Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Threat Actors to Watch: Three Groups Targeting Organisations Right Now

From a fast-growing ransomware affiliate network to a politically motivated DDoS collective and a prolific data extortion group, these three threat actors represent distinct but pressing risks across sectors and regions. CYJAX breaks down what each group does, why they matter, and what security teams should know.

I Love Device-Bound Session Credentials, But They Are Still Phishable and Hackable

Google recently released Device-Bound Session Credentials (DBSC) for Google Chrome and Google Workspace. It is a long-awaited new security enhancement to fight back against local cookie theft. But, yes, it can still be hacked and phished. Nothing alone in cybersecurity is a complete panacea.

Attackers Use Spoofed ChatGPT Site to Deliver Malware

Researchers at Malwarebytes warn that a fake ChatGPT download site is delivering malware. The attackers use sponsored results and SEO manipulation to target users who search for “ChatGPT download.” The phishing page is a convincingly spoofed version of the legitimate ChatGPT website, which delivers malware tailored to Windows or Mac users.

Nearly Two-Thirds of CEOs Cite Cyberattacks as Their Top Concern

Cyberattacks are now the top concern of leading CEOs, overtaking fears over geopolitical turmoil or inflation, the Wall Street Journal reports. A survey by the Conference Board and the Business Council found that 65% of CEOs at blue-chip companies cited cyberattacks as their top worry in the second quarter of 2026, an increase from 56% in Q1 2026.

How AI Is Changing Both Cyberattacks and Cyber Defense

Artificial intelligence is changing cybersecurity because it gives both attackers and defenders more speed, scale, and flexibility. Attackers can use AI to write better messages, test code, scan targets, and move through stolen data faster. Security teams can use similar technology to detect odd behavior, sort alerts, and respond before a small incident becomes a serious breach. The biggest shift is not that AI replaces every hacker or every analyst. Work that once required hours, special training, or a larger team can now be assisted by software.

Why Traditional Security Fails Against AI Attacks | Fidelis Deception

AI-powered cyber attacks are evolving faster than traditional defenses can respond. Modern attackers use valid credentials, native tools, and AI-assisted reconnaissance to move through enterprise environments without triggering conventional security controls. Signature-based detection and behavioral analytics often struggle to detect these advanced intrusions before damage is done. In this video, discover how Fidelis Deception helps security teams detect and disrupt AI-accelerated attacks by turning attacker reconnaissance into immediate detection.

Why Unmanaged IoT Devices Create Hidden Security Gaps

Why did the seven-month dwell time inside that hospital surprise nobody on my team? A smart HVAC controller in a third-floor conference room sat on a US healthcare network for seven months. IT security had never inventoried it. The SOC had never seen its traffic. Within 72 hours of initial compromise, the attacker had pivoted to corporate systems and reached patient records. The final bill, as compiled in public breach reporting, lands at $12.4 million.

Crowdsourced Chaos: The Evolution of NoName057(16) and Why DDoS Resilience Matters

According to Bitsight Threat Intelligence, NoName057(16) remains one of the most visible pro-Russian hacktivist groups conducting distributed denial-of-service (DDoS) attacks against countries and organizations perceived as supporting Ukraine. This matters because the risk can extend beyond direct business ties to Ukraine, and the group may also target organizations that do business with vendors, suppliers, partners, or service providers perceived as supporting Ukraine.

AI vs. AI: Fighting the Next Wave of Cyber Attacks with Ravid Circus

Recently our CMO, Tony Thompson, caught up with Seemplicity co-founder and CPO, Ravid Circus, in Paris to talk about the massive shift in the cybersecurity landscape caused by Claude Mythos. As AI research models like Claude Mythos hyper-scale the ability to identify vulnerabilities and weaponize exploits in minutes rather than months, traditional risk-based vulnerability management must evolve. In this video, you will learn.