TA

19
Nov
North Korea’s KONNI Cluster Weaponizes Google’s Find My Device: A New Phase in DPRK Android Targeting- 117

North Korea’s KONNI Cluster Weaponizes Google’s Find My Device: A New Phase in DPRK Android Targeting- 117

November 18, 2025 North Korean operators from the KONNI activity cluster—affiliated with Kimsuky and APT37—have begun exploiting Google’
4 min read
19
Nov
UNC1549: A Middle Eastern Cyber-Espionage Campaign Targeting Global Aerospace and Defense- 112

UNC1549: A Middle Eastern Cyber-Espionage Campaign Targeting Global Aerospace and Defense- 112

November 18, 2025 The UNC1549 operation uncovered by Mandiant goes far beyond a routine cyber incident. It illustrates how modern
4 min read
19
Nov
Everest Ransomware Group: Evolution, Modus Operandi, and Major Operations- 111

Everest Ransomware Group: Evolution, Modus Operandi, and Major Operations- 111

November 17, 2025 Since emerging in late 2020, the Everest ransomware group has evolved into a multifaceted and persistent cyber-
4 min read
19
Nov
DDoSia Targets Denmark: A Clear Look at the Threat- 109

DDoSia Targets Denmark: A Clear Look at the Threat- 109

November 17, 2025 Denmark has recently experienced a major DDoS attack by a group named DDoSia, disrupting various critical online
1 min read
18
Nov
CrowdStrike Reports North America and Europe as Leading Targets for Ransomware Attacks- 107

CrowdStrike Reports North America and Europe as Leading Targets for Ransomware Attacks- 107

November 17, 2025 CrowdStrike's analysis highlights that North America and Europe are increasingly targeted by ransomware attacks, with
3 min read
18
Nov
China's Cyber Shadows Exposed: Inside the KnownSec Leak- 106

China's Cyber Shadows Exposed: Inside the KnownSec Leak- 106

November 16, 2025 The KnownSec - Chinese security firm - data breach has exposed vital details about China's cyber espionage
2 min read
14
Nov
Newly identified Android spyware appears to be from a commercial vendor- 99

Newly identified Android spyware appears to be from a commercial vendor- 99

November 7, 2025 The LANDFALL spyware, which exploited a zero-day vulnerability in Samsung Galaxy devices, was likely delivered through
1 min read
14
Nov
Attackers abuse Gemini AI to develop ‘Thinking Robot’ malware and data processing agent for spying purposes- 89

Attackers abuse Gemini AI to develop ‘Thinking Robot’ malware and data processing agent for spying purposes- 89

November 5, 2025 The integration of AI technologies like Gemini in malware development represents a significant evolution in cyber threats
1 min read
14
Nov
Threat Actors Leveraging RDP Credentials to Deploy Cephalus Ransomware- 85

Threat Actors Leveraging RDP Credentials to Deploy Cephalus Ransomware- 85

November 7, 2025 Cephalus ransomware is leveraging stolen RDP credentials to infiltrate organizations effectively. This new threat highlights the importance
2 min read
18
Sep
Rearming the Shadows: The Next Era of Botnets and Their Geopolitical Threat- 68

Rearming the Shadows: The Next Era of Botnets and Their Geopolitical Threat- 68

September 15, 2025 Botnets—vast networks of compromised internet-connected devices—have evolved from crude tools for knocking websites offline
5 min read