Threat actors Stories

Global Stories

Threat actors stories

NCC Group named in Forrester cyber response report

Clients now want help across the full cyber attack lifecycle, as Forrester says incident response is moving beyond containment and forensics.

By Sean Mitchell • 3 min read • Today

Malware

Google flags Russian spies abusing real login features

Personal accounts used by researchers and officials are being hit by Russian-linked groups, exposing institutions to stealthy account theft and malware.

By Joseph Gabriel Lagonsin • 5 min read • Last week

Data Protection

ReliaQuest deepens Anthropic deal to bolster GreyMatter

GreyMatter users will gain wider access to Anthropic's Claude models as ReliaQuest brings them deeper into its threat response platform.

By Mark Tarre • 4 min read • Last week

Cybersecurity

Cyber criminals spend USD $7 million on expired domains

Expired web addresses are becoming a lucrative shortcut to trust and traffic, with one group spending more than USD $7 million.

By Mark Tarre • 4 min read • Last week

Firewalls

Network segmentation - you can't attack what you can't see

Fast-moving exploits are shrinking patch windows to hours, making network segmentation vital for protecting cameras, medical devices and other connected assets.

By Anthony Caruana • 5 min read • This month

Network Infrastructure

Australia & New Zealand face surge in critical flaws

Patch backlogs are leaving organisations exposed, with 85 high-impact flaws flagged across Australia and New Zealand, up 44% in July.

By Joseph Gabriel Lagonsin • 4 min read • This month

Malware

AI-driven cybercrime surges at scale, Flashpoint warns

Stolen credentials and AI-generated phishing are accelerating attacks, as Flashpoint tracked 22 million illicit discussions and 7.4 million infected hosts.

By Joseph Gabriel Lagonsin • 5 min read • This month

Data Protection

Ransomware victim numbers flat as active groups hit record

More groups are now driving attacks, leaving victim numbers flat even as ransomware operations reached a record 93 active crews in the quarter.

By Joseph Gabriel Lagonsin • 4 min read • This month

Ransomware

When AI accelerates the threat, identity governance cannot afford to stand still

AI-driven attacks are shrinking response times to minutes, forcing APAC firms to adopt continuous identity controls and zero trust.

By Takanori Nishiyama • 5 min read • This month

Virtualisation

Industrial ransomware hits 1,140 incidents in Q2 2026

Industrial firms face growing disruption as ransomware incidents rose 12% to 1,140 in the second quarter, Dragos said.

By Mark Tarre • 4 min read • This month

Software-as-a-Service

Google links UNC6671 to cloud extortion brand shift

Google says the campaign is shifting towards financial and legal firms, with rebranded extortion sites still stealing cloud logins and tokens.

By Sean Mitchell • 4 min read • This month

Data Protection

Supercharged security: Cyber risk in the age of frontier AI

Hong Kong saw a record 15,877 cyber incidents in 2025 as AI speeds attacks and shortens the window to exploit software flaws.

By Daniel Kwong • 3 min read • This month

Robotics

Cloud Security Alliance launches AI resilience centre

Government and enterprise users will get guidance on recovering faster from AI failures as the Cloud Security Alliance builds a vendor-neutral resilience hub.

By Sean Mitchell • 4 min read • This month