CYFIRMA Research and Advisory Team would like to highlight ransomware trends and insights gathered while monitoring various forums. This includes multiple industries, geographies, and technologies ...

CVE-2026-101077 – Netcore NR289-GE Reason: Unauthenticated remote exploitation + public exploit + total technical impact. Isolate affected devices immediately if a fixed firmware is unavailable. All ...

We expect December to confirm telemetry-led attribution as the norm. The risk is not to the prediction but to defenders who are still deleting the only evidence they will get. On track. Investigations ...

Preemptive cybersecurity enables earlier intervention against credible threats, giving defenders time to deny access, expose adversary behaviour or disrupt an attack. Preemptive cybersecurity Key ...

Preemptive cybersecurity enables earlier intervention against credible threats, giving defenders time to deny access, expose adversary behaviour or disrupt an attack. Preemptive cybersecurity is a ...

The cyber threat landscape in the Philippines has intensified significantly over the past year as rapid digital adoption continues to outpace security maturity across government, businesses, and ...

Lateral Movement T1021.002 Remote Services: SMB/Windows Admin Shares Lateral Movement T1021.003 Remote Services: Distributed Component Object Model The ransomware primarily targets Windows OS, which ...

At CYFIRMA, we provide timely insights into emerging threats and malicious tactics targeting organizations and individuals. CYFIRMA’s research team recently identified a sophisticated dropper binary ...

CYFIRMA’s assessment with available data suggests that Bert ransomware may evolve into a broader threat targeting global industries, including finance, manufacturing, and healthcare. Its use of ...

This report has been revised to remove references to the obfuscation tool previously mentioned, as the obfuscation techniques in the specimen (GetAppsRu.apk) were not specifically linked to any ...

Ransomware activity during June 2026 underscored the continued evolution of the threat landscape from isolated malware campaigns into a mature, service-driven criminal ecosystem capable of sustaining ...