Daily Cybersecurity Roundup

The growing use of trusted cloud services by attackers as part of their malicious infrastructure is increasingly concerning. A new Android spyware campaign has been uncovered in South Korea, where attackers are using an AWS S3 b ... Read More
Threats keep looming over GitHub. A recent threat campaign has been uncovered exploiting GitHub by creating fake issues in open-source project repositories to distribute the Lumma Stealer. Meanwhile, the Iranian state-sponsored ... Read More
Think of vice as a bad habit? Well, the Vice Society threat actor is wreaking havoc on the U.S. healthcare sector with an INC ransomware strain. In a separate development, a phishing attack has been identified where attackers im ... Read More
Lazarus strikes again. Mandiant discovered the new MISTPEN backdoor used by UNC2970, targeting senior energy and aerospace employees via a trojanized PDF reader. Crypto influencers, beware! Researchers warned of the Marko Polo g ... Read More
Hackers are like digital chameleons, seamlessly disguising themselves within everyday apps while plotting their next sneak attack—just like the Kransom ransomware, which was recently found hiding within the StarRail game to exec ... Read More
Recent malware campaigns have highlighted diverse targeting strategies by cybercriminals. The Ajina.Banker Android malware is actively attacking banking customers in Central Asia, distributing through Telegram channels under the ... Read More
Like a dragon on the hunt, a new threat cluster dubbed DragonRank has been using PlugX and BadIIS malware to target countries in Asia and Europe. In other news, the Iranian cyber group APT34 launched attacks on Iraqi government ... Read More
Shhh... Hackers can hear your secrets—introducing PIXHELL, a stealthy acoustic attack that can eavesdrop on air-gapped and audio-gapped systems through their LCD monitors, no speakers needed. Meanwhile, a new infostealer called ... Read More
A relatively new threat actor is making its mark—CosmicBeetle. This emerging threat actor is actively deploying its ScRansom ransomware against SMBs globally. Meanwhile, three China-linked threat activity clusters have been targ ... Read More
Two Chinese APTs have taken a page out of the cyber playbook, with TIDRONE swooping down on Taiwan’s drone industry and Stately Taurus coding its way into Southeast Asian government networks. Meanwhile, in the LATAM region, thre ... Read More

Get the Daily Cybersecurity Roundup delivered to your email!

Recent Blogs
Daily Threat Briefing