SentinelOne reveals real-world attacks from DPRK, ransomware groups, and Chinese APTs, exposing evolving threats facing cybersecurity vendors in 2025.

DragonForce ransomware cartel targets UK retailers with Conti-based payloads, RansomBay leaks, and phishing attacks, warns SentinelOne report.

The recent cybersecurity landscape has been marked by significant disruptions that challenge long-standing assumptions about the…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

SentinelLABS exposes China-nexus APTs (ShadowPad, PurpleHaze) targeting SentinelOne and over 70 organizations in extensive cyber-espionage.

SentinelOne uncovers a new macOS.ZuRu variant using a trojanized Termius app. It gains persistence via LaunchDaemon and deploys a Khepri C2 beacon for remote control.

New ZuRu malware attacks are targeting macOS users by impersonating popular apps like Termius. Learn how this evolving threat bypasses system protections.

Scattered Spider Threat Intelligence Report

SentinelLABS and Beazley expose PXA Stealer, a Python-based infostealer campaign targeting 62 countries with stealthy DLL sideloading, decoy files, and Telegram-based data exfiltration.

A new ransomware strain, Cephalus, is attacking companies by using a legitimate SentinelOne binary to execute its payload, disable defenses, and encrypt files.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

The financially motivated group Storm-0249, long known as a broker of initial access for ransomware operators, has markedly

Storm-0249 IAB abuses the SentinelOne EDR process via DLL sideloading to evade detection. The group uses LoLBin tools for fileless execution and sells access to ransomware groups like LockBit.

A new and deceptive cyber-espionage campaign is targeting Israeli organizations by disguising malicious implants as trusted antivirus software updates. A new report from SEQRITE Labs’ APT Team det…

SmarterTools has disclosed a comprehensive retrospective regarding a recent infiltration of its infrastructure, meticulously delineating the adversaries’ entry

The compromise of a perimeter network appliance can swiftly shepherd a malefactor toward domain controllers and the enterprise’s

SentinelOne DFIR reveals how attackers exploit FortiGate NGFW flaws to extract credentials, abuse Active Directory, and establish persistent network access.

The Chinese cyber-espionage collective Dragon Breath, also recognized by the designation APT-Q-27, has purportedly acquired a formidable new

How CrowdStrike Outran SentinelOne While Running the Same Race CrowdStrike now generates roughly five times the revenue of SentinelOne, trades at five times the EV-to-revenue multiple, and commands a …