Payroll Pirates: Strange New Tides in Business Email Compromise 2026-08-06 True Arctic Wolf Labs True Expanding the Castle: New Campaigns, New Tooling, and the NeedleStealer Connection 2026-07-27 True Arctic Wolf Labs True What the OpenAI–Hugging Face Incident Really Tells Us 2026-07-22 True Laura Grace Ellis True Cookie Crumbles: How Exploitation of CVE-2026-0257 Leads to Qilin Ransomware 2026-07-20 True Arctic Wolf Labs True CVE-2026-24858: FortiCloud SSO Authentication Bypass Vulnerability Exploited 2026-01-28 True Julian Tuin True CVE-2026-24858: FortiCloud SSO Authentication Bypass Vulnerability Exploited 2026-01-28 True Julian Tuin True Microsoft Patch Tuesday: January 2026 2026-01-15 True Andres Ramos True CVE-2025-64155: FortiSIEM Remote Unauthenticated Command Injection Vulnerability 2026-01-15 True Andres Ramos True Microsoft Patch Tuesday: January 2026 2026-01-13 True Andres Ramos True CVE-2025-14847: MongoBleed Information Disclosure Vulnerability Exploited in the Wild 2025-12-29 True Julian Tuin True CVE-2025-14847: MongoBleed Information Disclosure Vulnerability Exploited in the Wild 2025-12-29 True Julian Tuin True CVE-2025-20393: Threat Campaign Targeting Cisco Secure Email Gateway, Cisco Secure Email and Web Manager 2025-12-19 True Julian Tuin True CVE-2025-20393: Threat Campaign Targeting Cisco Secure Email Gateway, Cisco Secure Email and Web Manager 2025-12-19 True Julian Tuin True CVE-2025-14733: WatchGuard Firebox iked Out of Bounds Write Vulnerability Exploited in the Wild 2025-12-19 True Andres Ramos True New Attack Technique “ConsentFix” Hijacks OAuth Consent Grants 2025-12-16 True Andres Ramos True Arctic Wolf Observes Malicious SSO Logins on FortiGate Devices Following Disclosure of CVE-2025-59718 and CVE-2025-59719 2025-12-16 True Arctic Wolf Labs True Arctic Wolf Observes Malicious SSO Logins on FortiGate Devices Following Disclosure of CVE-2025-59718 and CVE-2025-59719 2025-12-15 True Arctic Wolf Labs True Microsoft Patch Tuesday: December 2025 2025-12-10 True Andres Ramos True Microsoft Patch Tuesday: December 2025 2025-12-10 True Andres Ramos True CVE-2025-59718 and CVE-2025-59719: FortiCloud SSO Login Authentication Bypass 2025-12-10 True Julian Tuin True CVE-2025-55182: Critical Remote Code Execution Vulnerability Found in React Server Components 2025-12-04 True Stefan Hostetler True CVE-2025-55182: Critical Remote Code Execution Vulnerability Found in React Server Components 2025-12-04 True Stefan Hostetler True Shai-Hulud Malware Targets Numerous NPM Packages in Second-Wave NPM Supply-Chain Attack 2025-11-25 True Andres Ramos True How To Combat AI-Enhanced Social Engineering Attacks 2025-11-25 True Arctic Wolf True How To Combat AI-Enhanced Social Engineering Attacks 2025-11-25 True Arctic Wolf True Russian RomCom Utilizing SocGholish to Deliver Mythic Agent to U.S. Companies Supporting Ukraine 2025-11-25 True Jacob Faires and the Arctic Wolf Labs team True Trojan Horse 2025-11-12 True Arctic Wolf True Microsoft Patch Tuesday: November 2025 2025-11-12 True Andres Ramos True What’s Behind The Rise of Spear Phishing Attacks on IT Leaders? 2025-11-11 True Arctic Wolf True What’s Behind The Rise of Spear Phishing Attacks on IT Leaders? 2025-11-11 True Arctic Wolf True Microsoft Releases Emergency Patch for Exploited Critical Remote Code Execution Vulnerability (CVE-2025-59287) 2025-10-24 True Andres Ramos True Brazilian Caminho Loader Employs LSB Steganography and Fileless Execution to Deliver Multiple Malware Families Across South America, Africa, and Eastern Europe 2025-10-21 True Arctic Wolf Labs True Business Email Compromise (BEC) 2025-09-30 True Arctic Wolf True Cryptojacking 2025-09-30 True Arctic Wolf True September 2025 Update on Aggressive Ongoing Akira Ransomware Campaign 2025-09-26 True Stefan Hostetler True SonicWall Warns Customers of Data Exposure Incident Affecting MySonicWall Configuration Backup Files 2025-09-17 True Julian Tuin True SonicWall Warns Customers of Data Exposure Incident Affecting MySonicWall Configuration Backup Files 2025-09-17 True Julian Tuin True Arctic Wolf 2025 Security Operations Report Reveals Threat Landscape Acceleration, Majority of Security Alerts Now Occur Outside Working Hours 2025-09-16 True Arctic Wolf True Microsoft Patch Tuesday: September 2025 2025-09-10 True Andres Ramos True Widespread Salesforce Data Theft via Compromised Salesloft Drift OAuth Tokens 2025-08-27 True Andres Ramos True Widespread Salesforce Data Theft via Compromised Salesloft Drift OAuth Tokens 2025-08-27 True Andres Ramos True Arctic Wolf Observes July 2025 Uptick in Akira Ransomware Activity Targeting SonicWall SSL VPN – Copy 2025-08-01 True Julian Tuin True Arctic Wolf Observes July 2025 Uptick in Akira Ransomware Activity Targeting SonicWall SSL VPN 2025-08-01 True Julian Tuin True 8 Types of Social Engineering Attacks 2025-07-03 True Sule Tatar True Navigating Cyber Risks Amid Heightened Middle East Tensions 2025-07-02 True Ismael Valenzuela True How To Detect and Stop a Ransomware Attack 2025-06-30 True Isa Jones True GIFTEDCROOK’s Strategic Pivot: From Browser Stealer to Data Exfiltration Platform During Critical Ukraine Negotiations 2025-06-26 True Arctic Wolf Labs True GIFTEDCROOK’s Strategic Pivot: From Browser Stealer to Data Exfiltration Platform During Critical Ukraine Negotiations 2025-06-26 True Arctic Wolf Labs True CVE-2025-5777: Critical Information Disclosure Vulnerability “Citrix Bleed 2” in Citrix NetScaler ADC and Gateway 2025-06-25 True Andres Ramos True CVE-2025-5777: Critical Information Disclosure Vulnerability “Citrix Bleed 2” in Citrix NetScaler ADC and Gateway 2025-06-25 True Andres Ramos True 
