In mid‑2025, cybersecurity teams observed two sophisticated campaigns delivering Akira ransomware through distinctly different techniques. One involved misused Windows drivers following SonicWall VPN compromises; the other leveraged poisoned search results, leading to malware-laden IT tools being dr
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and Sandia National Laboratories released Thorium as an open‑source forensic analysis platform on July 31, 2025. The platform supports government, critical infrastructure, and private‑sector teams. According to officials, Thorium auto
Cisco Talos Incident Response recently uncovered a ransomware-as-a-service (RaaS) operation called "Chaos." This group specializes in attacking large organizations, stealing data, and demanding a ransom. It often threatens to leak victim data if the ransom goes unpaid, otherwise known as the double
On July 19, 2025, Microsoft's Security Response Center warned that multiple nation-state threat actors are actively exploiting two serious vulnerabilities in on-premises SharePoint servers. These flaws, namely CVE-2025-49706, a spoofing vulnerability, and CVE-2025-49704, a remote code execution issu
The United Kingdom's National Cyber Security Centre (NCSC) has uncovered a highly targeted and stealthy malware strain, dubbed Authentic Antics, that infiltrates Microsoft Outlook on Windows to trick victims into surrendering their Office login credentials and freshly minted OAuth 2.0 token. A
Cybersecurity experts at Morphisec report that Matanbuchus, launched as malware-as-a-service (MaaS) in 2021, has returned with an upgraded and powerful new version, Matanbuchus 3.0. The malware lets attackers rent a powerful loader that can install additional malicious tools on Windows computers, ac
Due to a set of newly discovered flaws, vehicles from major car brands like Mercedes-Benz, Volkswagen, and Škoda may be vulnerable to remote attacks via Bluetooth. Researchers have identified a group of security issues, collectively named "PerfektBlue", that could allow hackers to remotely take cont
SentinelOne's threat research team, led by Phil Stokes and Raffaele Sabato, has identified a sophisticated macOS malware campaign named NimDoor. This campaign, attributed to North Korean state-sponsored threat actors, specifically targets Web3 and cryptocurrency businesses. In a significant de
Qantas has confirmed a cyberattack that exposed the personal information of millions of customers. The breach originated not within the airline's own IT infrastructure but through a third-party platform used to support customer service operations. According to Qantas, the incident was detected and
Researchers have uncovered a sophisticated cyber-espionage campaign known as OneClik, which targets organizations in the energy, oil, and gas sectors. The attackers exploit Microsoft's ClickOnce deployment technology—a tool designed to streamline the installation and updating of Windows applications