Share

Category: Industry News

Evolving Tactics in Phishing Attacks

Phishing attacks continue to evolve, with cybercriminals now using phishing-as-a-service (PhaaS) toolkits to create dynamic, real-time login pages customized for individual targets. Toolkits like LogoKit allow attackers to fetch logos and branding elements using legitimate services like Clearbit, giving phishing pages an air of authenticity. These campaigns often begin with emails designed to provoke urgency, […]

read more

Evolving Zero-Day Exploit Trends

Google’s Threat Intelligence Group reports a slight decline in zero-day exploitations in 2024 compared to 2023, crediting improved secure development practices by major software vendors. Exploits targeting internet browsers dropped by about a third, and mobile operating system vulnerabilities were halved. These results suggest that investments in exploit mitigations are paying off—at least in consumer-facing […]

read more

AI-Driven Surge in Cyber Threats

Fortinet’s 2025 Global Threat Landscape Report reveals a sharp escalation in cyber threats driven by AI, automation, and the commoditization of attack tools. Automated scanning surged by 16.7% globally in 2024, enabling attackers to proactively identify exposed infrastructure like SIP, RDP, and IoT protocols. Darknet marketplaces expanded access to exploit kits and compromised credentials, with […]

read more

Malware Surge via Proton66

Hackers are abusing the infrastructure of Russian bulletproof hosting provider Proton66 to launch global cyberattacks, including mass scanning, credential brute-forcing, and exploitation attempts. Trustwave SpiderLabs identified this surge in activity beginning in January 2025, noting that previously inactive IP addresses were involved in malicious activity. Ties between Proton66 and other bulletproof networks such as PROSPERO, […]

read more

FBI Cybersecurity Warnings

Ransomware attacks are on the rise, with threat actors like Clop, FunkSec, and Medusa leading a surge in cyber extortion campaigns. February 2025 saw a dramatic spike in victim disclosures, with Clop alone accounting for 35% of all names listed on data-leak sites. This resurgence follows the disruption of several ransomware gangs in late 2024, […]

read more

Ivanti VPNs at Risk

A critical vulnerability tracked as CVE-2025-22457 is actively being exploited by China-linked threat actors, putting over 5,000 Ivanti Connect Secure VPN instances at risk. The stack-based buffer overflow flaw, initially underestimated, enables remote code execution and has prompted the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to add it to its known exploited vulnerabilities catalog. […]

read more

Surviving Ransomware Attacks

Ransomware attacks have become a significant threat to businesses, capable of incapacitating operations within hours. According to Verizon’s 2024 Data Breach Investigations Report, one-third of all data breaches involve ransomware or similar extortion techniques, affecting 92% of industries. Notably, the 2021 Kaseya incident demonstrated how supply chain vulnerabilities can amplify ransomware’s impact across numerous organizations.​ […]

read more
1 2 3 4 12 13 14