51 article(s) in our index mention this organisation.
Kaspersky researchers have uncovered a sophisticated malware campaign distributing a multi-stage threat disguised as torrents of popular films. The campaign, active since mid-August, targets both individual users and org…
In April 2026, a manufacturing organization in the Middle East was targeted by a ransomware group (PAYLOAD) that weaponized Group Policy Objects (GPOs) to cause widespread disruption and extortion without deploying tradi…
The Cybersecurity and Infrastructure Security Agency (CISA) has added three actively exploited Linux kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, urging federal agencies to patch them imme…
A critical vulnerability (CVE-2026-58138) in Orkes Conductor allows attackers to execute arbitrary commands without authentication, and has been actively exploited in the wild for over a month. Organizations using Orkes…
Check Point, Kaspersky, and Tanium have released patches to address several critical vulnerabilities in their security products. These vulnerabilities range from remote code execution to SQL injection, and while some hav…
A sophisticated, modular malware campaign dubbed MovieReaper has been targeting users globally, primarily through compromised torrent trackers. The campaign, originating in late 2025, leverages a previously unknown frame…
The pro-Ukraine hacktivist group Hacking Cat has been deploying increasingly sophisticated malware, including a new remote access tool (Gorilla RAT) and Monkey Ransomware, against Russian targets since early 2024. The gr…
A security researcher, Chaotic Eclipse, has demonstrated a method to bypass a patch for a vulnerability (ShieldBreak) in Microsoft Defender, highlighting a gap in Microsoft's patching process. This allows for an arbitrar…
A security researcher known as Nightmare Eclipse has released three new zero-day exploits targeting Avast, CrowdStrike, and Nvidia. These exploits allow for privilege escalation and could lead to significant security bre…
Toy Ghouls, a financially motivated Russian threat group, has developed a sophisticated new backdoor capable of gaining full control over compromised systems. Utilizing unconventional communication channels – HiveMQ MQTT…
A security researcher, Chaotic Eclipse, has released a proof-of-concept (PoC) called FalconFlank, a zero-day privilege escalation vulnerability affecting CrowdStrike Falcon. The exploit leverages a flaw in the office mal…
A sophisticated malware campaign, linked to the Chinese threat actor group Silver Fox (aka Yinhu), is using fake software download websites to distribute malicious installers. These installers deploy malware that weakens…
Iranian hackers, operating under the Nimbus Manticore group, are using sophisticated cross-platform remote access trojans (RATs) to target developers and system administrators. They are leveraging recruitment-themed lure…
A vulnerability has been identified in Kaspersky Endpoint Security for Windows, allowing attackers to bypass security policies. This means attackers could potentially disable security controls and gain unauthorized acces…
Nightmare Eclipse, a security researcher, has released a new zero-day exploit, ‘HardBreacher,’ targeting a Kaspersky Endpoint Security product, allowing attackers to gain significant control over the system. This exploit…
The threat actor Silver Fox is distributing the ValleyRAT backdoor disguised as a signed Chinese adware application (QN Wallpaper) to bypass antivirus protections. This sophisticated malware, tracked as Winos 4.0, allows…
In Q2 2026, the percentage of ICS computers blocked by malicious objects continued to decline, hitting a low of 19.15%, the lowest since 2022. East Asia and Africa saw significant increases in threat percentages across…
Researchers at Kaspersky have identified a new malware specifically designed for car head units, linked to the BadBox botnet. This represents a significant expansion of the BadBox threat, which has previously targeted An…
A cyber espionage campaign, dubbed Operation QUICSILVER, targeting Myanmar's government and IT sector is being conducted by a China-linked threat actor. The campaign uses a graduation ceremony lure to deliver a Go backdo…
The Cavern C2 framework, used by Iranian nation-state hackers linked to the Ministry of Intelligence and Security (MOIS) and associated with groups like MuddyWater and OilRig (Lyceum), is undergoing continuous evolution.…
