1. Executive summary The Iranian-aligned actor tracked as Nimbus Manticore (also tracked as "Iranian Dream Job") has been attributed to two previously undocumented
1. Executive Summary On 2026-08-27 at 14:30 UTC, a UK recipient received a phishing email spoofing an Intuit QuickBooks payment notification. The email
1. Executive summary Kaspersky GReAT has documented a spear-phishing campaign by the Iran-linked actor Mirage Kitten (also tracked as UNC1549, Smoke Sandstorm, Nimbus Manticore)
1. Executive summary On 2026-08-31, the BrainCipher ransomware group listed crmeyer.com — a German (DE) organisation — on its leak site, claiming compromise and implying
1. Executive summary Censys ARC (researcher: Aidan Holland) has published a DFIR walkthrough — the two incidents are fictional, but the malware families and infrastructure observations are
1. Executive summary Kaspersky GReAT has documented a campaign of targeted cyber-espionage activity against the aviation, aerospace and FinTech sectors across the Middle East and
1. Executive summary On 2026-09-01, the ransomware operator "krybit" listed dmt-group.com (DMT Consulting Private Limited, an Indian-incorporated company, listed
1. Executive summary Berlin state government has refused to pay an extortion demand following a breach of its government network, discovered in mid-August 2026, with
1. Executive summary Unit 42 has disclosed "Spring Ring," a coordinated social-engineering operation active January–April 2026 that used external Microsoft Teams accounts
1. Executive summary On 30 August 2026, the ransomware operator "qilin" listed the UK company Absolute Consultancy Services (absolutecs.co.uk) as a victim
1. Executive summary On 30 August 2026, ransomware operator "thegentlemen" listed UK social impact consultancy MB Associates (mbassociates.org; legal entity Mandy Barnett Associates
1. Executive summary On 30 August 2026, ransomware operator "thegentlemen" listed UK construction subcontractor Brebur Ltd (breburltd.co.uk, Barnsley, South Yorkshire) as a