Do Son
TL;DR Security researchers uncovered an active espionage campaign led by the UAT-6275 threat actor against government agencies...
Cybercriminals
TL;DR Microsoft, Health-ISAC, Proofpoint, and international partners executed a major CoGUI phishing kit takedown alongside connected criminal...
At a glance Actor Criminal scam networks based in West Africa, including Nigeria and Ghana Activity Investment,...
TL;DR Federal agents arrested an OpenAI engineer on October 9 for allegedly placing hidden bugs in executive...
TL;DR Federal authorities arrested two U.S. nationals and charged 14 individuals in a major crackdown on a...
At a glance Actor UTA0576, an unknown threat actor tracked by Volexity Activity Zero-day exploitation of an...
At a glance Actor Kimsuky, a North Korea-linked threat group (assessed by Genians) Activity Reply-baiting spear phishing,...
Multiple prominent French supermarket chains have recently fallen victim to a massive cyberattack. Assailants ostensibly infiltrated internet-connected...
At a glance Actor Suspected TraderTraitor (Jade Sleet, UNC4899, Pressure Chollima, Slow Pisces) Activity Trojanized developer tool...
At a glance Actor UAT-11985 (tracked by Cisco Talos) Activity Spear-phishing, QR code phishing (quishing), and AitM...
The prominent French cryptocurrency hardware wallet manufacturer Ledger recently suffered a severe security breach. In this breach,...
In recent years, ransomware has evolved into an increasingly formidable threat to global enterprises. Consequently, a lucrative...
On October 7, 2026, a devastating ransomware attack struck IDCF, a prominent cloud computing platform operating under...
At a Glance Actor Unnamed; likely a Chinese-speaking, financially motivated individual (moderate confidence) Activity AI-assisted intrusions and...
Executive Summary OpenAI terminated multiple accounts tied to state-aligned influence campaigns in Russia and Iran. These threat...
Executive Summary Threat actors use automated tools to steal sensitive information. Additionally, they establish persistent access through...
At a Glance Actor CL-STA-1178, assessed as Iranian state-aligned (high confidence, per Unit 42) Activity Fake job...
Attackers Seize Three Country-Code Domains Google’s security team has reported a recent wave of registry hijacks. Attackers...
An Insider Joins the Hunt for ShinyHunters The hunt for ShinyHunters has unexpectedly gained an insider. Authorities...
At a Glance Actor Longlegs (Symantec), also tracked as Storm-2603; described as China-nexus Activity SharePoint exploitation, security...
At a Glance Summary Attribute Details Actor or Group TA419 (China-aligned cyberespionage group) Activity Type Spear-phishing, AitM...
At a Glance Summary Attribute Details Actor or Group Unattributed cybercrime operators Activity Type Phishing, dual RMM...