Threat intelligence stories

Team Cymru unveils Total Insights Feeds, a single-stream threat intelligence framework blending internet-wide scoring, context and automated risk tagging.

Appdome expands IDAnchor with Risk Intelligence APIs to feed backend fraud systems mobile threat history, identity data and AI risk scoring.

GuidePoint says ransomware attacks stayed elevated in Q1 as The Gentlemen surged, construction became a top target and extortion-only tactics spread.

Artemis lands $70 million as investors back AI-driven cyber defence platform for real-time threat detection and response.

Manufacturing was the most targeted sector for ransomware in 2025, as Check Point counted 1,466 attacks worldwide amid rising supply chain exposure.

Survey finds 77% of security professionals want AI tools in security operations kept under human oversight, as 88% adopt guardrails.

Proofpoint says mailbox rule abuse is becoming a routine Microsoft 365 takeover tactic, helping attackers hide alerts, hijack threads and drive fraud.

Appdome widens its IDAnchor platform with server-side Risk Intelligence APIs, giving fraud teams verified mobile signals, threat history and AI-ready scores.

Splashtop bets on AI-assisted patching and security alerts in a single console as it targets lean IT teams and MSPs with a new endpoint platform.

VIPRE expands into student cyber safety with age-based lessons on phishing, AI impersonation and online abuse for schools and partners.

Sonatype flags 21,764 malicious open-source packages in Q1 2026, with npm hit hardest as attackers used trusted workflows to steal secrets.

Splashtop unveils AI-assisted endpoint platform for IT teams, blending patching, remote support and security alerts in one console.

Forrester warns Anthropic's Project Glasswing could overwhelm vulnerability management, as AI uncovers flaws faster than patching teams can respond.

Doppel secures three ISO certifications for AI governance, security and privacy, as enterprise buyers demand stronger assurance against AI-driven cyber threats.

Researchers link Android banking trojan to Cambodia scam compound, exposing a malware-for-hire network impersonating banks and agencies across 21 countries.

Cambodia scam compounds are being tied to a mobile banking fraud network that hit users in 21 countries, researchers say.

OPSWAT adds millisecond AI file screening to MetaDefender, aiming to cut false positives and speed decisions in critical infrastructure networks.

UK SOC spots Monday-morning conditional access failure from Germany, helps reset compromised Microsoft 365 account before attackers can strike.

Singapore organisations hit by 22% more cyberattacks in March, with consumer-facing and public sectors most exposed amid rising GenAI data-leak risks.

Lumen says malware-backed proxy networks are helping attackers hide in plain sight across Asia Pacific, as AI speeds up infrastructure changes.