Threats & Attacks
Ransomware, malware, phishing and the actors behind them.
AI Cybersecurity Threats in 2026: North Korea's Spear-Phishing Push for Ukraine War Intelligence
DPRK operators are phishing Ukrainians for battlefield intel using tactics that sit at the intersection of low-effort social engineering and the AI-accelerated phishing ecosystem reshaping state-sponsored cyber operations in 2026.
AvisLoader Uses Encrypted P2P Messaging to Make Its Command Channel Uncloseable
Varonis Threat Labs uncovered AvisLoader, a Windows malware loader that uses the Tox protocol for encrypted peer-to-peer C2. Here is how it works, how it persists, and what defenders can detect today.
AI Cybersecurity Threats 2026: The Edward Dubrovsky Arrest and the Gray Zone of Ransomware Negotiations
The arrest of Edward Dubrovsky in Pennsylvania exposes a legal vacuum at the center of ransomware economics, examined through the lens of AI cybersecurity threats 2026, agentic security, and global law enforcement crackdowns.
AI-Powered Endpoint Security Solutions: Defending Against Attacks That Don't Look Like Attacks
Modern attackers don't need novel malware. They chain together legitimate tools, social engineering, and trusted system functions into sequences that individually look harmless. Here's what AI-powered endpoint security solutions are doing about it — and where the gaps remain.
AI Cybersecurity Threats 2026: The FBI's Domain Takedown of Flax Typhoon's Infrastructure
The FBI seized domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate malware and maintain persistence inside critical infrastructure networks. Here's what the takedown reveals about nation-state operations at the intersection of AI cybersecurity threats.
Understanding Modern Cybersecurity Data Breaches: How the Trezor Phishing Campaign Exposed 347,000 Users Through Third-Party Vendor Brevo
Comprehensive expansion of the Trezor phishing and Brevo supply-chain compromise article, analyzing the 347,000 targeted addresses, 2,500 clicks, ClickFix scripts, WordPress backdoors, and broader cybersecurity data breaches lessons.
Canon Internal Memo Confirms Ransomware Attack and AI Cybersecurity Governance Realities
An in-depth look at Canon's 2020 ransomware attack disclosed via an internal employee memo, exploring its impact on corporate infrastructure, Maze ransomware's 10TB data exfiltration claims, and lessons for modern AI cybersecurity governance in 2026.
AI Cybersecurity Threats 2026: How EvilTokens Turned Phishing Into a Subscription Service
Microsoft's September 2026 takedown of EvilTokens exposed an AI-powered phishing-as-a-service platform that sold device-code phishing and a cybercrime chatbot on Telegram, compromised more than 12,000 Microsoft 365 inboxes, led to a lawsuit with Health-ISAC, and ended with two arrests in the UK.
Ransomware Gangs Hire Insiders: How 2026's Cybersecurity Data Breaches Actually Begin
Expanded article on insider recruitment by ransomware groups and its role in modern cybersecurity data breaches, including internal controls, AI cybersecurity threats, and historical company examples.
ChatGPT Built the Perfect Spyware: Inside the AI Cybersecurity Threats Nobody Detected
A security researcher coaxed ChatGPT into generating steganographic malware that slipped past every detection tool — signature, behavioral, and DLP alike. Here is what that experiment means for your defenses in 2026.
Cybersecurity Best Practices: The SVG Trojan Horse That Fooled an Entire Judicial System
VirusTotal uncovered a phishing campaign using SVG image files as interactive portals impersonating Colombian courts. Here's how the attack worked and what defenders should take from it.
Framing Researchers: MBRLocker's Wiper Prank and the Evolution of Attribution Attacks in AI Cybersecurity Threats 2026
In 2020, a wiper malware called MBRLocker locked victim machines before Windows boot and blamed two prominent security researchers. Here's how it worked, what made it tick, and why its playbook of misdirection feels even more relevant now.