Google Threat Intelligence Group

6 min read

• AI
• Amazon Web Services (AWS)
• CISO
• compromise
• CSO
• cybercrime
• Cybersecurity
• Data theft
• Google Threat Intelligence Group
• Mandiant
• okta
• Research
• Salesforce
• Salesloft
• Salesloft Drift
• supply chain
• supply chain attacks
• Technology
• Threats
• Zscaler

Security leaders at Okta and Zscaler share lessons from Salesloft Drift attacks

Cyber Scoop October 6, 2025

Security leaders at Okta and Zscaler share lessons from...

Read More

4 min read

• Clop
• cybercrime
• Cybersecurity
• extortion
• Google Threat Intelligence Group
• Mandiant
• Oracle
• ransomware
• Research
• Threats

Here is the email Clop attackers sent to Oracle customers

Cyber Scoop October 2, 2025

Here is the email Clop attackers sent to Oracle...

Read More

3 min read

• Clop
• cybercrime
• Cybersecurity
• extortion
• file transfer service
• Google Threat Intelligence Group
• Mandiant
• Oracle
• ransomware
• Threats
• Uncategorized

Oracle customers being bombarded with emails claiming widespread data theft

Cyber Scoop October 1, 2025

Oracle customers being bombarded with emails claiming widespread data...

Read More

5 min read

• backdoor
• Brickstorm
• Charles Carmakal
• China
• cyberespionage
• Geopolitics
• Google
• Google Threat Intelligence Group
• Ivanti
• John Hultquist
• Mandiant
• SaaS
• Silk Typhoon
• surveillance
• Technology
• Threats
• UNC5221
• VMware ESXi

Brickstorm malware powering ‘next-level’ Chinese cyberespionage campaign

Cyber Scoop September 24, 2025

Brickstorm malware powering ‘next-level’ Chinese cyberespionage campaign | CyberScoop...

Read More

5 min read

• Akin Gump
• Crowell & Moring
• Cybersecurity
• Google Threat Intelligence Group
• Mandiant
• North Korea
• North Korean IT workers
• Threats

What to do if your company discovers a North Korean worker in its ranks

Cyber Scoop September 23, 2025

What to do if your company discovers a North...

Read More

4 min read

• Amazon Web Services (AWS)
• cybercrime
• Cybersecurity
• Darktrace
• Forrester
• GitHub
• Google Threat Intelligence Group
• hacking
• Mandiant
• OAuth
• Research
• Salesforce
• Salesloft
• Salesloft Drift
• Technology
• Threats

Salesloft Drift security incident started with undetected GitHub access

Cyber Scoop September 8, 2025

Salesloft Drift security incident started with undetected GitHub access...

Read More

4 min read

• AI
• artificial intelligence (AI)
• Cloudflare
• cybercrime
• Cybersecurity
• data breaches
• Google Threat Intelligence Group
• hacking
• Mandiant
• okta
• PagerDuty
• Palo Alto Networks
• Salesforce
• Salesloft
• Salesloft Drift
• SpyCloud
• Technology
• Threats
• Zscaler

Salesloft Drift attacks hit Cloudflare, Palo Alto Networks, Zscaler

Cyber Scoop September 2, 2025

Salesloft Drift attacks hit Cloudflare, Palo Alto Networks, Zscaler...

Read More

3 min read

• AI
• Amazon Web Services (AWS)
• Coalition
• cybercrime
• Cybersecurity
• Google Threat Intelligence Group
• Google Workspace
• Mandiant
• OAuth
• Research
• Salesforce
• Salesloft
• Salesloft Drift
• Snowflake
• Technology
• Threats
• virtual private network (VPN)

Salesloft Drift compromised en masse, impacting all third-party integrations

Cyber Scoop August 28, 2025

Salesloft Drift compromised en masse, impacting all third-party integrations...

Read More

3 min read

• Australia
• Canada
• China
• Cybersecurity and Infrastructure Security Agency (CISA)
• Czech Republic
• Department of Defense (DOD)
• Federal Bureau of Investigation (FBI)
• Finland
• Geopolitics
• germany
• Google Threat Intelligence Group
• Government
• Italy
• John Hultquist
• Madhu Gottumukkala
• National Security Agency (NSA)
• Netherlands
• Poland
• Salt Typhoon
• Spain
• Telecommunications
• Threats
• transportation
• United Kingdom (U.K.)

Salt Typhoon hacking campaign goes beyond previously disclosed targets, world cyber agencies say

Cyber Scoop August 27, 2025

Salt Typhoon hacking campaign goes beyond previously disclosed targets,...

Read More

5 min read

• active defense
• Brandon Wales
• Congress
• cryptocurrency
• cyber offense
• Department of Justice (DOJ)
• Dmitri Alperovitch
• Geopolitics
• Google
• Google Threat Intelligence Group
• hacking back
• Institute for Security and Technology
• letters of marque
• Microsoft
• National Security Agency (NSA)
• National Security Council (NSC)
• Policy
• ransomware
• Russia
• SentinelOne

Google previews cyber ‘disruption unit’ as U.S. government, industry weigh going heavier on offense

Cyber Scoop August 27, 2025

Google previews cyber ‘disruption unit’ as U.S. government, industry...

Read More