Threats & Attacks
Ransomware, malware, phishing and the actors behind them.
Star Blizzard’s RedFlick Malware-Delivery Chain: How CosmicPulse Is Deployed
A breakdown of Star Blizzard’s RedFlick chain, from phishing and a disguised VHDX shortcut to scheduled tasks and CosmicPulse, with practical detection and defense guidance.
Read Article
When Cybercriminal Syndicates Collide: The Reported ShinyHunters Breach of Clop's Leak Site
An examination of reporting surrounding ShinyHunters targeting the Clop ransomware gang's leak-site infrastructure, focusing on the implications of inter-gang disputes in digital extortion.
Ingram Micro Reports July 2025 Breach Affecting 42,000+
Maine filings say Ingram Micro’s July 2025 ransomware incident affected more than 42,000 people. Here is what is documented about the intrusion.
AI Cybersecurity Threats in 2026 Wear Old Disguises: The .scr Files Hiding in Plain Sight
Attackers weaponize Windows screensaver files as malware droppers and RMM backdoors. Here's why .scr files are dangerous, how the attack chain works, and what defenders should do about it.
Can MFA Be Bypassed? Fake AI Chatbots Target Ad Managers in Clever Phishing Trap
A new phishing campaign uses convincing fake ChatGPT, Gemini, Claude, and Perplexity portals to harvest credentials and intercept MFA codes in real time — proving that even multi-factor authentication isn't safe when attackers control the browser window.
Ransomware Response Disrupts Hitachi Vantara Systems as Servers Are Isolated
Hitachi Vantara confirmed a ransomware incident on April 26, 2025, and said it took servers offline to contain it. Here is what is known—and what remains unconfirmed.
Daiichi Kosho Discloses 8.7 Million Records After Malware Hit Its Data Contractor
Daiichi Kosho, Japan's largest karaoke operator, disclosed that malware found at data-handling contractor Nippon Columbia Group exposed 8,724,000 customer and employee records. The company has not confirmed theft or leaks.
Teams plans a new AI check for suspicious chat behavior
Microsoft says Teams will introduce context-aware phishing detection in a staged November and December 2026 rollout, beginning with external first-contact chats. Here’s what the change means for users, admins and data handling.
Curaçao Tax Office Ransomware: AI Cybersecurity Governance and Service Resilience
Curaçao’s July 2025 tax-office ransomware disruption shows why AI cybersecurity governance should begin with accountable controls, service continuity and tested recovery—not assumptions about attackers.
LiteLLM 1.107.0 Supply-Chain Compromise: What Users Should Do
LiteLLM 1.107.0 PyPI packages and container images carried credential-stealing malware. Learn how to assess exposure, rotate secrets, and recover safely.
AI Cybersecurity Governance After IDCF Cloud’s 2026 Ransomware Outage
IDC Frontier’s disclosures on the 2026 IDCF Cloud ransomware incident show why AI cybersecurity governance depends on precise incident facts, clear customer impact, and careful recovery communication.
Onamae VPS Intrusion: Up to 26,739 Servers Reportedly Affected
Onamae Desktop Cloud reported unauthorized access and malware on customer servers, with up to 26,739 potentially affected.