Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Trustwave

Malicious Screen Connect Campaign Abuses AI-Themed Lures for Xworm Delivery

Aug 27, 2025 By Bolesław Szołtysik, Chris Tomboc, Serhii Melnyk In Trustwave
During a recent Advanced Continual Threat Hunt (ACTH) investigation, the Trustwave SpiderLabs Threat Hunt team identified a deceptive campaign that abused fake AI-themed content to lure users into executing a malicious, pre-configured ScreenConnect installer.
Read Post
bitsight

The Business of Malware: Inside the MaaS Economy

Aug 27, 2025 By Emma Stevens In BitSight
In our 2025 State of the Underground report, we found that 384 unique varieties of malware were sold across the top three criminal forums in 2024, a 10% increase from 349 in 2023, signifying an expansion in the underground malware marketplace. These figures reflect malware explicitly offered for sale (not shared freely), and each distinct version or naming variation is counted independently.
Read Post
bluevoyant

Investigating the Oyster Backdoor Campaign and its Targeting of IT Professionals

Aug 26, 2025 By Thomas Elkins, Joshua Green, and Ian Harte In BlueVoyant
BlueVoyant investigated the latest Oyster malware attacks, delivered in a widespread campaign targeting IT professionals by impersonating legitimate IT tools. The campaign was originally discovered by outside researchers, but when BlueVoyant’s SOC observed suspicious behavior in a client environment within the healthcare sector, the team, including the Threat Fusion Cell (TFC), decided to delve deeper.
Read Post

Five-Year Plans, Forever Wars: China's Blueprint for Cyber Dominance

Aug 26, 2025 By Rubrik In Rubrik
Chinese state-backed cyber operations are often misunderstood as a single, centrally controlled machine. In reality, they are fragmented, diverse, and strategically aligned with China’s national objectives, from economic development to critical infrastructure positioning. In this episode of Data Security Decoded, join Caleb Tolin as he sits down with Mei Danowski, Co-Founder of Natto Thoughts and expert in geopolitical intelligence, to explore how China’s cyber ecosystem operates and how it is shaped by cultural, political, and economic structures.
View Video
foresiet

Inside the Kimsuky APT Leak: Stolen GPKI Certificates, Rootkits, and a Personalized Cobalt Strike from North Korea's Cyber Unit

Aug 25, 2025 By Foresiet In Foresiet
In a rare and unprecedented incident, a massive operational dump belonging to the North Korean Kimsuky APT group was leaked on a dark web forum. The leak containing virtual machine images, VPS dumps, phishing kits, rootkits, and thousands of credentials offers an unparalleled look into the inner workings of one of Pyongyang’s most prolific cyber espionage groups.
Read Post

Can threat actors make ChatGPT malware? #ai #cybersecurity #gpt5

Aug 21, 2025 By LimaCharlie In LimaCharlie
GPT-5 was jailbroken in under 24 hours using simple "storytelling" techniques that bypass safety guardrails. The key insight from our podcast? Individual AI requests appear legitimate but become dangerous when combined. Bad actors can request network code in one session, convincing emails in another, and credential collection forms in a third. Each task seems normal individually, but together they form a complete phishing toolkit.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.