Security News. From Our Analysts.
Security news from the Brandefense team: new malware, vulnerabilities, data breaches and threat actor activity, summarized for security professionals.
Security News Multiple Vulnerabilities Detected in Nessus Network Monitor Multiple security vulnerabilities have been identified in Nessus due to third-party components that could allow threat actors to perform (RCE) and DoS attacks. 
Security News Critical RCE Alert in Foxit PDF Reader and PDF Editor Foxit has released updates that fix a remote code execution (RCE) vulnerability affecting the PDF Reader and PDF Editor products. 
Security News Agenda Ransomware’s New Rust Variant Targets Critical Sectors Agenda ransomware, also known as Qilin, has a new Rust variant using partial encryption. See which sectors it targets and how to reduce exposure. 
Security News Critical RCE Alarm on Citrix ADC and Citrix Gateway A critical security vulnerability has been identified in Citrix ADC and Citrix Gateway network solutions that could allow threat actors to RCE. 
Security News ZeroBot: New Botnet Malware Using IoT Security Vulnerabilities Developed with Golang, Zerobot exploits multiple vulnerabilities detected in IoT devices to gain access to targeted systems and spread further. 
Security News Critical RCE Alarm in FreeBSD Ping A critical security vulnerability has been identified in the ping module of FreeBSD operating system that threat actors could potentially exploit. 
Security News LastPass Suffers A Data Breach The LastPass data breach used information from the August 2022 incident to reach customer data. See what was accessed and why your master password matters. 
Security News WhatsApp Suffered from a Data Breach – 487 Million Users Data in Danger In a well-known hacking forum, a threat actor claimed that a database of 487 million WhatsApp users' mobile phone numbers was compromised 
Security News Amazon Fixes a Security Vulnerability Affecting AWS AppSync A security vulnerability called "cross-tenant" has been detected by security researchers in AppSync, a popular Amazon Web Services (AWS) tool. 
Security News Threat Group Named Worok Performs Espionage Activities With Backdoors Hidden Inside Image Files Worok is a cyber espionage group that hides malware in PNG image files and uses Dropbox for command and control. Learn how it works and how… 
Security News New KmsdBot Malware Detected for Crypto Mining Activities and DDoS Attacks KmsdBot spreads through weak SSH passwords to mine cryptocurrency and launch DDoS attacks. How it works and how to protect SSH access on servers. 
Security News Medibank Confirms Security Breach Affecting 9.7 Million Customers’ Data Medibank said criminals accessed the data of 9.7 million current and former customers in an October 2022 ransomware attack. See what was taken. All 20 pages
About The Blog.
Last updated June 9, 2026-
Articles on ransomware, APT groups, the dark web, digital risk protection, fraud, sector analysis and VIP security, written for security teams.
-
New articles are added several times a month. The newest come first, and every article shows its publish date.
-
Use the topic chips above the list to open one topic, or type a word in the search box. Each topic has its own page.
-
Articles draw on public sources such as CISA advisories, MITRE ATT&CK and ENISA reports. Sources are listed at the end of an article when it cites them.
-
The site feed at brandefense.io/feed/ lists new posts. The email sign-up box is on the All Resources and Reports pages.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
The count at the top of the blog page shows the current total, and each topic chip shows how many articles that topic holds. You can open all of them or pick one topic, such as APT Groups, Dark Web, Ransomware or Fraud. Each article shows its publish date.
-
The blog describes its articles as explained by the analysts who track threats. They cover threat actors, dark web activity, ransomware and digital risk. The newest articles appear first.
-
Yes. APT Groups is one of the topic chips above the list, and it opens only the articles on that topic. The Knowledge Hub also holds profiles of threat groups.
-
The surface web is the part of the internet that search engines list. The deep web is content that search engines do not list, such as pages behind a login. The dark web needs special software to reach. The blog has an article that explains the three layers in plain words.