Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Bumblebee is a downloader malware which has become known for its sophistication and effectiveness. The malware was first discovered in 2022 and was believed to be a tool for ransomware groups due to the developer’s close ties with Conti. Since then, it has been used in various attacks and has been delivered through multiple methods, including phishing emails, malicious documents, and SEO poisoning.

Amazon Simple Email Service (Amazon SES) is a cloud-based provider for sending transactional, marketing, and newsletter emails. Because of its role as a source of communication for organizations, Amazon SES has become a primary tool for phishing campaigns. Our latest threat roundup includes a key finding that Amazon SES is a common target in the initial stages of a cloud control plane attack.

Arctic Wolf has recently observed the distribution of a trojanized RVTools installer via a malicious typosquatted domain. The domain matches the legitimate domain, however, the Top Level Domain (TLD) is changed from.com to.org. RVTools is a widely used VMware utility for inventory and configuration reporting, developed by Robware. Once the malicious installer was downloaded, the installer attempts to make outbound connections to known command and control infrastructure.

Fintech CTOs aren’t short on tools; they’re short on the right ones. Between fast-moving DevOps pipelines, open banking integrations, and cloud-native architectures, security often lags behind innovation, not due to negligence, but because traditional tooling fails to keep up. Modern fintech threats like API abuse, IAM misconfigurations, and privilege escalations don’t wait for quarterly audits. They exploit real-time gaps between development and security operations.

For many cybersecurity teams, Nessus is the scanner they started with; a reliable, battle-tested tool that’s been part of the security stack for over two decades. Backed by Tenable’s extensive vulnerability database, Nessus is known for its accuracy in identifying known CVEs and misconfigurations across networks and systems. But while environments have evolved from on-prem to multi-cloud, from VMs to containers, Nessus has primarily stayed the same.

Latin America has quickly become a hotspot for cyber activity. The region’s rapid digitalization, expanding cloud adoption, and evolving geopolitical friction have drawn the attention of both financially motivated eCrime actors and strategic nation-state adversaries. The CrowdStrike 2025 Latin America Threat Landscape Report provides key insights into cyber activity across Central and South America, Mexico, and the Caribbean.

Pen testers use active testing technologies to probe and analyze systems dynamically, just as an attacker does. Active testing confirms whether a vulnerability is actually exploitable, which security teams use to determine which vulnerabilities to prioritize for remediation. Active security testing delivers confidence, sorely needed in today’s IT security world where noise and false positives have become a major part of an analyst’s day.

Avoid hosts with vague policies, poor support, or unrealistically low prices, as these can signal serious security gaps. When you think about protecting your website from cyber threats, your first thought probably isn’t your hosting provider. The typical go-to solutions are firewalls, strong passwords, and two-factor authentication. But the truth is, your hosting environment is one of the most overlooked yet critical components of a strong cybersecurity strategy.

There are ghosts in the machine. Not the poetic kind. I mean literal, running-code-with-root-access kind. The kind that was set up ten years ago by an admin who retired five jobs ago. The kind that still wakes up every night at 3:30 a.m.; processes something no one remembers, and then quietly vanishes into the system logs. Until, of course, something goes wrong—or someone takes advantage of it.

A new era of inconceivably fast quantum machines is not far away, with computers almost ready to completely transform the way we solve problems, communicate, and compute. However, this transformation is not all positive, and the cybersecurity industry fears that functional quantum computers will be able to break even the strongest encryption we have today, rendering today's security infrastructure obsolete.