Medusa

Midnight Mimosa Malware Campaign Exploits Android Firmware Supply Chain

Chinese State-Linked Hackers Target US Critical Infrastructure with Automated Scanning and Cyber Espionage Tools

The Next MOVEit May Already Be in Your File Transfer Queue

ClingSTUN Turns Vulnerable Edge Devices Into Attacker Infrastructure

China Linked Warlock Ransomware Campaign Targets Critical Infrastructure

Sauron Loader: A New Loader Lurking in Underground Forums

Ransomware Landscape in H1 2025: Statistics and Key Issues

Meduza Stealer or The Return of The Infamous Aurora Stealer

Return of Shai-Hulud: The “Second Coming” of the NPM Supply Chain Compromise

2026 Ransomware Cartelization: Qilin, LockBit and Akira Convergence

ToxicPanda: New Android Banking Trojan Targeting Multiple Regions

Medusa Ransomware detection

Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations

Lunex Uses BYOVD to Disable Security Monitoring and Deploy Persistent Stealer

CLOSEDQUORUM: Malware Puts AI in the C2 Loop

FamousSparrow Takes Flight with New SparroWocky Backdoor

China and the Cyber Arms Race for AI Supremacy

BlueMoon Exploit Kit Rapidly Targets Key Verticals Across Multiple Espionage Campaigns

Gamers Get Played: Fake GTA6 Leaks Deliver a Grab Bag of Malware

BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace

The Job Offer Has Claws: Mirage Kitten Deploys NodeRabbit and PollCat

GorgonAgora: 4,800+ fake storefronts skim cards across hundreds of impersonated brands

From ‘High/Medium/Low’ to Dollars: Making Cyber Risk Legible to Your CFO

Weekly Threat Landscape Digest – Week 34

The Good, the Bad and the Ugly in Cybersecurity – Week 34

CISA Warns of Medusa Ransomware-as-a-Service Attacks Over 300 Organizations

Storm-1175 Deploys New StormEncryptor Ransomware, Likely Exploiting N-able Flaw

Gentlemen EDR Killer Suite Combines HexKiller, ThrottleBlood, and HavocKiller

April 2026 CVE Landscape

Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations