Threat Actors

Ukraine's cyber defenders warn Russian hackers weaponized a Microsoft zero-day within 24 hours of public disclosure, targeting government agencies with...

The Cyber Express weekly round for the third week of 2026 covers FortiOS exploits, ransomware breaches, EU telecom rules, and...

Cyble’s 2025 Threat Landscape reveals ransomware growth, supply chain exploitation, and AI-driven tactics shaping the modern cybercrime ecosystem.

Fatemeh Sedighian Kashi and Mohammad Bagher Shirinkar maintain a close working relationship coordinating cyber operations targeting elections, US critical infrastructure...

The core of Dark Storm’s activity lies in complicated Network Denial-of-Service (T1498) and Endpoint Denial-of-Service (T1499) campaigns. 

The warning arrived on chat at 3:47 AM: "Immediately reinstall your server, erase traces, the German police are acting." Cybercriminals...

The IndonesianFoods worm published 43,000+ spam npm packages, highlighting automated supply chain attacks and the need for proactive cybersecurity.

Cyble researchers uncovered a sophisticated phishing operation targeting Central and Eastern European enterprises using self-contained HTML attachments embedded with malicious...

A newly identified loader dubbed “Caminho” (Portuguese for “path”) has emerged as a sophisticated Loader-as-a-Service platform that uses Least Significant...

Seven suspects are now in custody after a cross-border crackdown dismantled a cybercrime service that powered more than 3,000 online...