Topic: industry targeting
-
Ransomware Gangs Extorted $2.1B in Two Years: FinCEN
Ransomware extortion surged, with criminals collecting over $2.1 billion from 2022-2024, nearly matching the total from the previous eight years. While 2023 was a peak year, ransom payments dropped sharply in 2024, largely due to successful law enforcement actions against major gangs like ALPHV/B...
Read More » -
Account Compromises Soared 389% in 2025: Report
Account compromise incidents surged by 389% in 2025, with credential theft becoming the primary attack method, representing 75% of all malicious activity. The rise is driven by sophisticated Phishing-as-a-Service kits, which accounted for 63% of compromises and are designed to bypass defenses lik...
Read More » -
AI-Powered Hacking: How Clickfix Tools Are Breaching Systems
A 500% surge in Clickfix attacks in early 2025 highlights a shift toward AI-enhanced social engineering, where attackers use fake alerts to trick users into executing malicious commands, bypassing traditional security. AI is revolutionizing Business Email Compromise (BEC) by generating fabricated...
Read More » -
The Hidden Vulnerabilities in Email Security
Email is the primary cyberattack vector, with malware, scams, and phishing attempts surging by over 130%, 30%, and 20% respectively, causing widespread operational disruptions. Over 78% of organizations experienced an email breach last year, with phishing and impersonation being the most common m...
Read More » -
New Salty2FA Phishing Kit Raises Sophistication Alarm
The Salty2FA phishing kit uses advanced tactics like session-based subdomain rotation, legitimate platform abuse, and precise corporate branding to create highly convincing fraudulent login pages. It incorporates Cloudflare’s Turnstile and obfuscated JavaScript to evade automated analysis and com...
Read More » -
API Incidents Surge: 40,000+ Reported in First Half of 2025
The first half of 2025 saw over 40,000 API incidents, with APIs becoming a prime target for sophisticated automated attacks despite representing a small part of the attack surface. A record-breaking 15 million requests-per-second DDoS attack targeted a financial services API, using botnets that m...
Read More »