Ransomware
LockBit successor group hits three European logistics firms in one week
A crew using rebuilt LockBit 4.0 tooling encrypted warehouse systems in Rotterdam, Hamburg and Gdansk after entering through unpatched VPN appliances.
Malware & Threats
Campaigns, breaches and the vulnerabilities attackers are using right now.
Vulnerabilities
OpenGate VPN flaw CVE-2026-001 exploited within 48 hours of disclosure
Mass scanning began a day after the advisory. Over 11,000 appliances were still exposed a week later.
Nation-State
Frostbyte campaign pivots from energy to EU finance regulators
The espionage cluster tracked as Frostbyte is now sending tailored lures to supervisory staff at three national financial authorities.
Data Breaches
Healthcare billing vendor confirms 2.1 million patient records exposed
Names, insurance numbers and treatment codes were copied from a reporting database through a SQL injection flaw.
Cybercrime
Europol dismantles phishing-as-a-service kit used in 40,000 attacks
Investigators seized the panel behind a kit that cloned bank and parcel delivery login pages in 23 languages.
Fraud & Identity Theft
Deepfake voice calls drive new wave of CFO payment fraud
Finance teams report cloned executive voices requesting urgent supplier payments, often paired with lookalike email domains.
Cyberwarfare
Undersea cable operators tighten monitoring after Baltic incidents
Operators are adding acoustic sensing and sharing vessel tracking data after two cables were damaged in a month.