State-Sponsored APT Groups Shift Focus to Critical Infrastructure & Supply Chain Targets
Our threat research division has identified a coordinated campaign targeting SCADA systems and third-party software vendors across Europe and North America. The attackers leverage novel evasion techniques and living-off-the-land binaries to maintain persistence.
Read Full Report โ
Critical
Healthcare Network Paralyzed by Double-Extortion Ransomware Attack
Emergency services disrupted as attackers exfiltrate 2.4TB of patient records before encrypting core systems.
High
Major SaaS Platform Exposes 10M User Credentials via Misconfigured API
Security researchers discover unauthenticated endpoints leaking hashed passwords and email addresses.
Medium
Botnet Recruiting Smart TVs and Industrial Cameras for DDoS Campaigns
Threat actors exploit default credentials in legacy firmware to build massive reflection infrastructure.
High
Spear-Phishing Campaign Targets Financial Sector Executives via Deepfake Audio
AI-generated voice cloning used in real-time calls to bypass multi-factor authentication procedures.
| CVE ID | Description | Severity | Status |
|---|---|---|---|
| CVE-2024-9821 | Remote code execution in enterprise firewall NAT processing module | 9.8 | ๐ด Patch Available |
| CVE-2024-8734 | Authentication bypass in cloud storage API via JWT manipulation | 8.6 | ๐ก Mitigation Guide |
| CVE-2024-7612 | Information disclosure in IoT device firmware update mechanism | 7.2 | ๐ข Vendor Response |
| CVE-2024-7109 | Privilege escalation in Linux kernel memory management subsystem | 8.1 | ๐ด Patch Available |
"Zero Trust Is No Longer Optional"
"The perimeter is dead. Organizations must assume breach and implement continuous verification at every network layer, not just at entry points."
"AI Security Requires New Governance Models"
"As generative AI integrates into enterprise workflows, prompt injection and model poisoning attacks demand dedicated red-teaming protocols."
"Ransomware Insurance Is Undergoing a Crisis"
"Payouts are plummeting as carriers add forensic requirements and exclude business interruption. Cyber risk transfer is being fundamentally rewritten."
"Supply Chain Security Starts with SBOMs"
"Software Bill of Materials adoption remains sluggish. Without component visibility, patching critical vulnerabilities is like fighting blindfolded."