Threat actors stories - Page 3
Conflict sparks surge in Middle East cyber espionage
Last month
#
phishing
#
email security
#
cybersecurity
New research links Iran conflict to a swift surge in tightly targeted cyber espionage across Middle Eastern governments and embassies.
Attackers abuse Deno runtime to deploy fileless malware
Last month
#
edr
#
cybersecurity
#
keylogging
Hackers are abusing the trusted Deno JavaScript runtime to run fileless CastleRAT malware solely in memory and evade endpoint defences.
Salesforce guest flaws fuel large-scale data harvesting
Last month
#
saas
#
crm
#
firewalls
Misconfigured Salesforce Experience Cloud guest profiles are being exploited for mass data harvesting, with up to 400 firms possibly affected.
Infosecurity Europe 2026 unveils first keynote lineup
Last month
#
firewalls
#
ransomware
#
encryption
Infosecurity Europe 2026 names first keynotes on ransomware, cloud, AI and post-quantum risk, plus leadership insights from elite fields.
Claroty named Leader in 2026 Gartner CPS security report
Last month
#
iot security
#
cx
#
martech
Claroty again named a Leader in Gartner's 2026 CPS Protection Platforms Magic Quadrant as industrial cyber-physical threats intensify.
Google report warns identity is weak link in cloud
Last month
#
malware
#
ransomware
#
hybrid cloud
Attackers are ditching malware for stolen identities, misconfigurations and abused AI tools, Google warns in its latest cloud threat report.
GenAI drives patient data policy breaches in healthcare
Last month
#
malware
#
data protection
#
cloud security
GenAI use in healthcare is fuelling patient data policy breaches, with regulated records making up 89% of AI-linked violations, research shows.
Kernel in the crosshairs: The BlackSanta threat campaign targeting recruitment workflows
Last month
#
storage
#
phishing
#
hcm
A stealthy BlackSanta malware spree is hijacking HR recruitment workflows, killing endpoint defence tools and exfiltrating sensitive data.
Google warns of surge in enterprise zero-day attacks
Last month
#
virtualisation
#
firewalls
#
vpns
Google warns attackers are shifting from browsers to corporate systems, as tracked zero-day exploits climb and enterprise edge devices surge.
ShinyHunters claims Woflow breach in supply chain hack
Last month
#
data protection
#
ransomware
#
mfa
ShinyHunters claims it hacked merchant data firm Woflow, raising supply chain fears for major brands despite no confirmed breach yet.
Coruna exploit kit exposes risks for outdated iOS users
Last month
#
endpoint protection
#
pam
#
mfa
New Coruna exploit kit shows outdated iOS devices face automated, scalable attacks that can turn compromised phones into corporate gateways.
Ransomware attacks surge 50% as industrial firms hit hardest
Last month
#
malware
#
data protection
#
ransomware
Global ransomware attacks jump 50% to 7,874 in 2025, with industrial firms bearing the brunt as criminal groups reshuffle their tactics.
Why cybersecurity needs better storytelling; and more women telling It
Last month
#
digital transformation
#
advanced persistent threat protection
#
risk & compliance
Cybersecurity's future hinges on clear storytelling - and more women's voices - to turn technical risks into business-critical narratives.
Tycoon 2FA phishing service disrupted in EU crackdown
Last month
#
ransomware
#
manufacturing
#
mfa
European authorities and tech firms have disrupted Tycoon 2FA, a major phishing service used to bypass MFA and hijack cloud accounts.
Slow patching leaves SMB endpoints exposed for weeks
Last month
#
it automation
#
risk & compliance
#
edr
Acronis finds SMBs patch Microsoft flaws in about eight days, but the slowest endpoints stay exposed to known bugs for over five weeks.
Microsoft warns of AI agent risks in Cyber Pulse brief
Last month
#
manufacturing
#
digital transformation
#
physical security
Microsoft's new Cyber Pulse briefing warns ungoverned AI agents and 'double agents' pose rising security and compliance risks for firms.
HP warns of AI-fuelled 'flat-pack' cyberattacks surge
Last month
#
malware
#
uc
#
phishing
HP reports a surge in AI-powered “flat-pack” cyberattacks as criminals trade sophistication for speed, low cost and mass customisation.
F5 Labs unveils monthly AI model security leaderboards
Last month
#
data protection
#
devops
#
application security
F5 Labs launches monthly AI security leaderboards, ranking popular models on new indices of risk, resilience and cost under live attack.
NCC warns ransomware risk persists despite January dip
Fri, 27th Feb 2026
#
ransomware
#
manufacturing
#
digital transformation
Ransomware cases dipped 17% in January, but NCC warns the threat remains high as Qilin targets critical sectors and tactics evolve.
ShinyHunters pivots to subdomain phishing & vishing
Fri, 27th Feb 2026
#
saas
#
mfa
#
cloud security
ShinyHunters shifts to subdomain-brand phishing and vishing on mobiles, bypassing domain checks to hijack SSO logins and SaaS sessions.