Threat Actors
Leaked database reveals a structured cybercrime market connecting access brokers to 14 RaaS affiliates targeting US government and finance sectors in 40% of listings. MOSCOW / WASHINGTON, D.C. — A massive leak of the RAMP (Ransomware Access and Market Place) database has pulled back the curtain on Russia’s most structured
Data Breaches
Quorum Cyber analysis reveals ransomware (+21%), hacktivism (+75%), and data breaches (+73%) converging on research-rich academic targets. EDINBURGH, UK — Global higher education is facing a "convergence of threats" as a new analysis from Quorum Cyber reveals a staggering 63% year-over-year increase in verified cyberattacks. Between November 2024 and
Nation-State Cyber Threats
17 international agencies issue a joint advisory revealing a strategic shift by Chinese actors toward commercially-maintained covert networks, enabling full cyber kill chains against global critical infrastructure. WASHINGTON, D.C. — In a massive display of intelligence community consensus, the National Security Agency (NSA), the FBI’s IC3, and the Cybersecurity
Cyber Crime
Tyler Robert Buchanan, a Scottish national and pivotal figure in the ‘Scattered Spider’ cybercrime syndicate, has entered a guilty plea in U.S. federal court, marking the second guilty plea in the Scattered Spider case. Noah Michael Urban ("King Bob") was the first, pleading guilty in April 2025
Threat Intelligence
A joint forensic investigation has unmasked "The Gentlemen," a rapidly expanding ransomware operation that has successfully leveraged the SystemBC malware to automate enterprise-scale intrusions across 1,500 victims. TEL AVIV, ISR — Security researchers have exposed the inner workings of a high-volume ransomware-as-a-Service (RaaS) affiliate known as The Gentlemen.
Threat Intelligence
In a stark assessment of the global threat landscape, the UK’s lead cyber official warns that a coalition of nation-state adversaries — supercharged by artificial intelligence — now poses an unprecedented risk to critical national infrastructure. LONDON, UK — The United Kingdom is facing a "perfect storm" of cybersecurity challenges
Fraud
In a staggering breach of professional ethics, a third cybersecurity "expert" has admitted to operating as an inside man for one of the world's most prolific ransomware cartels, using his position to facilitate extortions instead of preventing them. TAMPA, FL — The U.S. Department of Justice
Trending
A persistent threat cluster known as Glassworm has significantly upgraded its arsenal, deploying a specialized "ZigDropper" to compromise software developers by infecting the very IDEs used to build modern applications. AMSTERDAM, NL — Security researchers have uncovered a major evolution in the tactics of the Glassworm threat campaign. Previously
Trending
A newly identified threat actor, UNC6783, is bypassing the "front door" of major corporations by targeting Business Process Outsourcing (BPO) firms. By leveraging fake Okta portals and hijacked Zendesk tickets, the group has successfully extorted dozens of high-value targets, exposing a critical failure in the Managed Perimeter. MOUNTAIN
Scattered Spider
Introduction to Scattered Spider Scattered Spider is a highly active hacking group, also known as 0ktapus, UNC3944, or Muddled Libra, that has rapidly evolved into one of the most dangerous threat actors targeting enterprises today. The group focuses its attack efforts on the target organization by conducting reconnaissance, impersonating employees,
Data Breaches
The European Commission has officially confirmed a cybersecurity intrusion targeting its cloud-based infrastructure, marking a significant escalation since initial reports of data theft surfaced last week. While EU officials are working to downplay the severity of the incident, the threat actor group known as "ShinyHunters" claims to have
Data Breaches
Canada’s telecommunications landscape is reeling from a series of high-profile security incidents as both Rogers Communications and Freedom Mobile confirmed separate data breaches affecting thousands of customers. The sequential nature of these attacks has raised urgent questions regarding the systemic resilience of the nation’s critical communication infrastructure and