During that window, threat actors, whose ability to build exploit kits has been “wildly accelerated” by AI, likely had time to reverse engineer exploits from the open source codebase and take advantage of what used to seem like a reasonable… Read More "Attackers are weaponizing the gap between Chromium fixes and Chrome patches"
The war in Iran was less than 24 hours old when it produced a historic first: the deliberate targeting of commercial data centers. On March 1st, Iranian drones hit three Amazon Web Services (AWS) facilities in the United Arab Emirates… Read More "Cyber fallout from the Iran war: What to have on your radar"
Interpol has identified 263 suspects and secured 58 arrests in an eight-month operation targeting West African organized crime groups involved in cyber-enabled financial fraud and other crimes. Operation Jackal IV ran from November 2025 to June 2026 across 22 countries… Read More "Interpol Operation Jackal IV Identifies 263 Cybercrime Suspects"
ESET’s Jake Moore used smart glasses, deepfakes and face swaps to ‘hack’ widely-used facial recognition systems – and he’ll demo it all at RSAC 2026 13 Mar 2026 • , 2 min. read Facial recognition is increasingly embedded in everything… Read More "Face value: What it takes to fool facial recognition"
An Iranian-linked threat actor has expanded its malware toolset with a backdoor and reverse SSH tunneling utility, while newly identified infrastructure points to potential targeting across Europe and the Middle East. Group-IB Threat Intelligence began investigating Tortoiseshell after Kaspersky published… Read More "Tortoiseshell Expands Toolset With New Backdoor, SSH Tunnel"
In recent years, EDR killers have become one of the most commonly seen tools in modern ransomware intrusions: an attacker acquires high privileges, deploys such a tool to disrupt protection, and only then launches the encryptor. Besides the dominating Bring… Read More "EDR killers explained: Beyond the drivers"
Scattered Spider has been reclassified as a decentralized cybercrime collective composed of independent clusters rather than a single, organized threat group. Group-IB analysis, published on June 7, challenges the traditional view of the activity as one coordinated operation, arguing that… Read More "Scattered Spider’s Structure More Like a Cybercrime Collective"
Cybercriminals go after people’s personal information across every kind of online platform, including WhatsApp, Instagram, LinkedIn, Roblox, YouTube and Spotify, not to mention finance apps. No online account is off the table. If one of your own accounts falls victim,… Read More "Move fast and save things: A quick guide to recovering a hacked account"
A suspected China-aligned threat cluster has been exploiting vulnerable Roundcube mail servers at universities in the US and Canada to steal credentials and establish network access. New research from Proofpoint, published on June 7, tracked the activity under the name… Read More "Suspected Chinese Threat Group Targets Universities"
As IT infrastructure expands, visibility and control often lag behind – until an incident forces a reckoning 24 Mar 2026 • , 4 min. read Complexity is said to be the enemy of many things, but when it comes to… Read More "Cloud workload security: Mind the gaps"
