SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States

Advanced Persistent Threat (APT) Stories

Global Stories

Advanced Persistent Threat (APT) stories

Microsoft warns AI is deepening cyber threat links
Malware

Microsoft warns AI is deepening cyber threat links

Threats are now spanning identities, cloud and software supply chains, with AI speeding attacks and complicating defence, Microsoft says.

By Raphael Veloso • 4 min read • This month
ThreatBook acquires CyberStrikeAI in red team push
Data Protection

ThreatBook acquires CyberStrikeAI in red team push

The deal gives security teams a widely used AI testing tool with on-premises controls, as vendors race to speed up offensive defence.

By Raphael Veloso • 4 min read • This month
Red Heron exploits Gitea flaw, uncovers SIXZUT rootkit
Malware

Red Heron exploits Gitea flaw, uncovers SIXZUT rootkit

Attackers turned a newly disclosed Gitea flaw into automated intrusions within days, hitting systems in five countries and exposing source code and secrets.

By Raphael Veloso • 4 min read • Last month
Infoblox warns of scam gambling risks in ANZ traffic
Malware

Infoblox warns of scam gambling risks in ANZ traffic

Security teams in Australia and New Zealand face hidden fraud and malware risks from gambling sites that can mask illegal deposits and scam withdrawals.

By Sean Mitchell • 4 min read • Last month
Google warns cyber attackers are moving to agentic AI
Malware

Google warns cyber attackers are moving to agentic AI

Attackers are compressing intrusions into hours, leaving defenders less time to spot and stop credential-harvesting campaigns.

By Sean Mitchell • 3 min read • Last month
Cambodia lures deploy SparkRAT in stealthy malware campaign
Endpoint Protection

Cambodia lures deploy SparkRAT in stealthy malware campaign

Victims risked silent compromise as attackers hid SparkRAT inside Cambodian-themed files and disabled security tools with a vulnerable driver.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Netpoleon ANZ expands Cofense phishing defence pact
Phishing

Netpoleon ANZ expands Cofense phishing defence pact

Rising AI-driven phishing attacks are pushing ANZ organisations towards post-perimeter defences, as Netpoleon widens Cofense access through its channel network.

By Sean Mitchell • 4 min read • Last month
Minimum viable company: Recover faster when systems go dark
Malware

Minimum viable company: Recover faster when systems go dark

Focusing on the right systems first can cut recovery time and help firms avoid reintroducing risk after a cyber attack.

By Lim Hsin Yin • 6 min read • Mon, 31st Aug 2026
Netscout adds CDN-bypassing DDoS protection features
Hybrid Cloud

Netscout adds CDN-bypassing DDoS protection features

Enterprises can now spot DDoS attacks hidden behind shared CDN traffic, reducing the risk of blocking legitimate customers on the same path.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 28th Aug 2026
TA4922 uses PackClient malware in tax phishing attacks
Phishing

TA4922 uses PackClient malware in tax phishing attacks

Proofpoint said the modular trojan can steal data and monitor users, raising risks for finance teams targeted by fake tax notices.

By Sean Mitchell • 4 min read • Fri, 28th Aug 2026
Ransomware attacks hit 894 as AI boosts cyber crime
Malware

Ransomware attacks hit 894 as AI boosts cyber crime

North America and Europe bore most of the 894 July ransomware incidents as NCC Group warned AI tools are accelerating attacks.

By Joseph Gabriel Lagonsin • 3 min read • Fri, 28th Aug 2026
Google flags Russian spies abusing real login features
Malware

Google flags Russian spies abusing real login features

Personal accounts used by researchers and officials are being hit by Russian-linked groups, exposing institutions to stealthy account theft and malware.

By Joseph Gabriel Lagonsin • 5 min read • Fri, 21st Aug 2026
Clop-linked web shell hits Windchill in new exploit
Virtual Private Networks

Clop-linked web shell hits Windchill in new exploit

Manufacturers face credential theft and engineering-data loss after a tailored Windchill web shell tied to Clop exploited CVE-2026-12569.

By Sean Mitchell • 4 min read • Wed, 19th Aug 2026
APT36-linked malware cluster targets South Asia telecoms
Network Security

APT36-linked malware cluster targets South Asia telecoms

Acronis says the campaign could expose communications and defence networks across Afghanistan and India by abusing cloud services and fake government lures.

By Mark Tarre • 4 min read • Mon, 17th Aug 2026
Group-IB puts Threat Intelligence on AWS Marketplace
Digital Transformation

Group-IB puts Threat Intelligence on AWS Marketplace

Security teams can now buy the product through AWS billing, potentially speeding procurement and counting it towards committed cloud spend.

By Mark Tarre • 4 min read • Wed, 5th Aug 2026

Stories from Other Regions

Advanced Persistent Threat (APT) stories

Frontier AI compresses cyber attack timelines. Can Singapore's defences respond at machine speed?
Privileged Access Management

Frontier AI compresses cyber attack timelines. Can Singapore's defences respond at machine speed?

Singapore banks and telcos face a narrower window to stop AI-assisted attackers chaining small flaws into major breaches.

By Kris Day • 6 min read • Wed, 19th Aug 2026
Autonomous AI agents hit Asian government in four-day breach
Robotics

Autonomous AI agents hit Asian government in four-day breach

Up to 85 government accounts were compromised in a four-day campaign that also reached nuclear and energy organisations, researchers said.

By Joseph Gabriel Lagonsin • 4 min read • Thu, 13th Aug 2026
AI agent used fake identities to push malicious code
Privileged Access Management

AI agent used fake identities to push malicious code

Cybersecurity experts warn single-person approvals are now vulnerable after an AI agent used fabricated identities to slip malicious code past checks.

By Sean Mitchell • 6 min read • Wed, 12th Aug 2026