Critical Infrastructure
Darktrace's analysis of ZionSiphon — OT malware engineered to sabotage Israeli water systems — found the analyzed sample effectively non-functional: its own target-country check can never match, so the malware self-deletes instead of arming. No successful attack was observed.
Malware
A sophisticated new botnet, dubbed PowMix, is utilizing highly randomized communication patterns to bypass traditional network defenses, specifically targeting employees across the Czech Republic. PRAGUE, CZ — Security researchers from Cisco Talos have identified a new and resilient malware campaign, named PowMix, that has begun systematically targeting the Czech workforce. The
Supply Chain Attack
A sophisticated supply chain attack exploits the ‘Shell Commands’ plugin for Obsidian, delivering the PhantomPulse Trojan to high-value targets in the finance and cryptocurrency sectors. RESEARCH TRIANGLE PARK, NC — Security researchers have uncovered an elaborate malware campaign targeting users of the popular note-taking app, Obsidian. The campaign, dubbed
Cyber Attacks
Security researchers have identified a persistent campaign abusing the popular workflow automation tool n8n to deliver sophisticated malware via phishing emails, bypassing traditional gateway filters. LONDON — Since October 2025, a sophisticated threat actor has been exploiting the webhook functionality of n8n, an open-source workflow automation platform, to facilitate a
Trending
A deep-dive investigation by ESET Research reveals that prominent threat actors, including RansomHub, are expanding their toolkit of specialized malware designed to disable Endpoint Detection and Response (EDR) agents. BRATISLAVA, Slovakia — Security researchers at ESET have issued a comprehensive warning regarding the professionalization of "EDR Killers" — malicious
Vulnerabilities
As cryptocurrency adoption continues to grow, so does a lesser-known but highly impactful cyber threat: cryptojacking. Cryptojacking is a type of cyberattack in which cybercriminals hijack the computing resources of victims' devices to mine cryptocurrency without permission. Unlike traditional cyberattacks that focus on stealing data, cryptojacking silently hijacks
Cybersecurity 101
A clear guide to cyber threats and how to defend against them — the modern threat landscape, data breaches, DDoS, injection attacks, emerging threats, and the frameworks and best practices for defense.
Cybersecurity 101
Learn about the professional structure of cybercriminal syndicates and the latest strategies to protect your critical data assets.
Cybersecurity 101
Ransomware is malware that encrypts data and extorts payment. A practitioner's guide to how a modern attack unfolds stage by stage, double and triple extortion, the ransomware-as-a-service economy, notable 2026 groups, and the controls that actually prevent it.