/
victim_sectors:construction × limpar

Resultados

4 casos · pág. 1/1

securelist.com · high

Lazarus Group's Operation FlashHole targets South Korean firms via CrossWeb EX abuse, GitHub C2 and new TouchHub/ClientHub malware

Kaspersky's analysis of Operation FlashHole describes a Lazarus Group campaign against South Korea that follows Operation SyncHole. The earliest evidence dates to July 2025, and the campaign was observed in January. At least three organizations in the software, construction and wired communication equipment manufacturing sectors were affe…

newsroom.trendmicro.com · low

Trend Micro 2024 Cyber Risk Report: average CRI falls to 38.4 as LockBit, RansomHub and Play lead ransomware breaches

Trend Micro published its 2024 Cyber Risk Report, based on telemetry from the Trend Vision One Cyber Risk Exposure Management platform. The average Cyber Risk Index (CRI) was 38.4 for the year, down 6.2 points from 2023, and stayed in the Medium Risk zone (31-69). Trend attributes the decline to organizations adopting proactive, risk-base…

securelist.com · low

Kaspersky ICS CERT Q2 2026: share of attacked ICS computers falls to 19.15%, lowest since 2022, with regional upticks

Kaspersky ICS CERT reports that in Q2 2026 malicious objects were blocked on 19.15% of ICS computers, the lowest level since 2022. Regional rates ranged from 8.1% in Northern Europe to 27.9% in Africa. East Asia saw the largest increase (+2.0 pp). The biometrics sector (26.44%) again led all industries. Kaspersky products blocked malware …

cisa.gov · high

CISA and FBI #StopRansomware advisory on Gunra, a Conti-derived RaaS exploiting Fortinet and VPN flaws for double extortion

The FBI, CISA, DC3, NSA, USSS and the Republic of Korea's KNPA issued joint advisory AA26-222A on Gunra ransomware. Gunra appeared in April 2025 as a double-extortion variant derived from the leaked Conti source code. It launched a structured RaaS affiliate program in January 2026, also operating under the alias Golden Community, and recr…