October 2026: The latest critical PHP vulnerability, leaked on 20 October 2026, is being used against real targets. CYFIRMA has obtained the original target list drawn up by a group of Korean-speaking ...
Lazarus Group (DPRK)-Linked Operators Claim Exploitation of Two Critical PHP-Core RCE Vulnerabilities, Expanding Target Scope from 216 to 581 Hosts CYFIRMA has obtained the operators’ original target ...
Upgrade Wasmtime to versions 36.0.19 or 43.0.0. Avoid compiling untrusted WebAssembly modules using vulnerable versions. Restrict access to untrusted Wasm workloads until patched. Monitor for ...
We expect December to confirm telemetry-led attribution as the norm. The risk is not to the prediction but to defenders who are still deleting the only evidence they will get. On track. Investigations ...
This report covers the analysis and findings related to three Android application packages (APKs) assessed for malicious behavior. The objective of this assessment was to determine whether the samples ...
CYFRIMA’s research team uncovered a sophisticated mobile-based fraud operation distributing a malicious “RTO Challan / e-Challan” Android application through WhatsApp messages posing as official ...
The cyber threat landscape in the Philippines has intensified significantly over the past year as rapid digital adoption continues to outpace security maturity across government, businesses, and ...
Lateral Movement T1021.002 Remote Services: SMB/Windows Admin Shares Lateral Movement T1021.003 Remote Services: Distributed Component Object Model The ransomware primarily targets Windows OS, which ...
Pig-butchering scams long-con investment fraud schemes involving prolonged emotional grooming, impersonation, and fraudulent trading platforms have rapidly evolved into one of the most economically ...
CYFIRMA Research and Advisory Team would like to highlight ransomware trends and insights gathered while monitoring various forums. This includes multiple – industries, geography, and technology, that ...
At CYFIRMA, we are committed to delivering timely intelligence on emerging threats and attacker tactics. In this report, we analyze a high-risk Android malware variant that leverages advanced evasion, ...
The ransomware primarily targets Windows environments, utilizing Windows services, command-line utilities, registry configurations, system APIs, and filesystem operations to perform encryption, system ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results