Security News. From Our Analysts.
Security news from the Brandefense team: new malware, vulnerabilities, data breaches and threat actor activity, summarized for security professionals.
Security News Critical RCE Alarm in Sophos Firewall Solutions A critical 0-day security vulnerability that affects Sophos Firewall solutions has been identified and is known to be actively exploited by threat actors. 
Security News AttachMe: The Critical Vulnerability in Oracle Cloud Infrastructure AttachMe was a critical Oracle Cloud Infrastructure flaw that let attackers attach other customers' storage volumes. How it worked and why it mattered. 
Security News Tarfile: The 15 Years Old Critical Python Vulnerability Affects More Than 350,000 Projects A critical security vulnerability has been identified in Python's Tarfile module that has not been updated for 15 years. 
Security News American Airlines Suffered From A Data Breach American Airlines found on July 5, 2022 that attackers had taken over some employee email accounts, putting customer and employee personal data at risk. 
Security News Critical Zero-Day Alarm on Trend Micro Apex One Trend Micro has released security updates regarding a zero-day vulnerability identified in Apex One and Apex One SaaS endpoint security solutions 
Security News Mirai Variant MooBot Botnet Targets Vulnerable D-Link Devices MooBot, a Mirai botnet variant, targets D-Link devices through known flaws such as CVE-2015-2051 and CVE-2022-26258 to use them in DDoS attacks. 
Security News RedLine Stealer Malware Was Distributed Through the Corporate Social Media Accounts RedLine Stealer was spread through a sponsored Facebook post and hacked business accounts offering fake free Adobe Reader. See how it worked. 
Security News TikTok Suffered A Data Breach Resulting In The Leak Of 2 Billion User Data The source codes of the popular social media application TikTok and the sharing claiming that 2 Billion user data have been seized. 
Security News MuddyWater APT Group Targeted the SysAid Servers MuddyWater, an Iranian APT group, targeted SysAid servers through Log4j 2 flaws. Learn how the attack worked, who is behind it and how to defend. 
Security News LastPass Suffers A Security Breach The LastPass breach let attackers take source code and technical data via a developer's stolen credentials. See what happened and how to protect accounts. 
Security News Phishing Attacks Targeting Python Package Repository (PyPI) Users Detected In PyPI, it has been detected that phishing attacks targeting project developers have been carried out by injecting malicious code into Python packages. 
Security News DirtyCred – A Critical Linux Kernel Security Vulnerability DirtyCred is a Linux kernel technique that swaps low-privileged credentials for privileged ones. It has no CVE of its own and is not CVE-2022-0847. All 20 pages
About The Blog.
Last updated June 9, 2026-
Articles on ransomware, APT groups, the dark web, digital risk protection, fraud, sector analysis and VIP security, written for security teams.
-
New articles are added several times a month. The newest come first, and every article shows its publish date.
-
Use the topic chips above the list to open one topic, or type a word in the search box. Each topic has its own page.
-
Articles draw on public sources such as CISA advisories, MITRE ATT&CK and ENISA reports. Sources are listed at the end of an article when it cites them.
-
The site feed at brandefense.io/feed/ lists new posts. The email sign-up box is on the All Resources and Reports pages.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
The count at the top of the blog page shows the current total, and each topic chip shows how many articles that topic holds. You can open all of them or pick one topic, such as APT Groups, Dark Web, Ransomware or Fraud. Each article shows its publish date.
-
The blog describes its articles as explained by the analysts who track threats. They cover threat actors, dark web activity, ransomware and digital risk. The newest articles appear first.
-
Yes. APT Groups is one of the topic chips above the list, and it opens only the articles on that topic. The Knowledge Hub also holds profiles of threat groups.
-
The surface web is the part of the internet that search engines list. The deep web is content that search engines do not list, such as pages behind a login. The dark web needs special software to reach. The blog has an article that explains the three layers in plain words.