Anubis's real innovation isn't the ransomware — it's making destruction irreversible- 250
July 1, 2026
Anubis, a ransomware-as-a-service operation that emerged in late 2024 as a spinoff of the
China-Linked CL-STA-1062 Shifts From Taiwan to Critical Infrastructure Across Southeast Asia- 249
July 1, 2026
A China-linked threat group that spent years quietly attacking Taiwanese web-hosting infrastructure has, over the
The Microsoft bug leaker treating vulnerability disclosure as a countdown- 248
May 15, 2026
An anonymous researcher operating under the aliases Nightmare-Eclipse and Chaotic Eclipse has now released five Microsoft
Turla's botnet redesign is about surviving disruption, not just evading detection- 240
June 28, 2026
Russia's FSB-linked Turla group has rebuilt its longstanding Kazuar backdoor into something structurally different
Three times through the same door: FamousSparrow's patient campaign against Azerbaijan's energy sector- 239
December 25, 2025
A China-linked espionage group returned to the exact same compromised Microsoft Exchange server three separate times
Device code phishing didn't need new code — it needed a legitimate Microsoft login flow- 238
May 11, 2026
A technique security researchers first observed in isolated red-team and espionage use back in 2020 has,
An unclaimed breach at a critical drug-packaging supplier tests healthcare's newest fault line- 234
May 12, 2026
West Pharmaceutical Services, one of the world's largest suppliers of components for injectable medicine delivery,
When a ransomware gang gets ransomware'd: what The Gentlemen's leak reveals about the RaaS economy- 232
May 10, 2026
In early May 2026, one of the most prolific ransomware-as-a-service operations running today discovered
WannaCry at nine years: the day a stolen NSA tool became a lesson in negligence- 231
May 12, 2026
Nine years on, WannaCry remains the starkest illustration of a principle this publication returns to often: the
CISA's CI Fortify quietly concedes that eviction alone has failed- 222
May 6, 2026
The Cybersecurity and Infrastructure Security Agency has a new answer to a question it has spent three