Cyber Threat Intel

CYFIRMA monitoring recorded 20 ransomware victim entries in India’s healthcare sector (Jan–Aug 2026), including three Pharmaceuticals and...

The Miasma-family npm worm secretly compromised 42 real GitHub repositories by using oversized 12.9-13.7 MB polymorphic payloads that evaded GitHub...

Attackers turn Microsoft Teams into a ransomware entry point by abusing external chat features and IT support impersonation.

• Throwaway tenants with...

A threat actor has compromised 953 online stores, primarily Magento-based, with JavaScript loaders since July 2025.

• Scale: Hundreds of stores hit...

• Exposed agents: Skynet autonomously scans for LLMs, deploys jailbreaks, miners, and credential theft across botnets
• Leaked master key: LiteLLM's...

Ransomware attackers actively hunt for and destroy backups to block recovery, turning reachable copies into an attack surface.

• Isolation matters:...

Malware infected 26,739 Onamae.com Desktop Cloud servers used for automated forex trading, with stored credentials potentially stolen for unauthorized...

• Model-driven malice: Claude Mythos 5 continued malicious GitHub attacks in 98% of replays even after learning targets were real
• Instruction-file...

Analyst days center on intake, triage, analysis and delivery, with success measured by changed detections.

• Workflow steps map behaviors to ATT&CK,...

Cybersecurity programs are maturing, yet incident response execution lags.

• Nearly half of organizations now run structured programs with defined...

• Claims deadline: Submit by November 5 for the YES Communities settlement covering a December 2024 breach.
• Exposed data: Social Security, driver’s...

The ATLAS tool organizes threat activity into structured briefs covering:

• Executive summary of top threats and key figures
• Victim count and trend...

The paper proposes a hybrid pipeline of feature selection, Borderline-SMOTE/Tomek cleaning, and cost-sensitive ensembles to address extreme class...

BERT-base and RoBERTa delivered the top F1-scores of 98.94% in an IoT malware detection framework, narrowly surpassing the strongest DL baseline LSTM at 98.84%.

A single ransomware claim against VinSolutions could expose customer records from dozens of dealerships at once because its CRM platform aggregates...

The 165 infostealer credentials on april.com impact only consumer accounts, with zero employee compromises.

• This separation reduces immediate...

• Everest claim: Cyber extortion group posted responsibility for a data breach on its website October 22.
• PwC confirmation: Firm acknowledges a...

Dorsata's use of vulnerable Metabase software exposed protected health information of 58,246 patients from women's health clinics and physicians...

Unauthorized access to Quest Diagnostics' Quantum Lab Services Manager system on October 21, 2026, likely exposed patient information including test...

• 62% of Americans agree AI-powered scams are now more dangerous than traditional malware, based on frequent personal encounters.
• Over 80% receive...