Threat Intelligence
75 articles in this category (Page 3 of 4)
Amazon Exposes Years-Long GRU Cyber Campaign Targeting Energy and Cloud Infrastructure
Amazon details a 2021–2025 GRU-linked campaign (APT44) targeting critical infrastructure via misconfigured network devices, highlighting a shift from exploit-driven attacks.
Storm-0249 Escalates Ransomware Attacks with ClickFix, Fileless PowerShell, and DLL Sideloading
Storm-0249 is evolving its tactics, now employing ClickFix, fileless PowerShell, and DLL sideloading to facilitate ransomware operations and evade detection.
CISA Warns of Active Spyware Campaigns Hijacking Signal and WhatsApp Users
CISA alerts users to ongoing spyware campaigns targeting high-value individuals via Signal, WhatsApp, and Android, with identified campaigns impacting fewer than 200 WhatsApp users.
Trojanized ESET Installers Used in Phishing Campaigns to Deploy Kalambur Backdoor in Ukraine
A Russia-aligned threat group, InedibleOchotense, is exploiting ESET's reputation through phishing attacks to deploy the Kalambur backdoor in Ukraine, alongside Sandworm's wiper campaigns and RomCom's WinRAR 0-day exploits.
Weekly Cybersecurity Recap: Emerging Threats, Vulnerabilities, and Industry Developments (2025-11-03)
A detailed summary of critical cyber threats, exploits, and updates from late 2025, including nation-state attacks, AI-driven vulnerabilities, and new security tools.
Konni Hackers Exploit Google Find Hub for Remote Data-Wiping and Multi-Group Cyber Threats
North Korea-linked Konni hackers weaponize Google's Find Hub for remote device wiping, while Lazarus and Kimsuky groups deploy advanced malware in targeted campaigns.
China-Linked Tick Group Exploits Lanscope Zero-Day to Hijack Corporate Systems
A China-linked cyber espionage group, Tick, is exploiting a critical zero-day vulnerability (CVE-2025-61932) in Motex Lanscope Endpoint Manager to hijack corporate systems, deploy backdoors, and exfiltrate data, as revealed by cybersecurity firm Sophos.
ThreatsDay Bulletin: Emerging Cybersecurity Threats and Vulnerabilities in 2025
A comprehensive overview of 2025's critical cybersecurity threats, including DNS poisoning, supply-chain attacks, Rust-based malware, and rising ransomware trends, as detailed in The Hacker News' ThreatsDay bulletin.