Alessandro Mascellino

A new ransomware group, Cicada3301, has emerged as a significant threat since its discovery in June 2024, targeting businesses in critical sectors across the US and UK.

A newly documented toolset, CloudScout, developed by the advanced persistent threat (APT) group Evasive Panda, has been identified as targeting Taiwanese institutions to infiltrate and extract cloud-based data.

An ongoing, sophisticated phishing campaign has been observed targeting individuals with text messages impersonating trusted brands like Amazon.

A newly evolved form of malware called FakeCall , known for its advanced use of vishing (voice phishing), has been identified by cybersecurity researchers.

A global operation called EMERALDWHALE has targeted misconfigured Git configurations, resulting in the theft of over 15,000 cloud service credentials.

A new phishing kit dubbed “Xiu Gou” (修狗), developed to deploy phishing attacks globally, has been targeting users across the US, UK, Spain, Australia and Japan since at least September 2024.

Cybercriminals are exploiting DocuSign APIs to send fake invoices, bypassing security filters and mimicking well-known brands

The City of Columbus, Ohio, has notified 500,000 residents that their personal data may have been compromised in a ransomware attack that occurred in mid-July 2024.

A new Android malware, named “ToxicPanda,” was identified in late October 2024 and classified under the TgToxic family due to similar bot commands.

A new social engineering tactic, known as ClickFix, has emerged, using deceptive error messages to prompt users to run harmful code.