Blog #Cybersecurity Trends

A financially motivated threat actor, UAC-0006, is conducting an advanced phishing campaign targeting PrivatBank customers, using password-protected archives to deploy the SmokeLoader malware.

Cybersecurity researchers have uncovered a global malware campaign exploiting tax season to target financial institutions and individuals through phishing emails impersonating tax agencies like HMRC, Intuit, and myGov.

Morphisec researchers have uncovered a new variant of the ValleyRAT malware, employing advanced evasion tactics, multi-stage infection chains, and novel delivery methods.

Two major data breaches have impacted hundreds of thousands of individuals at Asheville Eye Associates and Delta County Memorial Hospital District.

This recent investigation uncovered a sophisticated web skimming attack targeting Casio UK and 16 other websites, likely due to vulnerabilities in Magento-based platforms.

The UK telecommunications company TalkTalk has confirmed a data breach involving a third-party supplier’s platform after a threat actor, ‘b0nd,’ claimed to have stolen information on 18.8 million customers.

Chinese AI company DeepSeek blamed a cyberattack for preventing new user registrations, though existing users remained unaffected.

Hellcat is a newly identified ransomware group using a Ransomware-as-a-Service (RaaS) model to target government, education, and energy sectors.

The "FlowerStorm" phishing framework has emerged as a sophisticated Phishing-as-a-Service (PhaaS) platform targeting multiple brands to steal login credentials.

A recent Netwrix report revealed that 84% of healthcare organizations experienced a cyberattack on their infrastructure in the past year, with phishing being the most common incident.

A vulnerability in Subaru's Starlink connected vehicle service allowed unauthorized access to customer accounts in the US, Canada, and Japan, according to security researcher Sam Curry.

The New York State Department of Financial Services (NYDFS) fined PayPal $2 million for failing to meet its cybersecurity standards, following a data breach in December 2022.