2025-11-13 06:00 UTC
Security Journalism
Security Journalism
Threats Plague Educational Organizations
Threat actors are targeting the education sector with data breaches, phishing emails, ransomware hits, brute force RDP attacks, and more.
P15
LATEST
Aggregated cybersecurity reporting, advisories and research. 264 matching records.
AUTO-POLL // 2026-10-18 05:25 UTC
CYBER INTEL TEMPERATURE
TODAY'S AGGREGATED INTELLIGENCE
NO DATA
NO INTELLIGENCE AGGREGATED TODAY
7-DAY C.I.T. REPORT
CYBER CONDITIONS // DAILY C.I.T. READINGS
TODAY → 6 DAYS AGO
TODAY
Oct 18
NO DATA
--
NO INTEL
SAT
Oct 17
ACTIVE EXPLOITATION
P4
COOL // 12 ARTICLES
FRI
Oct 16
RANSOMWARE
P8
COOL // 56 ARTICLES
THU
Oct 15
ACTIVE EXPLOITATION
P7
COOL // 87 ARTICLES
WED
Oct 14
RANSOMWARE
P8
COOL // 74 ARTICLES
TUE
Oct 13
ACTIVE EXPLOITATION
P7
COOL // 73 ARTICLES
MON
Oct 12
RANSOMWARE
P5
COOL // 42 ARTICLES
2025-10-31 07:30 UTC
Other
Other
Detecting the NPM Supply Chain Compromise Before It Spread
Discover how Group-IB’s Business Email Protection (BEP) could prevent an NPM supply chain compromise by detecting the initial phishing email that led to the developer’s infection.
P0
2025-10-22 07:01 UTC
Other
Other
Unmasking MuddyWater’s New Malware Toolkit Driving International Espionage
Group-IB Threat Intelligence has uncovered a sophisticated phishing campaign, attributed with high confidence to the Advanced Persistent Threat (APT) MuddyWater. The attack used a compromised mailbox to distribute Phoenix backdoor malware to international organizations and across the whole Middle East and North Africa region, targeting more than 100 government entities.
P0
2025-09-29 05:58 UTC
Other
Other
E-commerce Fraud-as-a-Service: How Scammers Exploit Brand Trust at Scale
In the rapidly evolving digital marketplace, e-commerce brands have become prime targets for cybercriminals. Beyond traditional data breaches, these brands now face sophisticated scams that exploit their reputation, deceive consumers, and erode trust. Drawing from investigations conducted by RedHunt Labs’ threat intelligence team, this blog delves into some of the most prevalent scams targeting e-commerce platforms and highlights how a Digital Risk Protection (DRP) solution can help fortify you…
P0
2025-09-03 07:49 UTC
Other
Other
From Deepfakes to Dark LLMs: 5 use-cases of how AI is Powering Cybercrime
AI in cybercrime is evolving fast, fueling AI phishing attacks, AI scam calls, AI voice cloning scams, and even AI deepfake scams. From Dark LLMs to next-gen AI phishing tactics, we break down how criminals exploit AI today and what you can do to stay protected.
P0
2025-08-26 15:00 UTC
Security Journalism
Security Journalism
Should MSPs Turn Off Google Gemini? | Huntress
Hackers are using Google Gemini's email summaries to sneak in phishing attacks without links or attachments.
P0
2025-08-06 07:32 UTC
Other
Other
The Anatomy of a Deepfake Voice Phishing Attack: How AI-Generated Voices Are Powering the Next Wave of Scams
Discover how AI voice deepfake vishing exploits trust, drains millions, and learn practical steps to detect and stop voice‑based scams.
P0
2025-06-13 16:03 UTC
Vendor Research
Vendor Research
Mitigating prompt injection attacks with a layered defense strategy
Posted by Adam Gavish, Google GenAI Security TeamWith the rapid adoption of generative AI, a new wave of threats is emerging across the industry with the aim of manipulating the AI systems themselves. One such emerging attack vector is indirect prompt injections. Unlike direct prompt injections, where an attacker directly inputs malicious commands into a prompt, indirect prompt injections involve hidden malicious instructions within external data sources. These may include emails, documents, or…
P0
2025-05-08 07:13 UTC
Other
Other
Understanding Credential Harvesting via PAM: A Real-World Threat
Learn how attackers exploit Pluggable Authentication Modules (PAM) for credential harvesting—and discover defenses to harden Linux authentication.
P0
2025-04-24 05:00 UTC
Security Journalism
Security Journalism
Credential Theft: Expanding Your Reach, Pt. II
As with many tactics within the MITRE ATT&CK framework, credential theft consists of a number of different techniques. Showing what many of them look like on an endpoint helps other security professionals understand what to look for and how to detect and respond to similar activity.
P0
2025-04-23 07:05 UTC
Other
Other
Toll of Deception: Where Evasion Drives Phishing Forward
Discover the latest phishing campaign targeting a major toll road service provider, where cybercriminals use sophisticated evasion techniques to bypass security detections. This in-depth blog reveals how threat actors exploit legitimate platforms and deploy cloaking methods to disguise malicious links, allowing them to evade detection by security solutions. Discover how these sophisticated tactics create highly convincing phishing pages designed to steal victims’ card information, and how to sa…
P0
2025-03-28 05:00 UTC
Security Journalism
Security Journalism
Securing Endpoints from Common Vulnerabilities
Learn how to lock down common endpoint vulnerabilities like weak passwords and unpatched software to secure your systems against threats like phishing and malware.
P0
2025-03-04 00:00 UTC
Security Journalism
Security Journalism
Uncover Tomorrow’s Cyber Threats Today | Huntress
Explore 2024's top cyber threats, including ransomware trends, advanced phishing tactics, and targeted industries. Stay ahead—download the Huntress 2025 Cyber Threat Report now!
P15
2025-02-11 00:00 UTC
Security Journalism
Security Journalism
2025 Cybersecurity Threat Report | Huntress
Huntress’ 2025 Cyber Threat Report is here! Explore the year's biggest threats—RATs, phishing, ransomware—and how evolving tactics demand smarter defense.
P15
2025-02-06 00:00 UTC
Security Journalism
Security Journalism
Device Code Phishing: OAuth 2.0 Attacks in Google & Azure
All OAuth 2.0 implementations are equal. Some are just more equal than others. This blog covers device code phishing and compares OAuth implementations between Google and Azure. Does OAuth implementation impact the efficacy of hacker tradecraft? Find out here!
P0
2025-01-02 00:00 UTC
Security Journalism
Security Journalism
Exploring Package Tracking Smishing Scams | Huntress
Smishing (or SMS phishing) is far more frequent during the holidays. Learn to recognize the signs of a smish and how to avoid falling victim to one.
P0
2024-12-11 07:11 UTC
Other
Other
Trust Hijacked: The Subtle Art of Phishing Through Familiar Facades
Explore the advanced tactics employed in recent email phishing campaigns targeting employees from over 30 companies across 12 industries and 15 jurisdictions. This blog unveils sophisticated techniques used to outsmart Secure Email Gateways (SEGs) and exploit trusted platforms, creating highly convincing schemes to deceive victims and steal their credentials.
P0
2024-10-30 05:44 UTC
Other
Other
Delivery Deception: Escalating cybercriminal tactics in the Balkan region
Explore our latest findings on the surge of cyberattacks in the Balkan region, focusing on threats to financial institutions and critical infrastructure. Discover how phishing scams impersonating postal services are targeting citizens in Croatia, Romania, Serbia, and Slovenia, and learn about the implications for public safety and security. Stay informed and protected against the rising tide of cybercrime.
P0
2024-10-09 00:00 UTC
Other
Other
Subdomain Takeover Vulnerability in GitLab Pages
A vulnerability in GitLab Pages allowed attackers to take over dangling custom domains pointing to 'instanceX.gitlab.io'. The issue occured when adding an unverified custom domain to GitLab Pages, which serves content for 7 days before disabling. This could lead to cookie stealing, phishing campaigns, and bypassing of Content-Security Policies and CORS.
P0
2024-10-08 05:00 UTC
Security Journalism
Security Journalism
How to Prevent Business Email Compromise: A Guide for 2026
Learn how to prevent business email compromise attacks and learn how to communicate this emerging cyber threat to your employees.
P0
2024-10-02 05:55 UTC
Other
Other
Pig Butchering Alert: Fraudulent Trading App targeted iOS and Android users
In this article, Group-IB specialists uncovered a large-scale fraud campaign involving fake trading apps targeting Apple iOS and Android users across multiple regions through the UniApp framework, and distributed through official app stores and phishing sites.
P0
2024-09-03 00:00 UTC
Security Journalism
Security Journalism
Phishing in the Fast Lane | Huntress
Join Huntress team members as they walk through some of the most malicious phishing techniques, presented from the attacker's perspective.
P0
2024-08-21 00:00 UTC
Security Journalism
Security Journalism
Protecting Against Session Hijacking & Credential Theft | Huntress
Discover how our new Unwanted Access capability strengthens your defenses against session hijacking and credential theft. Dive in and learn how to minimize risks and protect your business-critical assets from evolving cyber threats.
P0
2024-07-25 05:58 UTC
Other
Other
GXC Team Unmasked: The cybercriminal group targeting Spanish bank users with AI-powered phishing tools and Android malware
Specializing in AI-powered phishing-as-a-service and Android malware capable of intercepting OTP codes, the GXC Team targets Spanish bank users and 30 institutions worldwide
P0
2024-06-12 00:00 UTC
Security Journalism
Security Journalism
Mistakes to Mastery | Huntress
Get to know Phishing Defense Coaching, the latest addition to Huntress SAT. This personalized feature helps teach learners how phishing simulations tricked them so they can better identify potential threats.
P0
2024-04-18 11:09 UTC
Other
Other
Phishy Business: Unraveling LabHost’s scam ecosystem
Group-IB takes part in a global operation to cripple Canadian Phishing-as-a-Service provider LabHost
P0
2023-12-23 00:00 UTC
Security Journalism
Security Journalism
Effortless Phishing Simulations Now Part of Huntress | Huntress
Read about our newest addition to Huntress Managed SAT, Managed Phishing, offering you expert-backed, hassle-free simulated phishing campaigns.
P0
2023-10-18 00:00 UTC
Security Journalism
Security Journalism
Phishing Email Examples: 5 Scams You Should Know | Huntress
Explore the art of phishing, learn how to spot common phishing scams and red flags, and understand the importance of security awareness training.
P0
2023-10-16 00:00 UTC
Security Journalism
Security Journalism
Huntress Managed ITDR (formerly MDR for Microsoft 365) | Huntress
Read up on how and why Huntress built its Managed ITDR (formerly MDR for Microsoft 365) solution to help combat the growing threat of business email compromise (BEC).
P0
2023-08-17 00:00 UTC
Security Journalism
Security Journalism
Gone Phishing: An Analysis of a Targeted User Attack | Huntress
Get an inside look at how threat actors use phishing and social engineering tactics to target users and infiltrate organizations.
P0