The rapid advancement of deepfakes is becoming a major challenge for sustaining trust in digital identity systems, the World Economic Forum (WEF) has warned Deepfake-generating technologies, and especially face-swapping tools, are enabling malicious actors to bypass know-your-customer (KYC) and remote verification processes, creating… Read More "WEF: Deepfake Face-Swapping Tools Are Creating Critical Risks"
Almost three dozen people have been arrested as part of multi-national law enforcement operation targeting the international cybercriminal group Black Axe. With support from Europol, the Spanish National Police, working alongside the Bavarian State Criminal Police Office, arrested suspects across… Read More "Europol Leads Global Crackdown on Black Axe Cybercrime Gang, 34 Arrest"
Key Takeaways Most Active Directory attacks succeed by abusing privileged accounts. Domain Admins are high-value targets and must be protected differently Privileged identity management reduces standing access and attack paths Active Directory security depends on visibility, control, and discipline Let’s… Read More "How to Prevent Active Directory Attacks by Securing Privileged Accounts"
Cybercriminals that use the BreachForums dark web site may soon have their identities exposed after a database related to the forum was leaked online. On Friday, a website named after the ShinyHunters hacking collective, shinyhunte[.]rs, released a Zip archive, “breachedforum.7z,”… Read More "BreachForums Database Leaked – Infosecurity Magazine"
The information technology (IT) workers associated with the Democratic People’s Republic of Korea (DPRK) are now applying to remote positions using real LinkedIn accounts of individuals they’re impersonating, marking a new escalation of the fraudulent scheme. “These profiles often have… Read More "DPRK Operatives Impersonate Professionals on LinkedIn to Infiltrate Companies"
Threat actors favored stealthy persistence and evasion over other techniques, in order to silently exfiltrate data for extortion, according to Picus Security. The security vendor analyzed over 1.1 million malicious files and more than 15.5 million actions in 2025 to… Read More "“Digital Parasite” Warning as Attackers Favor Stealth for Extortion"
Cybersecurity researchers have disclosed details of an emergent ransomware family dubbed Reynolds that comes embedded with a built-in bring your own vulnerable driver (BYOVD) component for defense evasion purposes within the ransomware payload itself. BYOVD refers to an adversarial technique… Read More "Reynolds Ransomware Embeds BYOVD Driver to Disable EDR Security Tools"
Even the Microsoft Defender Research Team, which detected WHD attacks on its customers before Christmas, was unsure exactly which combination had let attackers in: “Since the attacks occurred in December 2025 and on machines vulnerable to both the old and… Read More "SolarWinds WHD zero-days from January are under attack"
A high-volume phishing campaign delivering the long-running Phorpiex malware has been observed using emails with the subject line “Your Document,” a lure widely seen throughout 2024 and 2025. The messages include an attachment that appears to be a harmless document… Read More "Phorpiex Phishing Delivers Low-Noise Global Group Ransomware"
Are ransomware and encryption still the defining signals of modern cyberattacks, or has the industry been too fixated on noise while missing a more dangerous shift happening quietly all around them? According to Picus Labs’ new Red Report 2026, which… Read More "Inside the Rise of the Digital Parasite"
