Security Feed

1. Executive summary Kaspersky GReAT has documented a campaign of targeted cyber-espionage activity against the aviation, aerospace and FinTech sectors across the Middle

1. Executive summary On 2026-09-01, the ransomware operator "krybit" listed dmt-group.com (DMT Consulting Private Limited, an Indian-incorporated

1. Executive summary Berlin state government has refused to pay an extortion demand following a breach of its government network, discovered in mid-August

1. Executive summary Unit 42 has disclosed "Spring Ring," a coordinated social-engineering operation active January–April 2026 that used external Microsoft

1. Executive summary On 30 August 2026, the ransomware operator "qilin" listed the UK company Absolute Consultancy Services (absolutecs.co.uk) as

1. Executive summary On 30 August 2026, ransomware operator "thegentlemen" listed UK social impact consultancy MB Associates (mbassociates.org; legal entity Mandy

1. Executive summary On 30 August 2026, ransomware operator "thegentlemen" listed UK construction subcontractor Brebur Ltd (breburltd.co.uk, Barnsley, South Yorkshire)

1. Executive summary An unattributed actor is running a "TerminalFix" campaign — a variant of the ClickFix social-engineering technique that tricks users

1. Executive summary ESET has identified a technique, named "GuardBreaker", in which a Russia-aligned actor deliberately embeds safety-triggering text — specifically

1. Executive summary On August 27, 2026, Manchester Airports Group (MAG) — operator of Manchester, London Stansted, and East Midlands airports — disclosed a data breach

1. Executive summary Kaspersky reports a campaign distributing the ValleyRAT backdoor disguised as a signed Chinese desktop-wallpaper adware application (QN Wallpaper), delivered via

1. Executive summary On 31 August 2026, the ransomware group operating under the name "incransom" listed the UK-registered lighting design firm