Security News. From Our Analysts.
Security news from the Brandefense team: new malware, vulnerabilities, data breaches and threat actor activity, summarized for security professionals.
Security News MuddyWater Threat Actors Target Turkey and Arabian Peninsula With A New Malware Campaign Iranian state-backed MuddyWater threat actors have been associated with a new offensive campaign targeting Turkey and the Arabian Peninsula. Security News New Android Malware Detected to Hijack Google Authenticator MFA Tokens: “Escobar” The Aberebot Android banking trojan returned as Escobar, posing as antivirus, and can steal Google Authenticator MFA codes to take over bank accounts. 
Security News New Linux Kernel Vulnerability Detected Giving Threat Actors Root Access A Linux kernel flaw, Dirty Pipe (CVE-2022-0847), lets local users overwrite read-only files and gain root. See CVSS 7.8, affected and fixed versions. Security News Critical Security Vulnerabilities Detected in TerraMaster TOS Octagon Networks found critical flaws in TerraMaster TOS, including CVE-2022-24990, that let remote attackers run code on TNAS storage devices. 
Security News A New Malware Distributed via Fake Antivirus Applications: “SharkBot.” A new Android Banking Trojan has been detected distributed via a fake Anti-Virus application on the Google Play Store. 
Security News Avast Releases A Free Decryption Tool For HermeticRansom Ransomware Targeting Ukraine Avast released a free decryptor for HermeticRansom, the Go ransomware used with HermeticWiper in attacks on Ukraine. What it does and who it helps. 
Security News SolarWinds Serv-U FTP Server Has the Path Traversal Security Vulnerability CVE-2021-35250 is a path traversal flaw in SolarWinds Serv-U FTP Server 15.3 that can expose files on the system. Who is affected and what update fixes… Security News A Third Malware Used in Attacks Targeting Ukraine Detected: “FoxBlade” FoxBlade is a malware package detected in attacks on Ukraine in February 2022. See what it is, how fast Defender signatures arrived and how to defend. 
Security News Multiple Critical Vulnerabilities Detected in Schneider Electric Easergy P5 SCADA Software Multiple security vulnerabilities have been identified affecting Easergy voltage protection relays developed by Schneider Electric. 
Security News NVIDIA Exposed to a Cyber Attack Affecting Their Systems USA-based graphics card manufacturer NVIDIA has been exposed to a cyber attack that affected their systems and caused service interruptions. Security News A New Android Banking Trojan Detected in Google Play Store: “Xenomorph” A new Android banking trojan with more than 50,000 downloads has been identified, targeting 56 European Banks. Security News Critical RCE Alarm on Samsung Galaxy S21 A security vulnerability has been identified on Samsung Galaxy S21 devices that could allow threat actors to execute arbitrary code with root privileges. All 20 pages
About The Blog.
Last updated June 9, 2026-
Articles on ransomware, APT groups, the dark web, digital risk protection, fraud, sector analysis and VIP security, written for security teams.
-
New articles are added several times a month. The newest come first, and every article shows its publish date.
-
Use the topic chips above the list to open one topic, or type a word in the search box. Each topic has its own page.
-
Articles draw on public sources such as CISA advisories, MITRE ATT&CK and ENISA reports. Sources are listed at the end of an article when it cites them.
-
The site feed at brandefense.io/feed/ lists new posts. The email sign-up box is on the All Resources and Reports pages.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
The count at the top of the blog page shows the current total, and each topic chip shows how many articles that topic holds. You can open all of them or pick one topic, such as APT Groups, Dark Web, Ransomware or Fraud. Each article shows its publish date.
-
The blog describes its articles as explained by the analysts who track threats. They cover threat actors, dark web activity, ransomware and digital risk. The newest articles appear first.
-
Yes. APT Groups is one of the topic chips above the list, and it opens only the articles on that topic. The Knowledge Hub also holds profiles of threat groups.
-
The surface web is the part of the internet that search engines list. The deep web is content that search engines do not list, such as pages behind a login. The dark web needs special software to reach. The blog has an article that explains the three layers in plain words.