intelligence and leverage that intelligence sharing, to keep customers safe.
<h3>Read more about <a href="https://www.truesec.com/security/truesec-managed-detection-and-response-service/">Truesec SOC-service here!</a></h3>

Truesec Now a Part of Microsoft Intelligent Security Association

RemoteApp and the Missing OneDrive Client

Why Your Organization Needs MDM to Protect What Matters

PowerShell - Logging

C# to PowerShell: Finale

Choosing a Windows Release Branch

A Short Story of a Targeted Attack

C# to Powershell: Part Two

Recommended Advanced Audit Logging

MEMCM - Recovery

Case of the Non-working MEMCM Agent

C# to PowerShell: An Introduction

The Ruthless World of Cybercrime

Building a Secure Digital Workplace

The Importance of Protecting Your Service Accounts

Giving Forensics a Log Trail to Follow

Bypassing Modern XSS mitigations With Code-reuse Attacks

Microsoft Exchange Server Remote Code Execution

From S3 bucket to Laravel unserialize RCE

Configuring VSCode - ToDo Tree

Reverse Shell Through a Node.js Math Parser

Introducing LAPS Web UI

Deployment logs with centralized collection

Is Multi-Factor Authentication Being Defeated?

Let’s Hack a Mainframe!

PowerShell Dot Sourcing

Get updated on cyber strategies for the new threat landscape. A Swedish customer event for decision-makers at Hotel At Six in Stockholm. Limited seats.

October 21, 2021

Executive Briefing

Get on top of today's escalating cybersecurity threats. Join us for a full day of tech talks and demos, all based on real-life incidents and experts' hands-on experience. Attend in Stockholm and meet the expert, or join our digital live-stream, where we offer extra content with our digital host STÖK in the backstage lounge.

November 9, 2021

Cybersecurity Summit

A unique five-day deep dive into new technology. Multiple tracks with technical hands-on training, with world-leading experts to guide you through the week. We all gather at the same hotel, where we will eat, sleep, learn, practice, have some fun and try out new stuff.

November 14-19, 2021

Geek Week

Explore More Knowledge, Created by Leading Experts

Boost Your Knowledge In Cybersecurity