On October 3, 2025, GreyNoise noted a 500% increase in scans aimed at Palo Alto Networks login portals, the highest activity level in three months. Researchers found that more than 1,285 IPs scanned Palo Alto portals, an increase from the typical 200. They noted that 93% of these IPs were …

Researchers at Google Mandiant and GTIG are monitoring a suspected Cl0p ransomware affiliate conducting a mass extortion campaign against Oracle E-Business Suite customers. The attackers allege they have stolen sensitive corporate data and are demanding ransoms up to $50 million, as reported by the incident response firm Halcyon, which is …

Trend™ Research is investigating a malware campaign that uses WhatsApp to infect users. This attack is focused on spreading quickly and taking advantage of social trust, rather than theft or ransomware. It’s called SORVEPOTEL and is currently most active in Brazil. The campaign is dubbed SORVEPOTEL by Trend Micro that …