Royal

Midnight Mimosa Malware Campaign Exploits Android Firmware Supply Chain

Chinese State-Linked Hackers Target US Critical Infrastructure with Automated Scanning and Cyber Espionage Tools

ClingSTUN Turns Vulnerable Edge Devices Into Attacker Infrastructure

Fake WatchGuard VPN Site Steals Credentials

China Linked Warlock Ransomware Campaign Targets Critical Infrastructure

Ransomware Landscape in H1 2025: Statistics and Key Issues

2026 Ransomware Cartelization: Qilin, LockBit and Akira Convergence

CLOSEDQUORUM: Malware Puts AI in the C2 Loop

Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations

FamousSparrow Takes Flight with New SparroWocky Backdoor

China and the Cyber Arms Race for AI Supremacy

BlueMoon Exploit Kit Rapidly Targets Key Verticals Across Multiple Espionage Campaigns

Gamers Get Played: Fake GTA6 Leaks Deliver a Grab Bag of Malware

BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace

The Job Offer Has Claws: Mirage Kitten Deploys NodeRabbit and PollCat

Lunex Uses BYOVD to Disable Security Monitoring and Deploy Persistent Stealer

Scams, Slaves and (Malware-as-a) Service: Tracking a Trojan to Cambodia’s Scam Centers

Fake Installers, Fake Reviews, Fake Services – Real Proxies, Real Victims

Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

Once in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Exploit Chain Using Chrome and Windows Zero-Days

The Good, the Bad and the Ugly in Cybersecurity – Week 23