TeamPCP has deployed a Kubernetes wiper targeting Iranian systems. The attack uses CanisterWorm to self-propagate and execute destructive commands. This marks a significant shift from financial gains to geopolitical motives, prompting urgent audits of CI/CD pipelines using Trivy to prevent further damage…

Hacker group LAPSUS$ has allegedly breached AstraZeneca, accessing over 3GB of sensitive data, including source code and employee datasets. The group’s extortion tactics highlight growing cyber threats. This incident serves as a wake-up call for enterprises storing critical data in the cloud, urging enhanced security measures…

Outpost24 faced an advanced 7-stage phishing attack targeting a C-level executive. Orchestrated using the Kratos phishing-as-a-service kit, it exploited reputable brands and elaborate tactics to bypass security layers. Ironically, Outpost24’s own threat intelligence detected the attempted breach before any damage occurred, highlighting even defenders aren’t exempt from threats…

Storm-2561 spoofs VPN sites to steal corporate logins by pushing fake downloads via SEO poisoning. Targeting Ivanti, Cisco, and Fortinet users, the campaign uses side-loading to deploy malware, bypassing security tools. Microsoft exposed this in January 2026, urging organizations to act swiftly to prevent credential compromise…

Poland’s National Centre for Nuclear Research faced a cyberattack in March 2026. Authorities blocked the intrusion, initially linking it to Iran. Experts caution against false flag operations and stress the vulnerability of nuclear facilities. Learn how critical infrastructure can protect itself against rising cyber threats…