1. Executive summary Progress Software has directed ShareFile customers to immediately manually shut down all Windows servers hosting on-premises Storage Zone Controllers (SZC) in response
1. Executive summary A 14-day log review of a low-traffic web host by SANS ISC has revealed a new category of internet-wide opportunistic
We took two C2 IP addresses from a malware news article and pivoted through Shodan, DNS, reverse MX lookups, certificate transparency, WHOIS, and MITRE ATT&
1. Executive summary The Gentlemen (aka Storm-2697) is a Ransomware-as-a-Service (RaaS) program active since at least July 2025, now ranked as the
1. Executive summary On 2026-07-11, the ransomware operator "thegentlemen" publicly claimed a compromise of BDO Greece (bdo.gr), an Athens-based audit,
1. Executive summary On 11 July 2026, the ransomware group "thegentlemen" publicly claimed a compromise of INTERNET AG (inet.de), a German IT service
1. Executive summary The Australian Cyber Security Centre (ACSC) has issued an alert regarding a large-scale, global exploitation campaign targeting vulnerabilities in content management systems
1. Executive summary Microsoft Threat Intelligence has published detailed analysis of GigaWiper, a Golang-based modular Windows backdoor first observed in compromised environments in October 2025.
1. Executive summary An initial access broker weaponized the CitrixBleed 2 vulnerability in a series of attacks across multiple organizations during the first half of 2026,
1. Executive summary On 2026-07-10, the ransomware group "Deadlock" publicly claimed a compromise of Integra S.r.l. and L'Operosa
1. Executive summary On 2026-07-10, the ransomware group "Deadlock" publicly claimed a ransomware attack against EFCA, a Paris-based accounting firm specialising
1. Executive summary Microsoft Threat Intelligence has published detailed research on GigaWiper, a modular Golang-based Windows backdoor observed in intrusions since October 2025. GigaWiper consolidates