Over half (54%) of UK companies were hit by nation state attacks last year as IT leaders grew increasingly fearful of AI-powered threats, according to a new report from Armis. The security vendor’s 2026 Armis Cyberwarfare Report was based on interviews with 1900… Read More "Surge in Nation State Attacks on UK Firms Amid Cyber Warfare Fears"
Social media influencers can provide reach and trust for scams and malware distribution. Robust account protection is key to stopping the fraudsters. 25 Nov 2025 • , 4 min. read It’s not an easy time to be an influencer. Brands… Read More "How cybercriminals are targeting content creators"
A method that could enable code execution through manipulated installation links in an AI development environment has been identified by security researchers. The technique, dubbed CursorJack by Proofpoint Threat Research, centres on the abuse of Model Context Protocol (MCP) deeplinks… Read More "CursorJack’ Attack Path Exposes Code Execution Risk in AI Development"
Planning a big night out at Madison Square Garden? Have fun—but don’t say we didn’t warn you. A WIRED investigation this week revealed new details about the private surveillance state instituted by MSG owner Jim Dolan and his head of… Read More "It Takes 2 Minutes to Hack the EU’s New Age-Verification App"
Threat actors have migrated to other phishing-as-a-service (PhaaS) platforms after Tycoon 2FA’s disruption and are reusing its tools, cybersecurity firm Barracuda Networks says. Active since at least 2023, Tycoon 2FA allows threat actors to launch phishing attacks, bypass two-factor authentication,… Read More "Tycoon 2FA Loses Phishing Kit Crown Amid Surge in Attacks"
ESET researchers have identified new MuddyWater activity primarily targeting organizations in Israel, with one confirmed target in Egypt. MuddyWater, also referred to as Mango Sandstorm or TA450, is an Iran-aligned cyberespionage group known for its persistent targeting of government and… Read More "MuddyWater: Snakes by the riverbank"
A new Android attack technique that manipulates the runtime environment instead of modifying applications has been identified. The method, discovered by CloudSEK researchers, uses the LSPosed framework to interfere with system-level processes, allowing attackers to hijack legitimate payment apps without… Read More "Android OS-Level Attack Bypasses Mobile Payment Security"
Ravie LakshmananApr 18, 2026Money Laundering / Regulatory Compliance Grinex, a Kyrgyzstan-incorporated cryptocurrency exchange sanctioned by the U.K. and the U.S. last year, said it’s suspending operations after it blamed Western intelligence agencies for a $13.74 million hack. The exchange said… Read More "$13.74M Hack Shuts Down Sanctioned Grinex Exchange After Intelligence Claims"
Identity is effectively the new network boundary. It must be protected at all costs. 04 Dec 2025 • , 4 min. read What do M&S and Co-op Group have in common? Aside from being among the UK’s most recognizable high… Read More "Why identity is critical to improving cybersecurity posture"
Google has started the rollout of a new Android developer verification system designed to reduce malicious apps and improve platform security, with global enforcement planned in the coming years. The system, outlined by the tech giant in a blog post, requires… Read More "Google Introduces Android Dev Verification Amid Openness Debate"
