Threat intelligence stories - Page 13

AI deepfakes are eroding faith in biometrics and executive identities, forcing companies to rebuild trust in how they verify people and payments.

Ransomware gangs shrank in number but hit more victims in late 2025, with leak-site postings soaring despite fewer active groups.

AI crime is shifting from experiments to a stable industry, with jailbreak services, adaptive malware and deepfake fraud becoming routine.

Google has dismantled IPIDEA's vast residential proxy network, which hijacked millions of consumer devices for global cyber operations.

AI-fuelled automation drove a 70% surge in weekly cyber attacks in 2025, with nearly 2,000 incidents per organisation, Check Point warns.

McAfee boosts its Scam Detector with instant QR checks and smarter message scanning to counter a surge in personal, AI-powered frauds.

QR codes in HTML, bogus Teams callbacks and fake Facebook windows are among new email scams sidestepping traditional security tools.

Nike is probing a suspected cyberattack after a hacker group claimed to leak 1.4TB of internal data, raising supply chain security fears.

Radware acquires Pynt to add pre-production testing and deliver unified lifecycle API security from design through to runtime defence.

As IoT devices surge, SonicWall firewalls step in to secure sprawling connected networks without slowing performance or innovation.

Okta warns new real-time vishing kits can hijack browser sessions during calls, tricking users into defeating non‑phishing‑resistant MFA.

Check Point launches AI-ready Exposure Management to plug remediation gaps, unifying threat intelligence, prioritisation and automated fixes.

AI agents surge into big business with scant oversight, leaving governance, security and trust frameworks struggling to keep pace.

SonicWall launches unified automation tools to cut alert fatigue, speed cyber threat remediation and streamline overstretched security teams.

Phishing campaign uses stolen logins and trusted RMM tools like GoTo Resolve and LogMeIn to quietly maintain access to corporate systems.

Cohesity has expanded its Identity Resilience tools to detect, block and rapidly undo attacks on hybrid Active Directory and Entra ID.

Experts say AI-driven attacks and rampant data leaks mean organisations must verify outputs, curb collection and harden identity controls.

Rob Demain warns that cyber campaigns on critical infrastructure are demanding behaviour-led defence over compliance.

Politically themed LOTUSLITE phishing campaign hits US policy bodies, using DLL sideloading and espionage-focused backdoor tactics.

Rapid7 has launched a Microsoft-focused MDR service that fuses Defender telemetry with its SIEM and global SOC for unified threat response.