
Daemon Tools Hackers Used Valid Certificates to Hide Backdoor for Month
Chinese-speaking attackers compromised Daemon Tools software installers and went undetected for nearly a month. The supply chain attack began on April 8,
The latest Threats & Attacks coverage, tracked and summarised by the analysts who run our SOC.
Updated daily · last update May 7, 2026

Chinese-speaking attackers compromised Daemon Tools software installers and went undetected for nearly a month. The supply chain attack began on April 8,

Sistemi Informativi, an IBM Italy subsidiary managing IT infrastructure for Italian public agencies and major private companies, was breached by the Chinese-linked

A new phishing kit called Bluekit has turned session hijacking into a point-and-click operation. Discovered by Varonis Threat Labs, the platform combines

Britain handled 204 nationally significant cyberattacks in 2025, more than double the 89 recorded the previous year, as hostile states replaced criminal
North Korean state hackers compromised the Axios npm package on 31 March 2026, inserting a cross-platform remote access trojan into one of JavaScript's most widely…

Cybercriminals are compromising trucking and logistics companies to steal physical cargo shipments worth billions. A threat cluster identified by Proofpoint has been

Russia's military intelligence service has been inside home and office routers across Europe and beyond for two years, stealing login credentials from

A device code phishing campaign using Railway's Platform-as-a-Service infrastructure has compromised Microsoft 365 accounts at hundreds of organizations across five countries. Huntress

A C-suite executive at Swedish cybersecurity firm Outpost24 was targeted in a sophisticated phishing attack that leveraged trusted brands including Cisco and
Iran's cyber offensive capability has shifted into high gear following joint US-Israeli military strikes in late February 2026. Multiple Iranian state-linked groups and hacktivist proxies…
A known cybercriminal operation has spent months building an elaborate fake GitHub ecosystem to poison the AI development supply chain. The SmartLoader gang, first identified…
This isn't a content mill. The threats we summarise here are the ones our Sweden-based analysts watch for across client environments, around the clock.
See how MDR worksArticles
Longer-form briefings and explainers, from incident breakdowns to practical NIS2 and Zero-Trust guidance.
Cybersecurity 101
Plain-language explainers on the core concepts, threats and frameworks behind modern security, for specialists and decision-makers alike.