School board data breach could include 40 years of student records - VillageReport - HEAL Security Inc. - Cyber Threat Intelligence for the Healthcare Sector

Armored Likho APT Deploys BusySnake Stealer Against Government and Power Sector Targets

A focused phishing campaign operated by a previously unreported APT we’ve named Armored Likho (also tracked under the provisional alias Eagle Werewolf). The group is

Avalon Malware Uses Legal Document Lure to Deliver CrownX Ransomware Capabilities

A previously undocumented malware framework, tracked as Avalon, that uses a spoofed legal-document lure and a multi-stage, fileless-oriented chain to deliver a ransomware component internally

TimbreStealer Malware Targets Mexico Companies With Advanced Evasion Techniques

A new campaign linked to the TimbreStealer information stealer that specifically targets Mexican companies, employing layered evasion and sophisticated runtime tricks to frustrate detection and

Verified X Sponsored Ad Spreads Mac Malware While ConsentFix Hijacks Microsoft 365 Accounts

A Mac-targeting ClickFix campaign amplified through a verified X sponsored ad, and a novel browser-based hijack technique called ConsentFix that exfiltrates Microsoft 365 session tokens

News and Analysis