The MITRE Caldera for OT team introduced HVACSim, a software-only simulator that plugs into its open-source adversary emulation framework to lower the barriers to OT…
OT Insights CenterBringing Engineering on Board and Resetting IT Expectations Bringing Engineering on Board and Resetting IT Expectations Watch the webinar for a revealing deep…
Researchers from the ClearSky Team uncovered a targeted Russian cyber campaign against Ukraine, leveraging two previously unseen malware strains, BadPaw and MeowMeow. The attack begins…
OT Insights CenterWebinar: 2026 OT Cyber Threat Report Webinar: 2026 OT Cyber Threat Report In 2025, 57 cyber attacks caused real-world damage in heavy industry,…
For enterprises, being able to study data unlocks much more than new ways to make money. The modern enterprise tech stack is mind-bogglingly complex —…
Coruna is also notable for its use by three distinct hacking groups. Google first detected its use in February of last year in an operation…
Executive summary The January 2026 seizure of RAMP disrupted a major ransomware coordination hub, but it did not dismantle the ecosystem behind it. Instead, it…
Symantec researchers identified cyber activity linked to the Iranian advanced persistent threat group Seedworm across the networks of several U.S. organizations, with intrusions beginning in…
I. OVERVIEW Continuing the series of studies on exploiting the Bindlink API to tamper with Antivirus/EDRs. This time, I will use “bindflt.sys” to prevent…
ESET researchers have identified an Android malware implant that uses generative AI (GenAI) for persistence purposes. This malicious implant is an advanced version of VNCSpy,…
Why OT Defenses Often Start Too Late Industrial organizations are facing a growing paradox in cybersecurity. While operational technology (OT) environments are increasingly connected, most…
UPD 30.01.2026: Added technical details about the attack chain and more IoCs. On January 20, a supply chain attack has occurred, with the infected software…
