A prolific hacking and cyber-espionage campaign which targeted organizations around the world for almost a decade has been disrupted by Google and its international partners. In a blog post, Google Threat Intelligence Group (GTIG) detailed the malicious activity by UNC2814,… Read More "Google Disrupts ‘Prolific’ and ‘Elusive’ China-Linked Hacking Campaign"
ENISA’s Updated Cybersecurity Methodology Aligns with NIS2 and EU Cybersecurity Act ENISA’s Cybersecurity Exercise Methodology helps organizations align with NIS2 and the EU Cybersecurity Act while improving readiness and resilience. The European Union Agency for Cybersecurity (ENISA) released its updated cybersecurity exercise methodology, providing organizations and… Read More "ENISA Cybersecurity Exercise Methodology Guide"
A “coordinated developer-targeting campaign” is using malicious repositories disguised as legitimate Next.js projects and technical assessments to trick victims into executing them and establish persistent access to compromised machines. “The activity aligns with a broader cluster of threats that use… Read More "Microsoft Warns Developers of Fake Next.js Job Repos Delivering In-Memory Malware"
The attackers wrote commands into spreadsheet cells and retrieved stolen data from them the same way. The malware polled the sheet every second for new instructions, wrote status updates back on task completion, and wiped the first 1,000 rows at… Read More "China-linked hackers used Google Sheets to spy on telecoms and governments across 42 countries"
Threat actors favored stealthy persistence and evasion over other techniques, in order to silently exfiltrate data for extortion, according to Picus Security. The security vendor analyzed over 1.1 million malicious files and more than 15.5 million actions in 2025 to… Read More "“Digital Parasite” Warning as Attackers Favor Stealth for Extortion"
When we talk about the human element in security, we should be talking about the CISOs running on four hours of sleep during an incident. The analysts pattern-matching across thousands of signals. The threat hunters who notice something slightly off… Read More "The farmers and the mercenaries: Rethinking the ‘human layer’ in security"
Government security agencies in the UK, US, Canada, Australia and New Zealand have urged Cisco customers to take immediate action to patch a critical zero-day bug in their SD-WAN kit that has been exploited since 2023. CVE-2026-20127 is an authentication… Read More "Global Cyber Agencies Urge Immediate Patching of Cisco SD-WAN Zero Day"
A new mobile spyware operation known as ZeroDayRAT has been documented targeting both Android and iOS devices. The cross-platform tool provides attackers with persistent access to personal communications, precise location data and banking activity. According to a new advisory published… Read More "New Mobile Spyware ZeroDayRAT Targets Android and iOS"
Ravie LakshmananFeb 26, 2026Vulnerability / Network Security A newly disclosed maximum-severity security flaw in Cisco Catalyst SD-WAN Controller (formerly vSmart) and Catalyst SD-WAN Manager (formerly vManage) has come under active exploitation in the wild as part of malicious activity that… Read More "Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access"
The rise of the AI-SOC In 2026, we are moving beyond AI copilots toward autonomous agents performing traditional security operations center (SOC) activities such as triaging alerts, investigating malicious activity, isolating hosts, and patching software on our behalf. The trend… Read More "5 trends that should top CISO’s RSA 2026 agendas"
