Author: Team-CWD
This week was a reminder that attackers do not always need big tricks. One small mistake, one old access path,…
New findings unearthed by Infoblox show that more than 236,000 websites are using investment scam templates built using a legitimate…
A ransomware group and a cyber-criminal gang which specializes in stealing credentials through supply chain attacks have teamed up in…
Microsoft has shut down a long-running malicious extension operation on the Edge Add-ons store that hid its payloads inside ordinary…
The Axios npm compromise was not only a reminder of how quickly modern software supply chain attacks can move, but…
The ransomware ecosystem is moving from fragmentation back to consolidation, with Qilin emerging as the dominant ransomware-as-a-service (RaaS) operation after…
A public proof-of-concept is now out for CVE-2026-55200, a critical flaw in libssh2 that lets a malicious or compromised SSH…
In a large-scale coordinated international operation, the FBI and Google’s Threat Intelligence Group have disrupted NetNut, one of the world’s…
Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a…
UK organizations suffered more than 26 successful ransomware attacks each month last year, with SMEs hit hardest, according to new…