⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The agency said the latest attack came amid preparations to select a manager for seized corporate rights in IDS Ukraine, one of the country’s largest producers of bottled mineral water and beverages.
Security controls can block a familiar attack method while missing quieter ways to achieve the same objective. Picus Security's Blue Report 2026 shows how prevention rates can vary dramatically by technique and why behavioral testing is needed to uncover those gaps.
Written by: Alex Tselevich, Michael Maturi Introduction Adversarial misuse of AI has increased the risk of data theft and extortion events, because when proprietary source code is exposed, defenders must scramble to identify and patch vulnerabilities while attackers deploy machine-speed AI tools against them. By structuring the analysis process, enforcing skeptical validation steps, and injecting domain-specific human expertise directly into the pipeline, we’ve achieved a leap in efficacy.
Check Point Research has uncovered a large-scale operation called StopAndProtect that combines file encryption with data theft, abusing thousands of hacked WordPress websites as infrastructure. The infection chain begins with a ClickFix social-engineering technique that prompts victims to execute a PowerShell command, leading to multiple stages of downloaders and loaders.
A ransomware affiliate has been observed posing as an incident-recovery service to approach victims with offers of aid while secretly intending to divert ransom payments. The threat actor exploits the desperation of ransomware victims by offering fake recovery assistance, adding a new layer of social engineering to the ransomware attack lifecycle.
A new Python-based malware framework called TwinLoot takes living-off-the-land tactics to new heights of stealth, operating its entire command-and-control infrastructure from within trusted Microsoft cloud services. The modular, PyArmor-hardened implant steals credentials, achieves persistence, and routes its communications through SharePoint and Microsoft Teams.