Fake shipment tracking scams are rapidly scaling across the world, exploiting the 161 billion annual parcel volume that fuels global e-commerce, according to threat intelligence provider Group-IB. The firm’s Threat Intelligence research team detected a spike in this type of… Read More "Researchers Warn of Global Surge in Fake Shipment Tracking Scams"
One year after its creation, the UK’s Cyber Monitoring Centre (CMC) is looking to expand to the US. The UK-based nonprofit was established by a team of experts in February 2025 to assess the economic and financial impact of major… Read More "UK Cyber Monitoring Centre Sets Its Sights on US Expansion"
APIs now represent the “dominant” attack surface for global organizations, with 87% registering a related security incident last year, according to Akamai. Now in its 12th year, the security vendor’s latest State of the Internet (SOTI) report was produced from… Read More "Average Number of Daily API Attacks Up 113% Annually"
Over half (54%) of UK companies were hit by nation state attacks last year as IT leaders grew increasingly fearful of AI-powered threats, according to a new report from Armis. The security vendor’s 2026 Armis Cyberwarfare Report was based on interviews with 1900… Read More "Surge in Nation State Attacks on UK Firms Amid Cyber Warfare Fears"
A method that could enable code execution through manipulated installation links in an AI development environment has been identified by security researchers. The technique, dubbed CursorJack by Proofpoint Threat Research, centres on the abuse of Model Context Protocol (MCP) deeplinks… Read More "CursorJack’ Attack Path Exposes Code Execution Risk in AI Development"
A new Android attack technique that manipulates the runtime environment instead of modifying applications has been identified. The method, discovered by CloudSEK researchers, uses the LSPosed framework to interfere with system-level processes, allowing attackers to hijack legitimate payment apps without… Read More "Android OS-Level Attack Bypasses Mobile Payment Security"
Custom-built AI applications are set to cause major headaches for security teams over the coming years, unless they can get involved in projects early on, Gartner has warned. The analyst predicted that by 2028, at least half of enterprise incident… Read More "AI Issues Will Drive Half of Incident Response Efforts by 2028, Says G"
Hundreds of GitHub repositories seemingly offering “free game cheats” deliver malware, including the Vidar infostealer, Acronis Threat Research Unit (TRU) has found. While the identified malicious repositories already target “virtually every major online game title,” the security researchers estimate the… Read More "Vidar Stealer 2.0 Exploits Fake Game Cheats on GitHub, Reddit"
AI and automation helped threat actors to rapidly accelerate attacks in 2025, collapsing the “predictive window” between vulnerability disclosure and exploitation, according to Rapid7. The security vendor’s new 2026 Global Threat Landscape Report is based on Rapid7 MDR incident response… Read More "AI-Enabled Adversaries Compress Time-to-Exploit – Infosecurity Magazine"
A cryptocurrency scam known as “ShieldGuard” has been dismantled after researchers identified it as a malicious browser extension designed to harvest sensitive user data. The operation, uncovered by Okta Threat Intelligence and described in an advisory published on March 17,… Read More "Crypto Scam “ShieldGuard” Dismantled After Malware Discovery"
