In early 2026, the Iranian APT group MuddyWater launched cyberattacks against U.S. banking, a major airport, and Israeli operations of a U.S.-based software company. The attacks intensified in March, coinciding with…
In 2024, Iranian APT group BladedFeline launched a cyber campaign against Kurdish and Iraqi government officials, utilizing advanced malware tools including the Shahmaran backdoor and the Whisper backdoor. The attacks…
In 2026, Iranian APT groups, notably Cavern Manticore and OilRig, have intensified cyber operations against Israeli organizations, primarily in the IT and government sectors. Cavern Manticore employs a modular…
In 2025, Cisco's Talos reported a significant increase in the speed at which cybercriminals exploit vulnerabilities, particularly highlighting the React2Shell vulnerability disclosed in December 2025, which became the…
The Iranian APT group OilRig, also known as APT34 and Helix Kitten, has launched a new attack campaign utilizing LSB (Least Significant Bit) steganography to hide command-and-control (C2) configurations within PNG…
Amazon's Threat Intelligence team has identified a trend where nation-state actors utilize cyber operations to facilitate physical military strikes, termed 'cyber-enabled kinetic targeting.' This new operational model…
Amazon's threat intelligence teams have identified a trend where nation-state actors are using cyber operations to enhance physical military strikes, termed 'cyber-enabled kinetic targeting.' This new operational model…
The Ravin Academy, a training institution for Iranian state hackers, experienced a data breach that revealed the personal information of over 1,000 individuals associated with the academy. The leak was made public by…
The Ravin Academy, a training institution for Iranian state hackers, experienced a data breach that revealed the identities of over 1,000 individuals associated with the academy. The leak was publicized by…
CYFIRMA released two industry reports focusing on the telecommunications and manufacturing sectors, analyzing the external threat landscape over the past three months. The reports provide insights into key trends and…