Nation-State Cyber Threats
ESET documented Webworm, a China-aligned APT that pivoted from Asia to European governments. Its two new backdoors — EchoCreep and GraphWorm — run command-and-control entirely on Discord and Microsoft OneDrive, hiding inside the trusted cloud traffic every enterprise allowlists.
Threat Actors
Leaked database reveals a structured cybercrime market connecting access brokers to 14 RaaS affiliates targeting US government and finance sectors in 40% of listings. MOSCOW / WASHINGTON, D.C. — A massive leak of the RAMP (Ransomware Access and Market Place) database has pulled back the curtain on Russia’s most structured
Data Breaches
Quorum Cyber analysis reveals ransomware (+21%), hacktivism (+75%), and data breaches (+73%) converging on research-rich academic targets. EDINBURGH, UK — Global higher education is facing a "convergence of threats" as a new analysis from Quorum Cyber reveals a staggering 63% year-over-year increase in verified cyberattacks. Between
Nation-State Cyber Threats
17 international agencies issue a joint advisory revealing a strategic shift by Chinese actors toward commercially-maintained covert networks, enabling full cyber kill chains against global critical infrastructure. WASHINGTON, D.C. — In a massive display of intelligence community consensus, the National Security Agency (NSA), the FBI’s IC3, and the
Cyber Crime
Tyler Robert Buchanan, a Scottish national and pivotal figure in the ‘Scattered Spider’ cybercrime syndicate, has entered a guilty plea in U.S. federal court, marking the second guilty plea in the Scattered Spider case. Noah Michael Urban ("King Bob") was the first, pleading guilty in April 2025
Threat Intelligence
A joint forensic investigation has unmasked The Gentlemen, a rapidly expanding ransomware operation that leverages the SystemBC malware to automate enterprise-scale intrusions across more than 1,500 victims.
Threat Intelligence
In a stark assessment of the global threat landscape, the UK’s lead cyber official warns that a coalition of nation-state adversaries — supercharged by artificial intelligence — now poses an unprecedented risk to critical national infrastructure. Government is also racing to deploy that same AI internally — see how federal AI-
Fraud
A third cybersecurity "expert" has been sentenced to 70 months in federal prison for operating as an inside man for one of the world's most prolific ransomware cartels, using his position to facilitate extortions instead of preventing them. Angelo Martino, 41, of Land O'Lakes,
Trending
A persistent threat cluster known as Glassworm has significantly upgraded its arsenal, deploying a specialized "ZigDropper" to compromise software developers by infecting the very IDEs used to build modern applications. AMSTERDAM, NL — Security researchers have uncovered a major evolution in the tactics of the Glassworm threat campaign. Previously
Trending
A newly identified threat actor, UNC6783, is bypassing the "front door" of major corporations by targeting Business Process Outsourcing (BPO) firms. By leveraging fake Okta portals and hijacked Zendesk tickets, the group has successfully extorted dozens of high-value targets, exposing a critical failure in the Managed Perimeter.
Scattered Spider
Introduction to Scattered Spider Scattered Spider is a highly active hacking group, also known as 0ktapus, UNC3944, or Muddled Libra, that has rapidly evolved into one of the most dangerous threat actors targeting enterprises today. The group focuses its attack efforts on the target organization by conducting reconnaissance, impersonating employees,
Data Breaches
The European Commission has officially confirmed a cybersecurity intrusion targeting its cloud-based infrastructure, marking a significant escalation since initial reports of data theft surfaced last week. While EU officials are working to downplay the severity of the incident, the threat actor group known as "ShinyHunters" claims to