T1562 - Impair Defenses

Gentlemen Ransomware Uses Advanced Techniques for Network Attacks

AI-Driven Malware Framework Automates EDR Evasion Tactics

New Windows Zero-Day 'ShieldBreak' Exploits Microsoft Defender Flaw

Qilin and Warlock Ransomware Exploit Vulnerable Drivers to Compromise EDR Tools

Ransomware Tactics Evolve: EDR Killers Expand Beyond Vulnerable Drivers

Multiple Ransomware Attacks Target Diverse Industries in September 2026

InstallFix Campaign Exploits AI Trust to Deliver Malware via Fake Install Pages

Nightmare-Eclipse Banned from GitHub and GitLab for Zero-Day Exploits

Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

BlueHammer Zero-Day Exploit Released, Exposing Windows Users to Privilege Escalation

TELEPUZ Malware Emerges, Spreading via ClickFix Lures to Steal Data

Fake Codex Installer Delivers Suspected AMOS Infostealer via Google Sites

ValleyRAT Backdoor Disguised as Signed Adware

Zombie ZIP Attack Evades Antivirus Detection

Ransomware Evolution: Encryptionless Extortion and EDR Bypass Tactics Rise

Iran's Cyber Response to U.S. Military Strikes Expected Amid Rising Tensions

OpenAI Launches GPT-5.4-Cyber Amidst Cybersecurity Arms Race

Cybersecurity Alert Fatigue: A Growing Challenge for SOCs

New Windows Bind Link Techniques Enable EDR Evasion for Attackers

Black Basta Ransomware Integrates BYOVD Defense Evasion Technique

Critical Vulnerabilities in SolarWinds Serv-U Software Patched

Avalon Malware Framework Delivers CrownX Ransomware via Legal Document Lure

Microsoft Addresses Six Actively Exploited Zero-Day Vulnerabilities

Multiple Cybersecurity Incidents and Vulnerabilities Reported in February 2026

WebRAT Malware Distributed via GitHub Exploits

ATT&CK v19 Release Introduces Major Changes in Defense Evasion Tactics

Mandiant and Google's Threat Intelligence Group documented

OpenAI Agent Breached Hugging Face Systems in July Security Incident

New TELEPUZ malware spreads via ClickFix lures

Windows bind links exploited for EDR evasion

Microsoft Reins in RoguePlanet Zero

Go-Based Gentlemen Ransomware Uses PsExec, WMIC, and PowerShell Remoting for ...

Avalon Malware Framework: Advanced Modular Threat Leveraging CrownX Ransomware ...

Pointing a Cursor at evading detection

Lazarus Group Targets Financial and Crypto Firms with RemotePE Memory

Microsoft Defender Zero-Day Vulnerabilities RedSun and UnDefend Actively Exploited ...

Threat Spotlight Vpn Exploitation When Patched Doesnt Mean Protected

Alert Fatigue

FamousSparrow APT Targets Azerbaijani Oil and Gas Industry

Ransomware State: Encryptionless Extortion, Post-Quantum Cryptography, EDR Killers

Redline Stealer Variants Demonstrate A Low Barrier To Entry Threat

ATT&CK v19: The Defense Evasion Split, ICS Sub-Techniques, New AI & Social Engineering Coverage…

Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools

Hackers Weaponize Legitimate Windows Tools to Disable Antivirus Before Ransomware Attacks

Windows Tools Abused to Kill AV Ahead of Ransomware Attacks

New "Zombie ZIP" attack can evade most antivirus scanners

Cyber Advisory: Increased Cyber Risk Amid U.S.–Israel–Iran Escalation

New Serv-U bugs extend SolarWinds’ run of high

February 2026 Patch Tuesday: Critical Microsoft CVEs & Fixes

Reynolds Ransomware Embeds BYOVD Driver to Disable EDR Security Tools

Black Basta Ransomware Actors Embeds BYOVD Defense Evasion Component with Ransomware Payload Itself

WebRAT malware spread via fake vulnerability exploits on GitHub