Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

A new phishing platform called “JWR” gives attackers real-time control over social engineering attacks, according to researchers at Cisco Talos. The kit livestreams the phishing page to the attacker as the victim is entering information, allowing the attacker to steer the victim’s experience and maximize the damage.

Phishing infrastructure is built to be thrown away. When a domain gets blocklisted, scrutinized, or too hot to handle, the attackers don't stop. They just move. To them, a domain extension is just a cheap tool. They go wherever it is easiest to strike. That pattern is visible in our own telemetry. In late 2024 and early 2025, KnowBe4 Threat Lab documented a 98% spike in phishing campaigns abusing.ru domains. 1,500 unique domains, over 13,000 malicious emails, with an average domain age of just 7.4 days.

Attackers are using “wrong-number” texts to identify potential targets for scams, according to researchers at Malwarebytes. These texts appear to be harmless messages meant for another person, such as “Are we still on for dinner tomorrow?” or “Where’s the PowerPoint?” Recipients often try to be helpful by replying to let the person know they’ve got the wrong number.

LevelBlue is making a multi-million-dollar investment in a new local Security Operations Center (SOC) in Sydney, going live August 25, 2026. The Sydney SOC gives Australian organizations, with a particular focus on critical infrastructure owners and operators, access to onshore analysts and local escalation pathways, backed by the scale, threat intelligence, and 24/7 coverage of LevelBlue's global security operations.

Every year, higher education hits the same beats. New students show up in the fall, ready to begin their undergraduate career. Staff and faculty come and go on their own timelines, some tenured for decades and others moving on after a single semester. Every spring, graduates ring in a new chapter, crossing the stage after years of hard-won achievements. Then there’s visiting researchers and affiliated partners, collaborating all throughout the academic year.

Threat hunting is the capability every security programme claims and few can prove. As Service Delivery Lead in the EU-funded iSOCaaS project, Obrela is contributing an AI-enabled hunting capability built to make hunting measurable, not just faster - including a Threat Hunting Copilot, now in production, that turns a hypothesis written in plain language into a governed, executable hunt. Detection scales. Hunting does not.

Security and IT teams are managing growing volumes of logs, alerts, and telemetry data across disconnected tools and data stores. When teams are tasked with responding to audit or compliance requests, they need to pull the right information quickly and accurately and that is rarely a straightforward process. Investigations span multiple tools, logs sit in storage, routing and retrieving archived logs are manual processes that overburden teams when they can least afford it.