The North Korea-linked threat actor known as UNC1069 has been observed targeting the cryptocurrency sector to steal sensitive data from Windows and macOS systems with the ultimate goal of facilitating… Read More »North Korea-Linked UNC1069 Uses AI Lures to Attack Cryptocurrency Organizations
The information technology (IT) workers associated with the Democratic People’s Republic of Korea (DPRK) are now applying to remote positions using real LinkedIn accounts of individuals they’re impersonating, marking a… Read More »DPRK Operatives Impersonate Professionals on LinkedIn to Infiltrate Companies
Cybersecurity researchers have disclosed details of an emergent ransomware family dubbed Reynolds that comes embedded with a built-in bring your own vulnerable driver (BYOVD) component for defense evasion purposes within… Read More »Reynolds Ransomware Embeds BYOVD Driver to Disable EDR Security Tools
Are ransomware and encryption still the defining signals of modern cyberattacks, or has the industry been too fixated on noise while missing a more dangerous shift happening quietly all around… Read More »From Ransomware to Residency: Inside the Rise of the Digital Parasite
January 5, 2026, Seattle, USA — ZAST.AI announced the completion of a $6 million Pre-A funding round. This investment came from the well-known investment firm Hillhouse Capital, bringing ZAST.AI’s total… Read More »ZAST.AI Raises $6M Pre-A to Scale “Zero False Positive” AI-Powered Code Security
SmarterTools confirmed last week that the Warlock (aka Storm-2603) ransomware gang breached its network by exploiting an unpatched SmarterMail instance. The incident took place on January 29, 2026, when a… Read More »Warlock Ransomware Breaches SmarterTools Through Unpatched SmarterMail Server
The Netherlands’ Dutch Data Protection Authority (AP) and the Council for the Judiciary confirmed both agencies (Rvdr) have disclosed that their systems were impacted by cyber attacks that exploited the… Read More »Dutch Authorities Confirm Ivanti Zero-Day Exploit Exposed Employee Contact Data
Fortinet has released security updates to address a critical flaw impacting FortiClientEMS that could lead to the execution of arbitrary code on susceptible systems. The vulnerability, tracked as CVE-2026-21643, has… Read More »Fortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code Execution
The Cyber Security Agency (CSA) of Singapore on Monday revealed that the China-nexus cyber espionage group known as UNC3886 targeted its telecommunications sector. “UNC3886 had launched a deliberate, targeted, and… Read More »China-Linked UNC3886 Targets Singapore Telecom Sector in Cyber Espionage Campaign
Microsoft has revealed that it observed a multi‑stage intrusion that involved the threat actors exploiting internet‑exposed SolarWinds Web Help Desk (WHD) instances to obtain initial access and move laterally across… Read More »SolarWinds Web Help Desk Exploited for RCE in Multi-Stage Attacks on Exposed Servers