cyber news

CERT-In’s CRAFTY FALCON Advisory: AI Is the Accelerant, Your Payment APIs Are the Target

cyber news /

CERT-In’s CRAFTY FALCON Advisory: AI Is the Accelerant, Your Payment APIs Are the Target 2026-11-11 at 13:19 By Mihir Bagwe CERT-In’s critical advisory, last week, gives a name to the campaign draining Indian fintechs: CRAFTY FALCON, an “AI-assisted financial threat actor” that moves money by calling its victims’ own payment and disbursement APIs. Organizations that […]

CERT-In’s CRAFTY FALCON Advisory: AI Is the Accelerant, Your Payment APIs Are the Target Read More »

AI-Powered Ransomware Is Coming for UK Critical Infrastructure, and Europe Is Already the Testing Ground

cyber news, Ransomware /

AI-Powered Ransomware Is Coming for UK Critical Infrastructure, and Europe Is Already the Testing Ground 2026-11-05 at 10:30 By Ashish Khaitan Overview  The UK’s National Cyber Security Centre (NCSC) has put a date on a threat that security teams across Europe have been bracing for. In its 2026 Annual Review, The State of the Cyber […]

AI-Powered Ransomware Is Coming for UK Critical Infrastructure, and Europe Is Already the Testing Ground Read More »

The GhostX Ecosystem: Forged in Transit, Licensed to Deceive

cyber news, fake app, infostealer, phishing /

The GhostX Ecosystem: Forged in Transit, Licensed to Deceive 2026-10-15 at 11:44 By rohansinhacyblecom Executive Summary Cyble has continued tracking GhostBat RAT activity targeting Android users in India since its initial identification in October 2025. Recent investigations into malicious mParivahan and eChallan-themed applications revealed a broader operator-controlled ecosystem that we track as GhostX. Analysis of […]

The GhostX Ecosystem: Forged in Transit, Licensed to Deceive Read More »

“Don’t Get Played”: TOKEN2049 Security Event Faces Remote-Access Scam Allegations

cyber news, cybersecurity /

“Don’t Get Played”: TOKEN2049 Security Event Faces Remote-Access Scam Allegations 2026-10-13 at 17:10 By Ashish Khaitan A crypto security event that promised to teach attendees how to avoid scams is now the subject of scam allegations. The gathering, branded “Don’t Get Played,” was held as a side event during TOKEN2049 week in Singapore and co-hosted […]

“Don’t Get Played”: TOKEN2049 Security Event Faces Remote-Access Scam Allegations Read More »

Why APAC Enterprises Need Real-Time Threat Intelligence as Singapore, Malaysia, and Thailand Tighten Cyber Compliance in 2026

cyber news /

Why APAC Enterprises Need Real-Time Threat Intelligence as Singapore, Malaysia, and Thailand Tighten Cyber Compliance in 2026 2026-09-17 at 12:57 By Ashish Khaitan Cybersecurity compliance APAC 2026 has moved from guidance to enforcement across three of Southeast Asia’s largest economies, almost in step. Singapore’s Cyber Security Agency issued an updated Cybersecurity Code of Practice 2026 for […]

Why APAC Enterprises Need Real-Time Threat Intelligence as Singapore, Malaysia, and Thailand Tighten Cyber Compliance in 2026 Read More »

Cyble Introduces Major Upgrade to its Executive Monitoring Module

cyber news /

Cyble Introduces Major Upgrade to its Executive Monitoring Module 2026-09-10 at 15:26 By Mihir Bagwe Cyble has rolled out a significant upgrade to Executive Monitoring inside Cyble Vision, bringing unified findings, AI-driven scoring, and expanded alerting together in a single protection suite. Executive monitoring has historically meant stitching together several things at once. An impersonation […]

Cyble Introduces Major Upgrade to its Executive Monitoring Module Read More »

Qatar’s Digital Boom Has a Blind Spot: What the 2025-26 Threat Data Is Telling Us

cyber news /

Qatar’s Digital Boom Has a Blind Spot: What the 2025-26 Threat Data Is Telling Us 2026-09-07 at 16:22 By Mihir Bagwe Qatar is racing toward a knowledge-based, fully digital economy. Smart infrastructure, cloud-first government services, a financial sector that’s increasingly API-driven, and critical energy assets like QatarEnergy’s LNG operations layering more connected OT/ICS systems every […]

Qatar’s Digital Boom Has a Blind Spot: What the 2025-26 Threat Data Is Telling Us Read More »

Ransomware Threats in Europe H1 2026: A Deep Dive into Regional Attack Patterns and Dominant Threat Actors

APT, cyber news, cybersecurity, Dark Web Monitoring, Europe, Ransomware, Ransomware Attacks, Ransomware Insights, Ransomware Threats, Threat Actors, Threat Intelligence, Threat Landscape Reports /

Ransomware Threats in Europe H1 2026: A Deep Dive into Regional Attack Patterns and Dominant Threat Actors 2026-08-07 at 13:58 By Mihir Bagwe Europe faced a ransomware onslaught in the first half of 2026 that sets a troubling precedent for the remainder of the year. According to Cyble Research and Intelligence Labs (CRIL), the region […]

Ransomware Threats in Europe H1 2026: A Deep Dive into Regional Attack Patterns and Dominant Threat Actors Read More »

APTs Top the List of Most Active Threat Actors in H1 2026

cyber news, Threat Actor, Threat Intelligence, Threat Landscape Reports /

APTs Top the List of Most Active Threat Actors in H1 2026 2026-07-27 at 15:38 By Ashish Khaitan You may have heard your peers say, “Cybercrime has become industrialized.” But did you have any proof?  We do.  Cyble Research and Intelligence Labs (CRIL) closed out its tracking for the first half of 2026 with a deep analysis […]

APTs Top the List of Most Active Threat Actors in H1 2026 Read More »

Mid-Year Threat Trends: What H1 2026 Signals for the Rest of the Year

cyber news, Threat Intelligence, Threat Landscape Reports /

Mid-Year Threat Trends: What H1 2026 Signals for the Rest of the Year 2026-07-06 at 15:59 By Ashish Khaitan The first half of 2026 has given security teams little room to breathe. Ransomware operators kept up a punishing pace. If that wasn’t enough, access brokers turned network intrusions into a marketplace, and nation-state activity blurred further into hacktivism […]

Mid-Year Threat Trends: What H1 2026 Signals for the Rest of the Year Read More »

Glitch SPY: An Emerging Android RAT Distributed Through a Fake Polish Rental App

Android, cyber news, Malware, trojan /

Glitch SPY: An Emerging Android RAT Distributed Through a Fake Polish Rental App 2026-06-30 at 12:58 By rohansinhacyblecom Executive Summary Cyble Research and Intelligence Labs identified an emerging Android malware family tracked as Glitch SPY, distributed through a fraudulent Polish apartment and house rental platform designed to lure users into downloading an Android APK. Based […]

Glitch SPY: An Emerging Android RAT Distributed Through a Fake Polish Rental App Read More »

Operation FanTrap: Inside the FIFA 2026 Fraud Ecosystem

cyber news, cybersecurity, darkweb, OSINT, phishing /

Operation FanTrap: Inside the FIFA 2026 Fraud Ecosystem 2026-06-18 at 17:05 By Ashish Khaitan Executive Summary  The FIFA World Cup 2026 has become more than a global sporting event. It has evolved into a large-scale cybercrime opportunity exploited by threat actors through a coordinated ecosystem of fraudulent domains, social media channels, messaging platforms, pirated streaming […]

Operation FanTrap: Inside the FIFA 2026 Fraud Ecosystem Read More »

FIFA World Cup 2026 Scams Are Already Active: Fake Domains, Phishing Sites, and How to Stay Safe

cyber news, cybersecurity, Threat Intelligence /

FIFA World Cup 2026 Scams Are Already Active: Fake Domains, Phishing Sites, and How to Stay Safe 2026-06-10 at 17:24 By Ashish Khaitan The FIFA World Cup 2026 kicks off on June 11, and the world’s biggest sporting event is drawing more than just fans — it is already attracting a wave of cybercriminals targeting […]

FIFA World Cup 2026 Scams Are Already Active: Fake Domains, Phishing Sites, and How to Stay Safe Read More »

OverlayPhantom: The Android Banking Trojan Hiding in Plain Sight

Android, Credential Harvesting, cyber news, Malware, phishing, spyware, trojan /

OverlayPhantom: The Android Banking Trojan Hiding in Plain Sight 2026-05-27 at 09:24 By rohansinhacyblecom Executive Summary Cyble Research and Intelligence Labs (CRIL) has identified a novel Android banking trojan, dubbed OverlayPhantom, actively distributed in the wild via malicious URLs. The malware employs a two-stage infection chain, using a dropper application that impersonates trusted platforms, including […]

OverlayPhantom: The Android Banking Trojan Hiding in Plain Sight Read More »

JOMANGY: INJ3CTOR3’s Self-Healing FreePBX Toll Fraud Campaign

cyber news, cybercrime, Malware /

JOMANGY: INJ3CTOR3’s Self-Healing FreePBX Toll Fraud Campaign 2026-05-21 at 16:56 By rohansinhacyblecom Executive Summary Cyble Research & Intelligence Labs (CRIL) has identified an active FreePBX exploitation campaign, with high confidence tied to INJ3CTOR3, an actor with a documented history of targeting VoIP infrastructure for financial gain since 2019. The campaign deploys a multi-stage Bash dropper […]

JOMANGY: INJ3CTOR3’s Self-Healing FreePBX Toll Fraud Campaign Read More »

GCC Cyber 2026: How Digital Banking Expansion Is Creating a New Attack Surface Attackers Are Already Exploiting

attack surface management, cyber news, cybersecurity, GCC /

GCC Cyber 2026: How Digital Banking Expansion Is Creating a New Attack Surface Attackers Are Already Exploiting 2026-05-15 at 17:46 By Ashish Khaitan The Gulf Cooperation Council (GCC) region has spent the last several years building one of the world’s most ambitious digital economies. Across Bahrain, Kuwait, Oman, Qatar, Saudi Arabia, and the UAE, governments […]

GCC Cyber 2026: How Digital Banking Expansion Is Creating a New Attack Surface Attackers Are Already Exploiting Read More »

Cyble Recognized in the 2026 Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies — and What Cyble Feels It Means for the Next Era of Threat Intel

cyber news /

Cyble Recognized in the 2026 Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies — and What Cyble Feels It Means for the Next Era of Threat Intel 2026-05-07 at 13:26 By Keethana Cyble This morning, Cyble was recognized in the 2026 Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies as a Challenger.  I want to use this post for two things. First, to thank the people who got us here. Second, […]

Cyble Recognized in the 2026 Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies — and What Cyble Feels It Means for the Next Era of Threat Intel Read More »

Third-Party Breaches Without Breaches: How Attackers Use Trusted Access to Bypass US Enterprise Defenses

attack surface management, cyber news, data breach /

Third-Party Breaches Without Breaches: How Attackers Use Trusted Access to Bypass US Enterprise Defenses 2026-05-06 at 18:37 By Ashish Khaitan The modern enterprise is no longer breached in the traditional sense. Firewalls remain intact; endpoints appear compliant, and credentials are often never “stolen” in the usual way. Yet attackers still get in—and stay in. The difference lies […]

Third-Party Breaches Without Breaches: How Attackers Use Trusted Access to Bypass US Enterprise Defenses Read More »

Cyble Named a Challenger in the 2026 Gartner® Magic Quadrant™ for Cyber Threat Intelligence

cyber news /

Cyble Named a Challenger in the 2026 Gartner® Magic Quadrant™ for Cyber Threat Intelligence 2026-05-04 at 21:07 By Cyble Recognized for Completeness of Vision and Ability to Execute We are excited to share that Cyble has been recognized as a Challenger in the 2026 Gartner® Magic Quadrant™ for Cyber Threat Intelligence. Check back for a […]

Cyble Named a Challenger in the 2026 Gartner® Magic Quadrant™ for Cyber Threat Intelligence Read More »

Scroll to Top