1. Executive summary Unknown attackers gained two days of unauthorised access to Liechtenstein's Register of Beneficial Owners (RBO) beginning 29 July 2026, exfiltrating data
1. Executive summary Microsoft Threat Intelligence has disclosed "CaptiveCrunch," an ongoing campaign attributed to Storm-2945, a sub-cluster of the Midnight Blizzard group
1. Executive summary N-able N-central versions through 2026.3.1 contain an authentication bypass vulnerability (CVE-2026-18577, CVSS 8.2 HIGH, CWE-288)
1. Executive summary N-able N-central on-premises RMM servers are being actively exploited in the wild via CVE-2026-18577, an 8.2 HIGH
1. Executive summary A Chinese-speaking threat actor using the aliases "knaithe" and "KnYuan" orchestrated autonomous cyberattacks against internet-facing systems using
1. Executive summary CVE-2026-66066 (CVSS 9.5 CRITICAL, EPSS 2%, not in CISA KEV) is an insecure default initialization vulnerability (CWE-1188) in Ruby
1. Executive summary CrowdStrike's latest Threat Hunting Report documents a 89% rise in AI-enabled adversary activity during 2025, with AI infrastructure now serving
1. Executive summary On 2 August 2026, the actor "shinyhunters" publicly named Questel SAS (France, questel.com) as a ransomware victim, claiming exfiltration of
1. Executive summary On 2026-07-31, a lab infection of the Atomic MacOS (AMOS) stealer was generated and analysed by SANS ISC, distributed via a
1. Executive summary Since early May 2026, Microsoft has tracked an ongoing campaign dubbed "CaptiveCrunch" in which the actor Storm-2945 — assessed by Microsoft
1. Executive summary On 31 July 2026, the ransomware group "thegentlemen" publicly claimed a compromise of Premier Fiduciary (premierfiduciary[.]com), a UK-based global
1. Executive summary On 31 July 2026, the ransomware operator "dragonforce" publicly claimed a victim, Lamont Pridmore, a UK-based chartered accountancy practice operating