Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
RHYSIDA Ransomware Gang: 3 New Leak-Site Claims — US Professional Services & Government Targeting Analysis and Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-10-10 | Source: ransomware.live leak-site monitoring | Nature of data: Unverified threat-...
UMBRA Ransomware Gang: 5 New Leak-Site Listings Across Technology, Manufacturing & Education — Campaign Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-10-07 | Source: ransomware.live leak-site monitoring | Nature of data: Unverified threat-...
Warlock Ransomware Breaches Water Utility and Telecom via SharePoint Exploitation — Detection and Hardening Guide
Introduction A China-linked threat group tracked as Warlock is actively breaching critical infrastructure and public-sector organizations by...
ClickFix at Scale: 17,000 Malicious URLs, Fake CAPTCHAs, and Why Domain Blocking Is Dead — Detection and Hardening Guide
ClickFix at Scale: 17,000 Malicious URLs, Fake CAPTCHAs, and Why Domain Blocking Is Dead A new global threat report from CTM360 should be ma...
ClickFix Social Engineering: Detecting Fake Verification Prompts That Weaponize Your Own Brand — A Defender's Guide
Recorded Future's Insikt Group has published new research on ClickFix — a social engineering technique that doesn't need an exploit, a zero-...
EVEREST Ransomware Gang: 3 New Victims Posted — German Manufacturing Hit, Sector Analysis & Detection Rules
EVEREST Ransomware Gang: 3 New Victims Posted — German Manufacturing Hit, Sector Analysis & Detection Rules Classification: TLP:CLEAR | Publ...
Counterfeit Installer Campaign: Detecting and Blocking Trojanized Software Downloads with Microsoft Defender XDR
What Happened Microsoft Defender Experts has published findings on an active, ongoing campaign in which threat actors impersonate legitimate...
SAFEPAY Ransomware: Global Manufacturing & Tech Targeted — Critical Vulnerability Exploitation Alert
SAFEPAY Ransomware: Global Manufacturing & Tech Targeted — Critical Vulnerability Exploitation Alert Date: 2026-08-04 Source: Dark Web Leak ...
CRPXO Ransomware: Critical Infrastructure Assault on Turkey & US Healthcare — Active Exploit Analysis
Threat Actor Profile — CRPXO Aliases: None confirmed (Potential rebrand of legacy FIN7/AvoidSec affiliates). RaaS Model: CRPXO operates on a...