A new variant of the TrickMo Android banking trojan has moved its primary command-and-control (C2) transport onto The Open Network (TON) Blockchain, routing communications through the decentralized overlay’s .adnl identities to make traditional domain takedowns largely ineffective. The variant, identified… Read More "TrickMo Variant Routes Android Trojan Traffic Through TON"
Anthropic has announced two new security features for its Claude AI: a self-hosted sandbox and a new security guidance plugin. The sandbox, currently in public beta, was announced at Anthorpic’s Code w/ Claude event in London this week. According to… Read More "Anthropic Releases New Claude Sandbox, Security Guidance Plugin"
Cyble Recognized in the 2026 Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies — and What Cyble Feels It Means for the Next Era of Threat Intel A note from our CEO on the recognition, what we believe it signals about the category, and where we go from here. This morning, Cyble was… Read More "Cyble Recognized In 2026 Gartner® Magic Quadrant™"
A set of newly identified vulnerabilities in the Linux security module AppArmor could allow attackers to gain root access, bypass system protections and trigger service outages across millions of systems. The issues, collectively named ‘CrackArmor,’ were discovered by the Qualys… Read More "CrackArmor Flaws Expose Linux Systems to Privilege Escalation"
Cyble analyzes OverlayPhantom, an Android banking trojan targeting 180+ apps across 10 countries, stealing credentials via fake overlays and real-time screen streaming. Executive Summary Cyble Research and Intelligence Labs (CRIL) has identified a novel Android banking trojan, dubbed OverlayPhantom, actively… Read More "OverlayPhantom-android-banking-trojan-hiding In Plain Sight"
Fake shipment tracking scams are rapidly scaling across the world, exploiting the 161 billion annual parcel volume that fuels global e-commerce, according to threat intelligence provider Group-IB. The firm’s Threat Intelligence research team detected a spike in this type of… Read More "Researchers Warn of Global Surge in Fake Shipment Tracking Scams"
One year after its creation, the UK’s Cyber Monitoring Centre (CMC) is looking to expand to the US. The UK-based nonprofit was established by a team of experts in February 2025 to assess the economic and financial impact of major… Read More "UK Cyber Monitoring Centre Sets Its Sights on US Expansion"
However, a new SANS Institute research paper warns that, in certain conditions, an attacker could leverage the new function to disable all user accounts. The lesson, said Johannes Ullrich, the institute’s dean of research, is that autonomous AI action tools… Read More "Microsoft previews automatic device isolation in Defender for Endpoint"
APIs now represent the “dominant” attack surface for global organizations, with 87% registering a related security incident last year, according to Akamai. Now in its 12th year, the security vendor’s latest State of the Internet (SOTI) report was produced from… Read More "Average Number of Daily API Attacks Up 113% Annually"
Over half (54%) of UK companies were hit by nation state attacks last year as IT leaders grew increasingly fearful of AI-powered threats, according to a new report from Armis. The security vendor’s 2026 Armis Cyberwarfare Report was based on interviews with 1900… Read More "Surge in Nation State Attacks on UK Firms Amid Cyber Warfare Fears"
