A China-aligned APT threat actor named “TheWizards” abuses an IPv6 networking feature to launch adversary-in-the-middle (AitM) attacks that hijack software updates to install Windows malware. According to ESET, the group has been active since at least 2022, targeting entities in the Philippines, Cambodia, the United Arab Emirates, China, and Hong Kong. Victims include individuals, gambling companies, […]

The “cyber incident” that British multinational retailer Marks & Spencer has been struggling with for over a week is a ransomware attack, multiple sources have asserted. The Telegraph’s sources say ransomware was deployed by a unnamed criminal gang. Bleeping Computer’s says the attackers were members of the Scattered Spider hacking group, and that M&S’s virtual […]

Check Point Research has released its first AI Security Report at RSA Conference 2025, revealing how cybercriminals are leveraging artificial intelligence for attacks. The report identifies four major AI-driven cyber threats: AI-enhanced impersonation, LLM data poisoning, AI-created malware, and weaponization of AI models. Key findings show that […]

Ransomware debris: an analysis of the RansomHub operation  Group-IB Source link …………………….

Check Point finds that threat actors are following the evolution of AI closely, and adapting models to their needs Cybercriminals are increasingly adapting large language models for criminal purposes, including writing malicious code, social engineering and fraud. They take commercially available models such as ChatGPT, Gemini and Claude, and remove the safeguards designed to prevent […]

Investigators from Spain’s cybersecurity agency and the CNI intelligence service will seek information from the country’s grid operator, REE, and private energy companies as part of a probe into the causes of massive blackouts across Spain and Portugal, Reuters has reported. Two sources told Reuters that the investigation would happen in full collaboration with the […]