threats

Threat Actor Landscape: What Every CISO Must Know to Stay Ahead

,

CISO advice: use threat intelligence for tailored cybersecurity. Actors use targeted tactics based on industry, requiring defenses to adapt. Key sectors face unique threats, necessitating a robust intelligence program that informs strategies, detects risks, and trains teams effectively. Regular updates to executives ensure alignment with evolving threats.

https://www.techradar.com/pro/threat-actor-landscape-what-every-ciso-must-know-to-stay-ahead

How the Human Harms of Cybercrime Shook the World in 2025

Cyberattacks in 2025 caused severe human harm, including the first confirmed ransomware-related death linked to a healthcare disruption, and unsettling incidents of personal data exploitation, such as the leaking of preschoolers' information. Major corporate attacks, like on Jaguar Land Rover, had significant economic repercussions while spreading fear among employees. Violence associated with cybercrime surged, evidenced by kidnapping and threats during negotiations, raising concerns about future trends. Additionally, advanced scams like AI-powered virtual kidnappings evolved alongside disruptions to emergency alert systems, highlighting the profound impact of cybercrime on society.

https://www.theregister.com/2025/12/28/death_torture_and_amputation_how/

100+ Cybersecurity Predictions 2026 for Industry Experts as the AI Adapted in the Wild

,

Cybersecurity Predictions 2026 highlight a major shift in threats as AI increasingly shapes cyber warfare. Over 100 expert forecasts indicate a rise in autonomous malware, identity-centric attacks, and ransomware, with ransomware victims projected to increase 40% and AI-driven attacks expected to comprise 50% of threats. Key trends include:
– Autonomous AI in cyberattacks revolutionizing traditional defenses.
– AI-enhanced phishing and deepfake technology complicating identity fraud.
– Increased reliance on cloud systems exposing new vulnerabilities.
– Emergence of Zero Trust Architectures to counteract identity theft.
– Regulatory compliance transforming into strategic business imperatives.

Organizations must adapt by embracing proactive defense strategies to measure resilience and recovery speed amidst evolving threats, asserting that future cybersecurity transcends mere IT concerns to become a core business priority.

https://cybersecuritynews.com/cybersecurity-predictions-2026/

CISA Loses Key Employee Behind Early Ransomware Warnings

,

CISA's ransomware warning program, crucial in preventing $9 billion in damages, is jeopardized after its lead, David Stern, resigned rather than accept a reassignment. His departure raises concerns about the program's future and relationships with stakeholders, as it heavily depended on his connections and expertise. CISA asserts that the program continues, but its effectiveness may diminish without Stern's leadership.

https://www.cybersecuritydive.com/news/cisa-ransomware-warning-program-key-employee-left/808589/

Does OpenAI Expect Upcoming AI Models to Present a High Cybersecurity Risk?

,

OpenAI acknowledges that its upcoming AI models will heighten cybersecurity risks, as more capable tools enable easier attacks for even those with basic knowledge. The release of GPT-5.2 introduces enhanced capabilities for professional use and better coding assistance. To combat potential misuse, OpenAI plans to establish the Frontier Risk Council and has launched the beta tool Aardvark to help organizations identify vulnerabilities. Overall, OpenAI aims to ensure its technologies are used safely while addressing both defense and offense in cybersecurity.

https://www.pandasecurity.com/en/mediacenter/does-openai-expect-upcoming-ai-models-to-present-a-high-cybersecurity-risk/

The Hidden Risk in Virtualization: Why Hypervisors Are a Ransomware Magnet

, ,

Hypervisors, critical for virtual environments, are increasingly targeted by ransomware, particularly the Akira group. Attacks can risk numerous VMs simultaneously due to limited security visibility. Effective defenses include robust access controls, multi-factor authentication, hypervisor hardening, regular patching, and effective backup strategies. Organizations should also enhance monitoring for anomalous activities to detect potential breaches early and prepare for recovery scenarios, emphasizing a holistic security approach to protect hypervisors from escalating ransomware threats.

https://www.bleepingcomputer.com/news/security/the-hidden-risk-in-virtualization-why-hypervisors-are-a-ransomware-magnet/

Android Mobile Adware Surges in Second Half of 2025

, , ,

Android adware surged in late 2025, with detections nearly doubling and malicious threats becoming more organized. Cybercriminals shifted from simple scams to sophisticated frameworks, employing tools like MobiDash and Triada for ongoing data theft and fraud. Users should prioritize mobile security by using trusted app stores, scrutinizing permissions, avoiding sideloaded apps, and employing real-time security software.

https://www.malwarebytes.com/blog/mobile/2025/12/android-threats-in-2025-when-your-phone-becomes-the-main-attack-surface

Most Parked Domains Now Serving Malicious Content

, , ,

TLDR: Most parked domains now redirect to malicious sites, with over 90% leading to scams or malware, reversing a decade-old trend. Researchers at Infoblox found that users typing in expired or misspelled domains face increased risks, especially from residential IP addresses, which leads to deceptive content. Malicious redirects are linked to typosquatting domains mimicking popular sites, exposing users to potential malware and scams.

https://krebsonsecurity.com/2025/12/most-parked-domains-now-serving-malicious-content/

15+ Retail Cybersecurity Statistics for 2026: Threats and Protection

,

Retailers increasingly face cyber risks with data breaches averaging $10.22 million in the US. High transaction volumes, sprawling systems, and third-party dependencies make them prime targets. Major threats include phishing, malware, ransomware, and supply chain vulnerabilities. To combat these, retailers must adopt robust security measures, educate staff, and continuously monitor systems. Recent breaches, like those affecting Forever 21 and Neiman Marcus, highlight the need for strong risk management and third-party oversight.

https://www.shopify.com/enterprise/blog/retail-cybersecurity

AI Poisoning: Black Hat SEO Is Back

,

Black Hat SEO, once diminished by advancements in Google algorithms, is resurfacing through AI manipulation. Research shows just 250 malicious documents can contaminate large language models (LLMs), enabling bad actors to distort AI responses about brands. This “AI poisoning” risks misrepresenting companies in comparisons and could damage reputations. Brands must maintain vigilance by monitoring AI outputs related to their name and addressing suspicious online activity to prevent potential poisoning. Despite the temptation to exploit loopholes for a competitive edge, ethical content creation remains essential for long-term success.

https://www.searchenginejournal.com/ai-poisoning-black-hat-seo-is-back/561217/

Ransomware IAB Abuses EDR for Stealthy Malware Execution

, ,

Ransomware group Storm-0249 exploits EDR tools like SentinelOne to stealthily execute malware. Using social engineering, they trick users into running malicious commands that lead to DLL side-loading, making attacks appear as normal EDR processes, thus evading detection. Recommendations include behavior-based detection and stricter controls on execution of potentially harmful commands.

https://www.bleepingcomputer.com/news/security/ransomware-iab-abuses-edr-for-stealthy-malware-execution/

UK Launches Hybrid Fighting Force to Secure Undersea Cables

,

UK enhances undersea cable defenses with autonomous vessels and warships due to rising Russian surveillance. The Atlantic Bastion program aims to secure vital underwater infrastructure against threats, utilizing AI and advanced technologies. The initiative, supported by major defense firms, may create thousands of jobs, addressing national connectivity vulnerabilities.

https://www.theregister.com/2025/12/08/uk_subsea_cables_defense/

The Hidden Cascade: Why Law Firm Breaches Destroy More Than Data

,

Law firms face significant cyberattack risks, with 20% targeted in the past year and average breach costs exceeding $5 million. Attackers are increasingly sophisticated, using tactics that can undermine client privilege and expose sensitive data, especially relating to M&A deals. Current security assessments overlook law firms, leaving businesses vulnerable. The article advocates treating these firms like high-risk technology vendors, proposing specific security measures to mitigate risks associated with data breaches in professional services.

https://www.recordedfuture.com/blog/the-hidden-cascade

New Wave of VPN Login Attempts Targets Palo Alto GlobalProtect Portals

,

New attacks targeting Palo Alto GlobalProtect VPN portals began on December 2, involving 7,000 IPs from German company 3xK GmbH. Initial brute-force attempts on GlobalProtect led to scanning SonicWall API endpoints. GreyNoise reports the attacker used previous fingerprints, generating millions of HTTP sessions. Both activities are attributed to the same actor, posing credential-based threats but not exploiting software vulnerabilities. Palo Alto recommends enforcing Multi-Factor Authentication (MFA) for protection.

https://www.bleepingcomputer.com/news/security/new-wave-of-vpn-login-attempts-targets-palo-alto-globalprotect-portals/

CISA Warns iPhone And Android Users — Secure Your Smartphone Now

, ,

CISA and UK security agencies warn smartphone users of rising cyber threats, particularly via spyware targeting messaging apps. They recommend iPhone and Android owners immediately apply strict security measures: enable advanced device modes, use only trustworthy services, restrict app permissions, and keep devices and apps up to date. Both agencies caution against using personal VPNs due to the risk of malware and poor privacy from many VPN providers. Official app stores are the safest place to get apps. Additional advice includes using strong passwords, enabling device tracking, and avoiding unknown Wi-Fi networks unless necessary.

https://www.forbes.com/sites/daveywinder/2025/11/28/cisa-warns-iphone-and-android-users—secure-your-smartphone-now/

Scroll to Top