A small group of former Black Basta affiliates have targeted more than 100 employees across dozens of organizations to intrude network systems for potential data…
Indicators and detection Despite the use of stealth, the researchers were able to connect the dots with the help of independent research by @Xlab_qax, who…
The U.S. Environmental Protection Agency is seeking FY 2027 budget authority to expand its Drinking Water Infrastructure Resilience Grant Program to include dedicated cybersecurity funding.…
New data from Black & Veatch-Takepoint Research finds a persistent execution gap in the manner cybersecurity is integrated into industrial infrastructure, with 72% of organizations…
Across the Talos 2025 Year in Review, state-sponsored threat activity from China, Russia, North Korea, and Iran all had varying motivations, such as espionage, disruption, financial…
The intel teams here at Red Canary and Zscaler have seen some notable social engineering attacks recently. Bad actors get an employee email address and…
Stolen credentials accounted for 22% of known initial access vectors in 2025. It’s the most common way for attackers to breach a network, and once…
A newly discovered Android malware called Mirax has been quietly circulating in underground criminal forums since late 2025, posing a growing threat to mobile users…
A new Android banking trojan called Mirax is rapidly gaining traction in the cybercrime ecosystem, combining powerful remote access features with residential proxy capabilities to turn victims’…
Booking.com has begun contacting customers after confirming that a third party accessed parts of its reservation data. The company is describing the incident as a…
For the past few years, it’s escaped no one that levels of Internet and telephone fraud have skyrocketed. TIME reports that one in four adults worldwide lost…
Organizations that run DavMail to bridge standard mail clients to Microsoft Exchange or Office 365 received an update this week. Version 6.6.0 addresses a code-scanning…
