⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article reports on international sanctions against Russian cyber actors. The EU and UK targeted senior GRU officers and FSB entities, while the US sanctioned a VPN provider and individuals for ransomware facilitation.
At Black Hat USA 2026, Microsoft Security highlighted the evolving threat landscape where attackers increasingly exploit trust in software, services, and AI systems. Threat actors are targeting trusted tools, developer workflows, and supply chains, such as npm (Node package manager), to scale their attacks.
Microsoft will highlight emerging cybersecurity threats at Black Hat USA 2026, focusing on how attackers exploit trust in software supply chains, AI systems, and developer workflows. Key sessions include David Weston’s keynote on defending against scalable offensive capabilities and a talk by Aarti Borkar and Tanmay Ganacharya detailing npm supply chain attacks targeting Node.js ecosystems.
In June 2025, LevelBlue SpiderLabs published Tracing Blind Eagle to Proton66, in which we assessed with high confidence that Blind...
This article updates on the Blind Eagle threat actor's ongoing activities. The group has maintained its use of Russian bulletproof hosting and continues to evolve its toolkit.
Blind Eagle (APT-C-36, APT-Q-98, TAG-144, AguilaCiega), a threat actor targeting Latin America, continues to evolve its toolkit and infrastructure. In June 2025, LevelBlue SpiderLabs linked the group to Russian bulletproof hosting provider Proton66, where it migrated part of its VBScript delivery infrastructure.