1. Executive summary Check Point Research (CPR) has published a detailed analysis of "Cavern," a new modular .NET command-and-control (C2) framework deployed
1. Executive summary LevelBlue researchers have disclosed QuimaRAT, a novel Java-based remote access trojan offered as a malware-as-a-service (MaaS) product targeting Windows,
1. Executive summary A phishing campaign observed from early April to mid-May 2026 abuses the OAuth 2.0 Device Authorization Grant (Device Code Flow) to
1. Executive summary Sysdig's Threat Research Team has published findings on what they believe is the first documented end-to-end ransomware operation conducted
1. Executive summary A U.S. government entity — evidence points to Union County, Ohio — paid approximately $1 million (≈9.44 BTC) to a threat actor calling
1. Executive summary On 2026-07-04, the ransomware tracking site ransomware.live published a listing attributing a ransomware attack against Deutsche Bank (DE) to the
1. Executive summary The Contagious Interview campaign (MITRE G1052) has expanded into a new supply-chain attack cluster dubbed PolinRider, publishing 108 unique malicious packages and
1. Executive summary ESET published a threat-landscape assessment for SMBs noting that AI is lowering the barrier to entry for attackers — improving lure quality, scaling
1. Executive summary JFrog has identified a campaign distributing malicious npm packages that impersonate the legitimate rollup-plugin-polyfill-node project to deliver remote-access and
1. Executive summary Citizen Lab researchers have confirmed that the mobile phone of Stelios Kouloglou — a former Member of the European Parliament (MEP) who served on
1. Executive summary An incorrect authorization vulnerability in Microsoft Exchange Online permits an authenticated, remote attacker to elevate privileges over a network. The flaw was published
1. Executive summary A local privilege escalation vulnerability (CVE-2026-13079) exists in the WatchGuard Mobile VPN with SSL client for Windows, affecting versions up to