SOC status:Duty analyst on shift
Topic
113 articles tagged Threat intelligence.
The healthcare threat picture for the reporting period continues to escalate. Health-ISAC reporting flags a 55% surge in cyber incidents in 2025 with continued escalation expected in 2026.
During the reporting period the financial services threat picture continued to be dominated by ransomware and data-extortion crews, augmented by sustained credential-harvesting against retail and SME banking customers.
The R&D and military-government-contractor threat picture for the reporting period is dominated by sustained state-sponsored activity.
The FCC's ban on foreign-made routers has direct implications for UK and EU enterprise security posture. We examine the threat model, regulatory context, and strategic response.
An in-depth analysis of LockBit 5.0, the:w! latest evolution of the prolific ransomware family, now targeting Windows, Linux, and VMware ESXi environments with enhanced evasion, cross-platform payloads, and refined extortion tactics.
A major Android adware operation, now known asGhostAd, has been uncovered after spreading quietly through Google Play and affecting millions of users across East and Southeast Asia. Although the apps involved appeared benign at first glance, they concealed aggressive advertising engines that ran continuously in the background, degrading device performance, draining batteries, and causing widespread frustration for victims. The scale of this campaign, combined with the sophistication of its persistence mechanisms, marks it as one of the more impactful adware incidents seen on the platform in re
The holiday shopping season has become one of the most lucrative periods of the year for cybercriminals. Alongside legitimate Black Friday and Christmas offers, threat actors are now operating large, co-ordinated networks of fake online stores designed to steal payment card details and personal information at scale.
Discover how the dark web fuels cybercrime and learn why your business must act to protect data, assets, and reputation.
Over the course of May 2025, the insurance industry continued to face a considerable number of ransomware threats, underlining the persistent risk posed by well-resourced cybercriminal groups. The latest data drawn fromransomware.livefrom 1 May 2025 to 31 May 2025 indicates that three distinct incidents affected insurance providers in Europe, compromising sensitive policyholder data and operational continuity. These incidents, corroborated by reports from Mandiant (published 8 May 2025) and IBM X-Force Exchange (observed 14 May 2025), offer valuable insights into the tactics, techniques and pr
Throughout the period from 1 May 2025 to 31 May 2025, the consulting industry faced a significant level of ransomware activity, with two high-profile breaches reported onransomware.live. These incidents, corroborated by analyses published by Mandiant on 8 May 2025 and further supported by threat data from IBM X-Force Exchange on 12 May 2025, demonstrate both the continued evolution of ransomware strains and the increased ability of adversaries to exploit known vulnerabilities swiftly. The consulting sector, with its access to sensitive intellectual property and client data, has emerged as a pr
Transportation Industry Threat Analysis for May 2025
Threat Analysis of the Technology Industry Sector: May 2025