Security News. From Our Analysts.

Security news from the Brandefense team: new malware, vulnerabilities, data breaches and threat actor activity, summarized for security professionals.

Dark glass perimeter wall with five small doorways lit by red glows, cover art for: SafePay ransomware joint advisory and its five exploited flawsSecurity News SafePay Ransomware Joint Advisory: Five Exploited Flaws and How to Close Them A joint advisory from US, German and UK agencies counts at least 600 SafePay victims. Here are the five exploited flaws it names, what to patch… Oct 21, 20265 Min Dark glass grid of glass cells with a new row of red lit cells with red neon lines, cover art for: MITRE ATT&CK v20 adds AI abuse and water attacksSecurity News MITRE ATT&CK v20 adds AI abuse and water attacks MITRE ATT&CK v20 adds AI prompt injection techniques, MFA bypass via app passwords and a campaign against US water utilities. See what changed. Oct 19, 20264 Min Dark glass stair of glass tiles with the top tile glowing red with red neon lines, cover art for: CISA KEV additions, 13 to 16 Oct 2026: patch orderSecurity News CISA KEV additions, 13 to 16 Oct 2026: patch order CISA added nine exploited flaws to its KEV catalog from 13 to 16 October 2026. See each product, the fix, the due date and the order… Oct 19, 20264 Min Dark glass ledger book with one red flagged entry, cover art for the BeyondTrust news postSecurity News CISA adds BeyondTrust Remote Support flaw to its exploited list CISA says a critical BeyondTrust Remote Support flaw, CVE-2026-102764, is exploited. Versions 26.2.3 and earlier need the BT26-05-RS patch. Oct 18, 20264 Min Dark glass dark glass elastic spring coil bouncing back with a red glow with red neon lines, cover art for: DORA in 2026: what the ESAs say about year twoSecurity News DORA in 2026: what the ESAs say about year two What the ESMA and EIOPA pages say about DORA in 2026: scope, the six areas, technical standards, ESAs documents to 31 July 2026 and CTPP oversight. Oct 09, 20265 Min Dark glass row of dark glass dominoes toppling, the lead one glowing re with red neon lines, cover art for: Cyber compliance calendar 2026 and 2027: key datesSecurity News Cyber compliance calendar 2026 and 2027: key dates Cyber compliance calendar for 2026 and 2027 from official pages: Cyber Resilience Act, EU AI Act, NIS2, post-quantum milestones and rules with no date yet. Oct 09, 20263 Min Dark glass pair of dark glass drafting dividers over a blueprint sheet with red neon lines, cover art for: Plan a 2027 security programme with NIST CSF 2.0Security News Plan a 2027 security program with NIST CSF 2.0 Plan a 2027 security programme with NIST CSF 2.0: the six functions, Current and Target Profiles, Tiers and quick-start guides, as NIST words them. Oct 09, 20265 Min Dark glass dark glass flight recorder black box with a red beacon light with red neon lines, cover art for: Cyber incidents of 2026: lessons from official reportsSecurity News Cyber incidents of 2026: lessons from official reports Cyber incidents of 2026 and lessons from official reports: CISA, the UK NCSC and CERT Polska on the npm, SD-WAN and Poland energy cases, as of… Oct 09, 20265 Min Dark glass dark glass stepping stones crossing a glowing red river gap with red neon lines, cover art for: Post-quantum migration milestones: NCSC and EU datesSecurity News Post-quantum migration milestones: NCSC and EU dates Post-quantum migration milestones from the UK NCSC (2028, 2031, 2035) and the European Commission (end of 2026, end of 2030), as the pages state them. Oct 09, 20265 Min Dark glass faceted dark glass crystal lattice cube with a red glowing c with red neon lines, cover art for: Post-quantum cryptography: NIST and CISA guidance in 2026Security News Post-quantum cryptography: NIST and CISA guidance in 2026 Post-quantum cryptography in 2026: what NIST and CISA pages say on FIPS 203, 204 and 205, the 2035 date in the IR 8547 draft, and inventory… Oct 09, 20265 Min Dark glass dark glass castle turret with battlements lit by red windows with red neon lines, cover art for: UK Cyber Security and Resilience Bill: status in 2026Security News UK Cyber Security and Resilience Bill: status in 2026 UK Cyber Security and Resilience Bill status in 2026: what GOV.UK says on Commons stages, planned scope, 24 and 72 hour reporting, and no assent date. Oct 09, 20265 Min Dark glass dark glass stopwatch with a red glowing sweep hand, no numbe with red neon lines, cover art for: Incident reporting deadlines: NIS2, CRA, SEC, CIRCIASecurity News Incident reporting deadlines: NIS2, CRA, SEC, CIRCIA Compare incident reporting deadlines from official pages: NIS2 and CRA 24 and 72 hours, SEC Form 8-K four business days, and where CIRCIA stands today. Oct 09, 20265 Min
All 20 pages
FAQ

About The Blog.

Last updated June 9, 2026
  • Articles on ransomware, APT groups, the dark web, digital risk protection, fraud, sector analysis and VIP security, written for security teams.

  • New articles are added several times a month. The newest come first, and every article shows its publish date.

  • Use the topic chips above the list to open one topic, or type a word in the search box. Each topic has its own page.

  • Articles draw on public sources such as CISA advisories, MITRE ATT&CK and ENISA reports. Sources are listed at the end of an article when it cites them.

  • The site feed at brandefense.io/feed/ lists new posts. The email sign-up box is on the All Resources and Reports pages.

  • Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.

  • The count at the top of the blog page shows the current total, and each topic chip shows how many articles that topic holds. You can open all of them or pick one topic, such as APT Groups, Dark Web, Ransomware or Fraud. Each article shows its publish date.

  • The blog describes its articles as explained by the analysts who track threats. They cover threat actors, dark web activity, ransomware and digital risk. The newest articles appear first.

  • Yes. APT Groups is one of the topic chips above the list, and it opens only the articles on that topic. The Knowledge Hub also holds profiles of threat groups.

  • The surface web is the part of the internet that search engines list. The deep web is content that search engines do not list, such as pages behind a login. The dark web needs special software to reach. The blog has an article that explains the three layers in plain words.