Skip to content
Top 5 Critical Security Alerts
- Initial Access Broker Self-Patches Zero Days as Turf Control — A China-nexus threat actor exploits and patches Ivanti vulnerabilities to control victim networks. Read more
- US Treasury Sanctions BPH Provider Aeza Group — Aeza Group, linked to ransomware groups like BianLian and Lumma Stealer, faces U.S. sanctions. Read more
- Russian APT 'Gamaredon' Hits Ukraine With Fierce Phishing — Gamaredon APT targets Ukrainian government entities using spear-phishing and network-drive weaponization. Read more
- ClickFix Spin-Off Attack Bypasses Key Browser Safeguards — A new threat vector exploits browser HTML saving to bypass security and deliver malware. Read more
- North Korean Hackers Target Web3 with Nim Malware and Use ClickFix in BabyShark Campaign — North Korean actors target Web3 and crypto businesses with Nim-based malware, using process injection on macOS. Read more
Threat Intelligence (APT, malware, ransomware)
- Swiss government warns attackers have stolen sensitive data, after ransomware attack at Radix — Sensitive data was stolen from the Swiss government after a ransomware attack on a third-party service provider. Read more
- US Treasury Sanctions BPH Provider Aeza Group — Aeza Group, linked to ransomware groups like BianLian and Lumma Stealer, faces U.S. sanctions. Read more
- Russian APT 'Gamaredon' Hits Ukraine With Fierce Phishing — Gamaredon APT targets Ukrainian government entities using spear-phishing and network-drive weaponization. Read more
- North Korean Hackers Target Web3 with Nim Malware and Use ClickFix in BabyShark Campaign — North Korean actors target Web3 and crypto businesses with Nim-based malware, using process injection on macOS. Read more
- PDFs: Portable documents, or perfect deliveries for phish? — Callback phishing techniques leverage PDFs, VoIP anonymity, and QR codes. Read more
Security Breaches & Incidents
- Qantas Airlines Breached, Impacting 6M Customers — Passengers' personal information was accessed via a third-party platform, excluding passport or credit card details. Read more
Security Tools & Best Practices
- 1 Year Later: Lessons Learned From the CrowdStrike Outage — Organizations need resilience and anti-fragility to proactively respond to vulnerabilities and threats. Read more
- That Network Traffic Looks Legit, But it Could be Hiding a Serious Threat — Cyber threats mimic legitimate user behavior, requiring SOCs to differentiate between safe and dangerous traffic. Read more
Emerging Security Technologies (AI, XDR, CNAPP)
- Vercel's v0 AI Tool Weaponized by Cybercriminals to Rapidly Create Fake Login Pages at Scale — Threat actors are using Vercel's v0 AI tool to generate convincing fake sign-in pages for phishing. Read more