Initial access broker linked to weaponization of CitrixBleed2 flaw
1. Executive summary An initial access broker weaponized the CitrixBleed 2 vulnerability in a series of attacks across multiple organizations during the first half of 2026,
1. Executive summary An initial access broker weaponized the CitrixBleed 2 vulnerability in a series of attacks across multiple organizations during the first half of 2026,
1. Executive summary On 2026-07-10, the ransomware group "Deadlock" publicly claimed a compromise of Integra S.r.l. and L'Operosa
1. Executive summary On 2026-07-10, the ransomware group "Deadlock" publicly claimed a ransomware attack against EFCA, a Paris-based accounting firm specialising
1. Executive summary Microsoft Threat Intelligence has published detailed research on GigaWiper, a modular Golang-based Windows backdoor observed in intrusions since October 2025. GigaWiper consolidates
1. Executive summary A threat actor tracked by Okta as "O-UNC-066" is conducting voice-phishing (vishing) attacks against Microsoft 365 users across
TL;DR: We integrated urlquery.net as a second web scanning engine alongside urlscan.io in our MCP-powered phishing infrastructure pipeline. The re-run of
1. Executive summary On 10 July 2026, HM Treasury (HMT) designated the first four Critical Third Parties (CTPs) under the UK financial regulatory regime: Amazon Web
1. Executive summary On 2026-07-10, the ransomware actor "nova" publicly claimed a victim named Hynet, a UK-based provider of data storage
1. Executive summary Huntress is tracking a massive, automated password spray attack targeting Microsoft's Azure command-line interface (CLI), originating from IPv6 address range
1. Executive summary On 2026-07-09, the actor "cmdorganization" publicly claimed a ransomware attack against Finance Yorkshire (GB), a UK-based SME funding
1. Executive summary CISA ICS Advisory ICSA-26-190-02 discloses six vulnerabilities in Schneider Electric PowerChute Serial Shutdown (versions 1.4 and prior) running on
1. Executive summary Microsoft Threat Intelligence has detailed GigaWiper, a Golang-based modular backdoor first observed in October 2025 that integrates destructive wiper payloads, fake ransomware,