Threats & Attacks
Ransomware, malware, phishing and the actors behind them.
AI Cybersecurity Threats in 2026: What 6,000 Fake Brand Sites Taught Us About the Phishing Arms Race
A brand impersonation campaign deployed 6,000 sites against 100+ apparel brands starting in 2022. Now AI is making those same tactics faster, cheaper, and harder to catch.
AI Cybersecurity Threats in 2026: How the UNC5221 Direct Send Campaign Walks Past Your Email Filters
A Chinese-nexus threat group is exploiting Microsoft 365's Direct Send feature to impersonate internal users, bypass SPF/DKIM/DMARC checks, and deliver QR-code phishing lures at scale. Here is the mechanism, the attribution, and what you can actually do about it.
AI Cybersecurity Threats 2026: Weaponizing Microsoft Sway for Large-Scale Quishing Campaigns
An examination of how threat actors abuse Microsoft Sway and automated tools to launch massive QR code phishing campaigns against Microsoft 365 users, evaluated against evolving AI cybersecurity threats.
AI Cybersecurity Threats in 2026: How One Operator Chained Open-Source Agents to Drain 600,000 Credit Cards
A financially motivated threat actor built a fully automated attack pipeline from three open-source AI agent frameworks—Strix, Cairn, and Hermes—compromising 119+ retail sites for roughly $25 per target. Here is what the campaign reveals about agentic attack economics and what defenders should do about it.
Inside the Black Basta Attack on ABB: AI Cybersecurity Governance Lessons for Industrial Giants
Examining the 2023 Black Basta ransomware assault on automation leader ABB, detailing Active Directory impacts and why industrial enterprises need robust AI cybersecurity governance in 2026.
Tietoevry’s Akira Ransomware Outage Tests Enterprise Cloud and AI Cybersecurity Governance
Examining the January 2024 Akira ransomware attack on Tietoevry in Sweden, its impact on cloud customers and public services, and lessons for enterprise cloud security and AI cybersecurity governance.
Don't Trust the Install Step: indexed-btree and the New Era of Runtime npm Malware
The indexed-btree campaign hides its payload in a B-tree method that runs at runtime, sidestepping the lifecycle-script blocks GitHub shipped in 2026. Here's how the trick works, why LofyGang and Shai-Hulud saw it coming, and what actually defends against malware that waits.
AI Cybersecurity Threats in 2026: ASCII Smuggling Slips Past Filters and Into Your Copilot
Threat actors are hiding phishing lures inside invisible Unicode characters that bypass email security and poison AI chatbots alike. Here's what the Laurium campaign reveals about the state of AI cybersecurity threats in 2026.
PoisonSeed in 2026: How Hijacked Corporate Marketing Infrastructure Amplifies AI Cybersecurity Threats
Expanded PoisonSeed article examining corporate marketing account compromises, crypto seed-phrase phishing, FIDO2 cross-device authentication challenges, and AI cybersecurity threats in 2026.
AI Cybersecurity Threats in 2026: Malicious Custom ChatGPTs Deploy RATs via ClickFix
Comprehensive analysis of malicious custom ChatGPT instances promoted via sponsored Google results delivering RAT malware through ClickFix attacks, with 2026 AI cybersecurity defenses.
AI Cybersecurity Threats 2026: QR Code Phishing Targets US Energy Sectors
An in-depth analysis of AI cybersecurity threats in 2026, examining how QR code phishing campaigns target critical US energy infrastructure and how artificial intelligence shapes modern cyber defense.
AI‑Powered RatHat Malware Gives Attackers Full Remote Control of Infected Android Phones
Comprehensive article on the newly discovered RatHat Android malware, its AI-powered remote control subsystem, and the associated security risks.