Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

Threat Intelligence

AI‑Powered Phishing Surge and New Ransomware Playbook Threaten Enterprises

AI‑Powered Phishing Surge and New Ransomware Playbook Threaten Enterprises

Check Point’s February 2 threat‑intel brief highlights a sharp rise in AI‑generated phishing emails that mimic corporate branding with unprecedented linguistic accuracy. Within the last week, over 1,200 targeted campaigns leveraged large‑language models to craft context‑aware messages, resulting in credential theft and initial‑access

Threat Intelligence

Record 31.4 Tbps DDoS Hits Major Service – Lessons for Defenders

Record 31.4 Tbps DDoS Hits Major Service – Lessons for Defenders

In Q4 2025 Cloudflare logged a 31.4 Tbps distributed denial‑of‑service assault, the largest ever measured. The multi‑vector attack combined UDP‑reflection, TCP SYN floods, and HTTP‑based amplification, leveraging a botnet of compromised IoT devices and misconfigured servers across dozens of continents. The traffic peaked for

AI Security & Threats

AI‑Powered OpenClaw Generates Self‑Evolving Malware Variants

AI‑Powered OpenClaw Generates Self‑Evolving Malware Variants

CrowdStrike’s latest research reveals OpenClaw, an AI‑driven malware framework that can automatically create new code variants, tailor its behavior to the host environment, and launch fully autonomous attack chains. The platform leverages large language models to rewrite its payload, evade signatures, and select exploits based on real‑time

Threat Intelligence

Sophos CISO Warns: Fake Remote IT Hires Threaten Enterprise Access

Sophos CISO Warns: Fake Remote IT Hires Threaten Enterprise Access

During a recent Reddit AMA, Sophos CISO Ross McKerchar revealed that cybercriminals are increasingly masquerading as remote IT contractors to infiltrate organizations. By posting bogus job listings or responding to legitimate hiring ads, these actors secure “remote hire” contracts, then use the supposed employment relationship to request privileged credentials, VPN

Vulnerabilities & Exploits

CISA Flags Common Open‑Source Tools Fueling Global Attacks

The Cybersecurity and Infrastructure Security Agency (CISA) just issued an advisory that catalogs dozens of publicly available utilities—such as remote access frameworks, credential‑dumping scripts, and network‑mapping scanners—that have repeatedly shown up in high‑profile breaches across continents. By aggregating data from incident reports, vendor disclosures, and

Threat Intelligence

APT36 Exploits ISO Attachments to Deploy Crimson RAT in Indian Startups

APT36 Exploits ISO Attachments to Deploy Crimson RAT in Indian Startups

Pakistan‑aligned APT36 has shifted its focus to India’s fast‑growing startup ecosystem. The group is delivering spear‑phishing emails that contain ISO‑based attachments. When opened, the ISO automatically extracts a malicious Windows shortcut (LNK) which executes a payload that installs the Crimson Remote Access Tool. Crimson RAT

Vulnerabilities & Exploits

Amaranth‑Dragon exploits fresh CVE‑2025‑8088 to infiltrate SE Asian critical infrastructure

Amaranth‑Dragon exploits fresh CVE‑2025‑8088 to infiltrate SE Asian critical infrastructure

Check Point’s threat‑intel team has identified a new campaign by the Amaranth‑Dragon group that leverages the just‑released CVE‑2025‑8088 vulnerability in widely deployed network appliances. The zero‑day allows remote code execution, which the actors use to install a custom backdoor and move laterally across

Vulnerabilities & Exploits

Shadow Campaigns: Global Espionage Exploiting SAP and Exchange Flaws

Shadow Campaigns: Global Espionage Exploiting SAP and Exchange Flaws

Palo Alto Networks Unit 42 uncovered a coordinated espionage operation dubbed “Shadow Campaigns” that chains together multiple high‑severity vulnerabilities to breach target networks. The actors first compromise Microsoft Exchange servers using the CVE‑2023‑23397 remote code execution flaw, then move laterally to SAP Solution Manager instances, where they