Log in Request a demo
Tag

cybersecurity news. Tagged Articles.

28 articles tagged cybersecurity news.

All471 APT Groups94 Dark Web28 Digital Risk Protection122 Fraud14 Ransomware48 Sector Analysis34 VIP Security7
Enterprises GitHub Repos Are Targeted through Captured Auth0 Access TokensSecurity News Enterprises GitHub Repos Are Targeted through Captured OAuth Access Tokens GitHub says stolen OAuth user tokens issued to Heroku and Travis CI apps were used to download private repositories, including npm. See what to review. Apr 21, 20222 Min Russian domain data breachesSecurity News The Allegation that the Data of the Russian-Based Domain Registrar Domain.ru Was Captured GhostSec threat actors have targeted the Russian-based Domain registrar Domain.ru, and they have been posting claims that critical corporate data has been compromised. Apr 19, 20221 Min fake android app steal banking informationSecurity News Fake Web Apps Steal Android Users’ Banking Information Threat actors manipulate various Android applications and carry out campaigns targeting the banking information of Malaysian Android users. Apr 12, 20222 Min banking trojanSecurity News A New Android Banking Trojan Distributed via Google Play Store: “OCTO” A new malware campaign has been detected deploying the banking trojan "OCTO," which aims to hijack users' banking information through multiple Android apps. Apr 11, 20222 Min Cicada APT Group Targets Government InstitutionsSecurity News Cicada APT Group Targets Government Institutions Cicada, also tracked as menuPass and APT10, ran espionage campaigns against government bodies via Exchange flaws. See its tools, backdoor and defenses. Apr 07, 20222 Min phishingSecurity News The Threat Actor Breached MailChimp Customer Accounts In the MailChimp breach, an unknown threat actor hijacked internal tools used by the company's customer support staff for account management. Apr 06, 20222 Min beastmode botnetSecurity News Beastmode Botnet Targets Security Vulnerabilities in Totolink Routers Beastmode Botnet, a variant of Mirai Botnet, has been detected to exploit security vulnerabilities in Totolink routers to expand access to vulnerable systems. Apr 04, 20221 Min remcos rat trojan deteceted in a new phishing campaignSecurity News New Phishing Campaign Detected That Deploying Remcos RAT A phishing campaign delivers Remcos RAT through a password-protected Excel file in fake payment emails. See how the chain works and how to stay safe. Apr 01, 20222 Min Critical Vulnerability Affected SonicWall Firewall SolutionsSecurity News Critical Vulnerability Affected SonicWall Firewall Solutions An unauthenticated, remote threat actor could exploit this vulnerability to execute arbitrary code and trigger a DoS condition on SonicWall Firewall. Mar 30, 20221 Min Storm Cloud APT Group Targets macOS SystemsSecurity News macOS Systems Were Targeted by the Storm Cloud APT Group Researchers have detected unauthorized access to a MacBook Pro device running macOS 11.6 via the GIMMICK malware associated with the Storm Cloud APT group. Mar 25, 20223 Min Malicious Applications Distributed on Google Play Detected to Target Facebook AccountsSecurity News Malicious Applications Distributed on Google Play Detected to Target Facebook Accounts Facestealer malware targeting Android users is distributed on Google Play and third-party application stores under the name Craftsart Cartoon Photo Tools. Mar 24, 20222 Min MicrosoftSecurity News A New Backdoor in Microsoft: Serpent The Serpent backdoor targets French construction, real estate and government organizations through phishing, Word macros and PowerShell hidden in images. Mar 21, 20222 Min
FAQ

About The Blog.

Last updated June 9, 2026

  • Articles on ransomware, APT groups, the dark web, digital risk protection, fraud, sector analysis and VIP security, written for security teams.

  • New articles are added several times a month. The newest come first, and every article shows its publish date.

  • Use the topic chips above the list to open one topic, or type a word in the search box. Each topic has its own page.

  • Articles draw on public sources such as CISA advisories, MITRE ATT&CK and ENISA reports. Sources are listed at the end of an article when it cites them.

  • The site feed at brandefense.io/feed/ lists new posts. The email sign-up box is on the All Resources and Reports pages.

  • Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.

  • The blog page shows 470 articles. You can open all of them or pick one topic, such as APT Groups, Dark Web, Ransomware or Fraud. Each article shows its publish date.

  • The blog describes its articles as explained by the analysts who track threats. They cover threat actors, dark web activity, ransomware and digital risk. The newest articles appear first.

  • Yes. APT Groups is one of the topic chips above the list, and it opens only the articles on that topic. The Knowledge Hub also holds profiles of threat groups.

  • The surface web is the part of the internet that search engines list. The deep web is content that search engines do not list, such as pages behind a login. The dark web needs special software to reach. The blog has an article that explains the three layers in plain words.