Iranian MOIS hackers are using multiple fake personas to conduct espionage, phishing, and psychological operations. This analysis explains how the campaign works and what organizations must do to defend against it.

SideWinder hackers are using fake Chrome PDF viewers and cloned Zimbra portals to steal credentials and conduct espionage. This analysis explains how the attack works and what organizations must do to defend against it.

Cybercriminals exploited French fintech and banking systems using stolen credentials, exposing over 1.2 million accounts. This analysis explains how the attack works and what organizations must do to defend against it.

Attackers used 109 fake GitHub repositories to distribute SmartLoader and StealC malware in a supply chain attack. This analysis explains how the campaign works and what organizations must do to defend against it.

A Cisco firewall breach involving CVE-2025-20333 and FIRESTARTER malware shows how attackers can survive patching and regain network access.

ADT confirmed a cyber intrusion involving customer and prospective customer data, including names, phone numbers, addresses, dates of birth, and partial SSNs or tax IDs in some cases. This analysis explains the breach risk, possible identity-based attack path, business impact, detection strategies, penetration testing lessons, and protection measures organizations should take now.