30 article(s) in our index mention this organisation.
Two separate incidents highlight the dangers of neglecting cybersecurity. In the second, attackers leveraged a sophisticated phishing campaign targeting a landscaping and construction business, using a fake Microsoft log…
Threat actors are increasingly leveraging Web3 technologies, specifically decentralized blockchain networks, to establish and maintain persistent access to enterprise cloud environments. These techniques involve embeddin…
Google’s Threat Intelligence Group (GTIG) reported a dramatic increase in vulnerability disclosures, reaching 10,740 last month, a doubling from January. The group observed a rapid weaponization of vulnerabilities, such…
Google Threat Intelligence Group (GTIG) found that the number of vulnerabilities disclosed and exploited increased significantly in 2026 compared to 2025, largely driven by ‘n-days’ rather than zero-day vulnerabilities.
Noopur Davis’s career path to becoming a Global CISO at Comcast is remarkably unconventional, defying the typical trajectory of senior executives. Rather than following a planned career, she built her expertise through a…
Researchers at Noma Labs have identified a new AI attack vector called "workflow identity hijacking" that bypasses security controls by exploiting a design flaw in enterprise AI pipelines. Attackers can send seemingly in…
North Korean actors are increasingly leveraging sophisticated social engineering tactics to infiltrate companies worldwide, bypassing traditional cybersecurity measures. Rather than directly attacking systems, they are s…
The US government has disrupted a Chinese hacking platform and botnet, QTFY, used by Chinese threat actors to target military and critical infrastructure systems in the United States. The disruption targeted QScan and QT…
ToxicPanda, a banking Trojan, has evolved into a more sophisticated enterprise threat, expanding its reach beyond individual banking apps to compromise entire Android devices and potentially access corporate resources. T…
A supply chain attack targeting the Rust programming language ecosystem has been discovered, involving a compromised maintainer account publishing malicious versions of three crates – arrayref, internment, and append-onl…
The CISA and FBI have updated their advisory on the Medusa ransomware gang, revealing that over 500 victims have been identified in the last year, with a significant focus on the healthcare sector. Medusa is known for ra…
This week saw a surge in exploitation activity and new malware discoveries. A China-nexus APT is leveraging a newly patched VMware vulnerability to deploy a backdoor and ransomware (Babuk-derived). Simultaneously, a zero…
This article summarizes several cybersecurity vendor announcements and research findings from Black Hat 2026. Key developments include 1Password's research on AI-generated patches and new PAM offerings, Cogent's Mythos-c…
This report summarizes key announcements from Black Hat 2026, focusing on how vendors are leveraging AI and expanding their cybersecurity offerings. Several companies highlighted investments in AI-powered threat detectio…
River Bank & Trust suffered a ransomware attack that resulted in stolen data, which the company subsequently worked to have deleted through a possible ransom payment. The company is still investigating the full scope of…
The article highlights a critical gap in cybersecurity preparedness: the lack of coordinated response when a root certificate is removed from a browser’s trust store. While security teams are adept at identifying and rem…
Twenty-five years after the Code Red worm, a pivotal moment in cybersecurity history, experts are drawing parallels to the current rush towards AI adoption. The article highlights how Code Red exploited a widespread, oft…
A new Android malware operation, RedWing, is being sold on Telegram as a ready-made bank fraud service. Developed by a Russian threat actor group, RedWing allows even unskilled criminals to steal banking logins and one-t…
BeyondTrust has released patches to address critical security vulnerabilities in its Remote Support and Privileged Remote Access products. These flaws, if exploited, could allow unauthenticated attackers to gain unauthor…
Armored Likho, a previously undocumented threat actor, has been actively targeting government agencies and the power sector in Russia, Brazil, and Kazakhstan with a sophisticated campaign utilizing tools like BusySnake S…
_ber1a_Alamy.png?width=720&quality=80&disable=upscale)
