Cyber Attacks
Security Awareness Training Requires Strategic Rethink Despite Widespread Adoption
While all enterprises conduct security awareness training, the tangible benefits of these programs remain debatable and require strategic adjustment.
Threat Times Intrusion Desk
Malware & Ransomware
UAC-0099 Targets Ukrainian Officials With New ASHVEIN RAT and .NET Infostealer
Analysis reveals a Russia-aligned group using the previously undocumented ASHVEIN malware to compromise Ukrainian government personnel, hiding commands in HTML.
Cyber Attacks
JPCERT warns of rising Japanese data leaks via mobile API abuse and Metabase flaws
Japan’s cybersecurity center reports a sharp increase in web data leaks driven by attackers exploiting mobile APIs and known software vulnerabilities.
Cyber Attacks
Single POST Request Can Freeze Next.js Servers, Researchers Warn
Security researchers report that a single HTTP POST request can cause Next.js servers to hang, posing a denial-of-service risk to web applications.
Cyber Attacks
ASOS Hackers Accessed Employee Account to Send Rogue Push Notifications
Investigation reveals attackers used a compromised employee account to distribute malicious push notifications, accessing limited personal data.
Cyber Attacks
DOJ Charges Ransomware Recovery CEO With Wire Fraud for Secret Payments
Federal prosecutors allege the firm owner secretly paid ransoms while charging victims inflated fees for recovery services that were not provided.
Malware & Ransomware
FakeGit Campaign Reactivates on GitHub, Distributing SmartLoader Malware via 17,000 Repos
The FakeGit malware campaign has returned, using over 17,600 fake GitHub repositories to distribute SmartLoader and the StealC infostealer to unsuspecting developers.
Cyber Attacks
ESET Research: SMBs Demand Advanced Cyber Protection Without Complexity
New research reveals small businesses want robust security tools that are easy to manage, highlighting a market gap in user experience.
Cyber Attacks
Unit 42 Reveals Blinder Tunnel Campaign Targets Iraqi Critical Infrastructure
Palo Alto Networks researchers identify an Iran-nexus operation using fake Dubai Airport recruitment lures and GitHub-based command and control infrastructure to compromise systems.
Cyber Attacks
ESET Research Uncovers Brand Deal Scam Targeting YouTube Creators
Fraudsters send fake sponsorship offers to steal Google account credentials from content creators, according to new analysis.
Cyber Attacks
Microsoft FORGE Lab Shares Lessons on Scaling AI Vulnerability Research to Linux Kernel
Microsoft Security’s FORGE Lab outlines three key lessons from expanding its frontier AI vulnerability research from Windows to the Linux kernel.
Cyber Attacks
Palo Alto Unit 42 Reports Web3 Infrastructure Used in Cloud Supply Chain Attacks
Researchers detail how threat actors exploit Web3 tools and open-source components to breach enterprise cloud environments.
Malware & Ransomware
Cisco Talos details malware techniques designed to evade automated AI analysis
Cisco Talos researchers describe how malware authors are developing specific methods to obstruct automated AI security tools.
Cyber Attacks
Cisco Talos: AI-Assisted Phishing Campaign Targets Taiwan Research Institutions
A new spear-phishing operation uses real-time AI pages to steal credentials from researchers in Taiwan, impersonating legitimate academic events.
Cyber Attacks
Apple releases iOS 27.2 beta 3 to developers with build 24B5099f
Apple has distributed the third beta iteration of iOS 27.2 to registered developers, introducing minor changes and potential future feature hints.
Cyber Attacks
Attackers hijack .gh, .sl, and .as registries to steal Google certificates
Hackers compromised three country-code top-level domains to obtain unauthorized HTTPS certificates for Google domains, Google said.
Malware & Ransomware
Nightspire Leads Ransomware Leak Claims with 9 Incidents in 24-Hour Period
Our analysis of public data shows 31 unverified ransomware leak-site claims in the last day, with Nightspire accounting for nearly one-third of the total activity.
Malware & Ransomware
Ransomware Tracker: 18 New Leak-Site Claims in 24 Hours, Safepay Leads
Our daily count of ransomware leak-site activity for October 1, 2026: which groups were busiest and where the claimed victims are.