30 article(s) in our index mention this organisation.
The Chinese-linked cyber espionage group Volt Typhoon has been utilizing a covert network called Silent Train to conduct zero-day exploitation campaigns targeting critical infrastructure. The group’s operational model pr…
Threat actors, potentially linked to the Lazarus Group, are aggressively scanning for vulnerabilities in PHP infrastructure, utilizing AI-assisted post-exploitation techniques.
Quest Diagnostics is investigating a potential data breach affecting its lab service system, Quanum Lab Services Manager (LSM). The company has paused access to the system while it investigates and is working with law en…
Quest Diagnostics reported a cyber breach affecting ‘certain patient records’ on its Quanum Lab Services Manager platform. The breach follows previous incidents involving patient data exposure.
Ransomware groups, including Qilin (Spikey Scorpius) and INC (Tarnished Scorpius), are exploiting a vulnerability in Palo Alto Networks' PAN-OS and Prisma Access to bypass multi-factor authentication and gain unauthorize…
A Russian state-sponsored threat actor, linked to Midnight Blizzard (APT29/Cozy Bear) and operating under the designation GTG-20006, has been leveraging AI to continuously rebuild and evade malware detection. The group h…
Dark Reading’s “What We Missed” segment explored a complex situation surrounding ShinyHunters and ReliaQuest. Initially, ShinyHunters publicly boasted about breaching ReliaQuest, claiming to have gained access through a…
Berlin’s city government has refused to pay a ransom to a ransomware group, Rhysida, who claimed responsibility for stealing a massive amount of sensitive data from city networks. The group, allegedly linked to the Rhysi…
The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) suffered a cybersecurity incident, confirmed by the agency itself, and attributed to the Qilin ransomware group. While the incident didn't impact the agency's…
This week’s ThreatsDay bulletin highlights a diverse range of cyber threats, including a 296,000-device IoT botnet, social engineering attacks targeting security teams, and a growing number of credential-stealing malware…
ReliaQuest was targeted by the ShinyHunters group through a sophisticated phishing campaign mimicking security employees to gain access to an Okta dashboard. While the attackers gained temporary view-only access, they we…
Google has identified three distinct groups of Russian cyber-spies – UNC6293, UNC7005, and UNC5976 – that are aggressively targeting individuals in academia, defense, government, and think tanks across Europe and the US.…
Three distinct clusters of suspected Russian cyber espionage groups – UNC6293, UNC7005, and UNC5976 – are leveraging legitimate authentication flows to target individuals in academia, aerospace/defense, governments, and…
Russian state-sponsored hackers, linked to the Midnight Blizzard group (part of APT29), are compromising hotel Wi-Fi networks worldwide to steal traveler login credentials and install espionage malware. The campaign uses…
A sophisticated campaign, dubbed CaptiveCrunch, is leveraging hijacked hotel Wi-Fi networks to deliver surveillance malware – specifically CornFlake, a remote access trojan – to unsuspecting guests. The attacks are orche…
A critical remote code execution vulnerability in PTC's Windchill and FlexPLM PLM platforms has been exploited by a Cl0p ransomware affiliate in a targeted campaign. The attackers are leveraging a chain of vulnerabilitie…
A threat actor is exploiting vulnerabilities in public Wi-Fi gateways, particularly at hotels and conference centers, to steal corporate credentials, including Microsoft 365 accounts, and is leveraging tactics similar to…
DentaQuest, a major dental and vision benefits administrator, experienced a significant data breach potentially impacting over 23 million people. Hackers gained access to sensitive information including Social Security n…
ClickFix, a social engineering technique where attackers trick users into executing malicious commands via error messages, has become the dominant method for malware delivery, according to a recent ReliaQuest analysis. T…
A new stealthy backdoor, Mistic (MLTBackdoor), linked to the KongTuke IAB has been used in financially motivated attacks targeting organizations across insurance, education, IT, and professional services since April 2026…
