Threat Landscape

Discussion List

• RomCom Uses SocGholish Fake Update Attacks to Deliver Mythic Agent Malware

  4 views 0 comments 0 points Most recent by Du'aine Davis November 2025Daily Threat Briefing
• Matrix Push C2 Uses Browser Notifications for Fileless, Cross-Platform Phishing Attacks

  2 views 0 comments 0 points Most recent by Du'aine Davis November 2025Daily Threat Briefing
• ToddyCat APT Accessing Organisations Internal Communications of Employees at Target Companies

  2 views 0 comments 0 points Most recent by Du'aine Davis November 2025Daily Threat Briefing
• North Korean Kimsuky and Lazarus Join Forces to Exploit Zero-Day Vulnerabilities Targeting Critical

  4 views 0 comments 0 points Most recent by Du'aine Davis November 2025Daily Threat Briefing
• Xillen Stealer Updates to Version 5 with New Detection Evasion Techniques

  5 views 0 comments 0 points Most recent by Du'aine Davis November 2025Daily Threat Briefing
• SonicOS SSLVPN Vulnerability Allows Attackers To Crash the Firewall Remotely (CVE-2025-40601)

  26 views 0 comments 0 points Most recent by Du'aine Davis November 2025Daily Threat Briefing
• Recent 7-Zip Vulnerability Exploited in Attacks (CVE-2025-11001)

  9 views 0 comments 0 points Most recent by Du'aine Davis November 2025Daily Threat Briefing
• Cloudflare outage caused by bug, not malicious activity

  37 views 1 comment 0 points Most recent by Rafi Mahmood November 2025Daily Threat Briefing
• Researchers identify ShinySp1d3r as a new ransomware-as-a-service platform in active development

  8 views 0 comments 0 points Most recent by Du'aine Davis November 2025Daily Threat Briefing
• GreyNoise Flags 90-Day High in Brute-Force Attempts on Palo Alto Portals

  6 views 0 comments 0 points Most recent by Du'aine Davis November 2025Daily Threat Briefing
• Sneaky2FA phishing-as-a-service adopts browser-in-the-browser technique

  14 views 0 comments 0 points Most recent by Rafi Mahmood November 2025Daily Threat Briefing
• Akira ransomware adopts ClickFix and increased dwell time in latest observed campaign

  3 views 0 comments 0 points Most recent by Rafi Mahmood November 2025Daily Threat Briefing
• Chrome patches zero-day exploited in the wild

  3 views 0 comments 0 points Most recent by Rafi Mahmood November 2025Daily Threat Briefing
• Threat Actors attempt to use Xanthorox AI Tool to Generate Different Malicious Code

  5 views 0 comments 0 points Most recent by Du'aine Davis November 2025Daily Threat Briefing
• Threat Actors Leveraging ClickFix Technique to Deploy NetSupport RAT Loaders

  3 views 0 comments 0 points Most recent by Du'aine Davis November 2025Daily Threat Briefing
• RONINGLOADER Weaponizes Signed Drivers to Disable Defender and Evade EDR Tools

  19 views 0 comments 0 points Most recent by Du'aine Davis November 2025Daily Threat Briefing
• Akira Ransomware Targets Over 250 Organizations, Extracts $42 Million in Ransom Payments

  6 views 0 comments 0 points Most recent by Du'aine Davis November 2025Daily Threat Briefing
• Threat actors are Weaponizing Invoices to Deliver XWorm That Steals Login Credentials

  3 views 0 comments 0 points Most recent by Du'aine Davis November 2025Daily Threat Briefing
• Kraken ransomware development adds benchmarking victim systems for optimisation

  17 views 0 comments 1 point Most recent by Rafi Mahmood November 2025Daily Threat Briefing
• Lumma Stealer activity resurges with new browser fingerprinting tactic

  6 views 0 comments 0 points Most recent by Rafi Mahmood November 2025Daily Threat Briefing
• IndonesianFoods NPM worm campaign floods NPM registry

  6 views 0 comments 0 points Most recent by Rafi Mahmood November 2025Daily Threat Briefing
• UK Government introduces Cyber Security and Resilience (Network and Information Systems) Bill

  12 views 0 comments 1 point Most recent by Rafi Mahmood November 2025Daily Threat Briefing
• GitHub Action package targeted in typosquatting campaign

  3 views 0 comments 0 points Most recent by Rafi Mahmood November 2025Daily Threat Briefing
• RMM tools abused to deploy PatoRAT backdoor

  6 views 0 comments 0 points Most recent by Rafi Mahmood November 2025Daily Threat Briefing
• OWASP Top 10 2025 key changes and emerging risks

  16 views 0 comments 1 point Most recent by Rafi Mahmood November 2025Daily Threat Briefing
• New phishing-as-a-service platform "Quantum Route Redirect" campaigns targeting users globally

  6 views 0 comments 0 points Most recent by Rafi Mahmood November 2025Daily Threat Briefing
• Lazarus Group deploys new Comebacker variant against aerospace and defence sectors

  15 views 0 comments 1 point Most recent by Rafi Mahmood November 2025Daily Threat Briefing
• Gootloader returns with enhanced obfuscation techniques.

  28 views 0 comments 1 point Most recent by Du'aine Davis November 2025Daily Threat Briefing