Threat Intelligence

Trojanized CPUID HWMonitor Installer Delivers Fileless .NET Payload via Obfuscated IPv6 Scriptlet

Emerging Threats, Threat Intelligence /

Trojanized CPUID HWMonitor Installer Delivers Fileless .NET Payload via Obfuscated IPv6 Scriptlet 2026-04-11 at 02:20 By Sean Shirley Overview Recent reporting has identified a trojanized version of the CPUID HWMonitor installer being used to deliver a multi-stage, fileless malware chain leveraging trusted Windows binaries. Upon execution, the installer initiates a sequence involving PowerShell, MSBuild, and […]

Trojanized CPUID HWMonitor Installer Delivers Fileless .NET Payload via Obfuscated IPv6 Scriptlet Read More »

Err-Hiding and Seek: How ErrTraffic v3 Leverages EtherHiding in ClickFix Campaign

Emerging Threats, Threat Intelligence, Vulnerabilities /

Err-Hiding and Seek: How ErrTraffic v3 Leverages EtherHiding in ClickFix Campaign 2026-04-09 at 16:17 By King Orande and Cris Tomboc TLP: AMBER+STRICT The LevelBlue SpiderLabs team examined the latest version of ErrTraffic, which emerged in early 2026. In a recently observed campaign, the team found that ErrTraffic primarily targets WordPress websites by deploying a PHP backdoor script […]

Err-Hiding and Seek: How ErrTraffic v3 Leverages EtherHiding in ClickFix Campaign Read More »

Dual-Brain Architecture: The Cybersecurity AI Innovation That Changes Everything

AI in Cybersecurity, cyberattack, cybersecurity, Threat Intelligence /

Dual-Brain Architecture: The Cybersecurity AI Innovation That Changes Everything 2026-04-08 at 15:45 By Ashish Khaitan Cybersecurity has always been a race, but it is no longer a fair one. Attackers now operate at machine speed, orchestrating campaigns that evolve in seconds, while many defense teams still rely on workflows measured in hours or days. This widening gap […]

Dual-Brain Architecture: The Cybersecurity AI Innovation That Changes Everything Read More »

What managing partners should ask AI vendors before signing any contract

Artificial Intelligence, CISO, cyber risk, cybersecurity, Data Protection, Don't miss, Features, Hot stuff, News, opinion, privileged identity, Risk Management, security controls, strategy, Threat Intelligence /

What managing partners should ask AI vendors before signing any contract 2026-04-08 at 09:28 By Mirko Zorz In this Help Net Security interview, Kumar Ravi is the Chief Security & Resilience Officer at TMF Group, argues that over-privileged access and weak workflow controls pose more danger than ransomware attacks, precisely because they accumulate quietly and […]

What managing partners should ask AI vendors before signing any contract Read More »

Mobile Attack Surface Expands as Enterprises Lose Control

attack surface management, mobile, Mobile & Wireless, Threat Intelligence /

Mobile Attack Surface Expands as Enterprises Lose Control 2026-04-03 at 14:30 By Kevin Townsend Shadow AI embedded in everyday apps, combined with outdated mobile devices and zero-click exploits, is creating a new and largely unseen mobile risk. The post Mobile Attack Surface Expands as Enterprises Lose Control appeared first on SecurityWeek. This article is an […]

Mobile Attack Surface Expands as Enterprises Lose Control Read More »

How Cyble Blaze AI Predicts Cyber Threats 6 Months in Advance Using Agentic Intelligence

AI in Cybersecurity, cyber news, Threat Intelligence /

How Cyble Blaze AI Predicts Cyber Threats 6 Months in Advance Using Agentic Intelligence 2026-04-01 at 18:56 By Ashish Khaitan Modern cybersecurity has a timing problem. Attackers move at machine speed, while many defenses still depend on human-led investigation cycles. This mismatch leaves a dangerous window where threats can spread before they are even understood. […]

How Cyble Blaze AI Predicts Cyber Threats 6 Months in Advance Using Agentic Intelligence Read More »

The Energy Sector’s Ransomware Nightmare: Why Critical Infrastructure Can’t Catch a Break

cybersecurity, Ransomware, Ransomware Insights, Threat Intelligence /

The Energy Sector’s Ransomware Nightmare: Why Critical Infrastructure Can’t Catch a Break 2026-03-26 at 12:32 By Ashish Khaitan Let’s talk about the sector that keeps our lights on, water running, and industries humming—and why it’s become ransomware’s favorite target.  In 2025, the global energy and utilities sector faced 187 confirmed ransomware attacks. Not attempts. Confirmed, successful intrusions where attackers locked systems, stole […]

The Energy Sector’s Ransomware Nightmare: Why Critical Infrastructure Can’t Catch a Break Read More »

AI SOC vendors are selling a future that production deployments haven’t reached yet

agentic AI, Artificial Intelligence, Aunoo AI, automation, CISO, Claude Code, code analysis, Cybanetix, Don't miss, Features, Gartner, generative AI, Hot stuff, LLMs, News, opinion, Reddit, report, security operations, SOC, strategy, Threat Intelligence /

AI SOC vendors are selling a future that production deployments haven’t reached yet 2026-03-26 at 12:32 By Mirko Zorz Vendors selling AI-powered security operations platforms have built their pitches around a consistent set of promises: autonomous threat investigation, dramatic reductions in analyst workload, and an accelerating path toward humanless operations. Practitioners buying and deploying those […]

AI SOC vendors are selling a future that production deployments haven’t reached yet Read More »

Azure ServiceBus WebSockets as a C2 Channel

Threat Intelligence /

Azure ServiceBus WebSockets as a C2 Channel 2026-03-24 at 17:30 By Stuart White In offensive security, the ability to blend seamlessly with legitimate traffic is vital to avoid detection. Establishing command-and-control (C2) communications can be challenging in environments fortified with security measures like perimeter firewalls and web proxies. This article is an excerpt from LevelBlue […]

Azure ServiceBus WebSockets as a C2 Channel Read More »

India’s Evolving Cyber Threat Landscape: State-Sponsored Attacks, Hacktivism, and What’s Next in 2026

cyber news, Hacktivism, Ransomware, Threat Actor, Threat Intelligence /

India’s Evolving Cyber Threat Landscape: State-Sponsored Attacks, Hacktivism, and What’s Next in 2026 2026-03-24 at 12:32 By Ashish Khaitan The India cyber threat landscape 2026 is no longer defined by isolated incidents or opportunistic attacks. It has become a dynamic, constantly shifting battleground shaped by geopolitical tensions, rapid digitization, and highly advanced hackers. What once looked like sporadic cybercrime […]

India’s Evolving Cyber Threat Landscape: State-Sponsored Attacks, Hacktivism, and What’s Next in 2026 Read More »

Tracing a Multi-Vector Malware Campaign: From VBS to Open Infrastructure 

Threat Intelligence /

Tracing a Multi-Vector Malware Campaign: From VBS to Open Infrastructure  2026-03-24 at 03:28 By Sean Shirley Recently LevelBlue SpiderLabs initiated an investigation into a multi-stage malware delivery campaign initially identified from LevelBlue’s MDR SOC through a SentinelOne detection of a suspicious Visual Basic Script (VBS) file. This article is an excerpt from LevelBlue SpiderLabs Blog […]

Tracing a Multi-Vector Malware Campaign: From VBS to Open Infrastructure  Read More »

Fake CAPTCHA Campaign: Inside a Multi-Stage Stealer Assault

Emerging Threats, Threat Intelligence, Vulnerabilities /

Fake CAPTCHA Campaign: Inside a Multi-Stage Stealer Assault 2026-03-19 at 22:28 By Shabtay Barel, Serhii Melnyk, Rodel Mendrez This report expands LevelBlue’s ongoing investigation into a multi-stage fileless malware campaign in which a network of compromised legitimate websites redirects victims to fake CAPTCHA verification pages delivering credential-stealing payloads through a ClickFix social engineering mechanism. This […]

Fake CAPTCHA Campaign: Inside a Multi-Stage Stealer Assault Read More »

Iran Readied Cyberattack Capabilities for Response Prior to Epic Fury

APT, cyberattack, Cyberwarfare, Epic Fury, Featured, hackers, Iran, Threat Intelligence /

Iran Readied Cyberattack Capabilities for Response Prior to Epic Fury 2026-03-19 at 18:19 By Kevin Townsend Analysis reveals a six-month buildup of Iran-linked cyber infrastructure, including US-based shell companies, designed to weather kinetic strikes and ensure the resilience of its global hacking operations. The post Iran Readied Cyberattack Capabilities for Response Prior to Epic Fury […]

Iran Readied Cyberattack Capabilities for Response Prior to Epic Fury Read More »

AI, APIs and DDoS Collide in New Era of Coordinated Cyberattacks

API, DDoS, Network Security, report, Threat Intelligence /

AI, APIs and DDoS Collide in New Era of Coordinated Cyberattacks 2026-03-17 at 12:32 By Kevin Townsend Akamai warns that Layer 7 DDoS, API abuse and AI-powered attacks are merging into coordinated, multi-vector campaigns that are harder to detect and defend against. The post AI, APIs and DDoS Collide in New Era of Coordinated Cyberattacks […]

AI, APIs and DDoS Collide in New Era of Coordinated Cyberattacks Read More »

The Ultimate Guide to Dark Web Monitoring in 2026: Protect Your Data Before Attackers Strike

darkweb, Hacktivism, Malware, Ransomware, Ransomware Insights, Threat Intelligence /

The Ultimate Guide to Dark Web Monitoring in 2026: Protect Your Data Before Attackers Strike 2026-03-13 at 16:29 By Ashish Khaitan In 2026, cyber threats are originating on the dark web, where stolen credentials, exploit kits, and attack plans are bought and sold before they ever reach corporate networks. Organizations are turning to dark web […]

The Ultimate Guide to Dark Web Monitoring in 2026: Protect Your Data Before Attackers Strike Read More »

The Human IOC: Why Security Professionals Struggle with Social Vetting

Management & Strategy, SOC, Threat Intelligence /

The Human IOC: Why Security Professionals Struggle with Social Vetting 2026-03-12 at 14:30 By Joshua Goldfarb Applying SOC-level rigor to the rumors, politics, and ‘human intel’ can make or break a security team. The post The Human IOC: Why Security Professionals Struggle with Social Vetting appeared first on SecurityWeek. This article is an excerpt from […]

The Human IOC: Why Security Professionals Struggle with Social Vetting Read More »

Agentic attack chains advance as infostealers flood criminal markets

agentic AI, Artificial Intelligence, attacks, CISO, cyber risk, Don't miss, Flashpoint, News, report, survey, Threat Intelligence, threats /

Agentic attack chains advance as infostealers flood criminal markets 2026-03-12 at 08:35 By Mirko Zorz Cybercriminals spent much of 2025 automating their operations, shifting from one-off attacks to systems that can run entire intrusion cycles with minimal human input. Data collected from criminal forums, illicit marketplaces, and underground chat services shows a threat environment where […]

Agentic attack chains advance as infostealers flood criminal markets Read More »

Australia, New Zealand, Tonga, Warn of Rising INC Ransom Attacks Targeting Pacific Networks

ANZ, cyber news, cybercrime, cybersecurity, Dark Web Monitoring, Ransomware, Ransomware Insights, Threat Intelligence /

Australia, New Zealand, Tonga, Warn of Rising INC Ransom Attacks Targeting Pacific Networks 2026-03-09 at 15:37 By Ashish Khaitan Cybersecurity agencies across the Pacific region are sharing concerns about the ransomware group INC Ransom’s expanding activities and the growing influence of its affiliate network. A joint advisory issued by the Australian Cyber Security Centre (ACSC), National […]

Australia, New Zealand, Tonga, Warn of Rising INC Ransom Attacks Targeting Pacific Networks Read More »

The Blast Radius Problem: Stolen Credentials are Weaponizing Agentic AI

AI, Artificial Intelligence, credentials, Threat Intelligence /

The Blast Radius Problem: Stolen Credentials are Weaponizing Agentic AI 2026-02-25 at 18:16 By Kevin Townsend More than half (56%) of the 400,000 vulnerabilities IBM X-Force tracked in 2025 required no authentication before exploitation. The post The Blast Radius Problem: Stolen Credentials are Weaponizing Agentic AI appeared first on SecurityWeek. This article is an excerpt […]

The Blast Radius Problem: Stolen Credentials are Weaponizing Agentic AI Read More »

Scroll to Top