BigBrother Blog- 2026 2025 2024 2023 2022 2021 2020 2019 2018
AI blog APT blog Attack blog BigBrother blog BotNet blog CyberCrime blog Cyber blog Cryptocurrency blog Exploit blog Hacking blog ICS blog Incident blog IoT blog Malware blog OS Blog Phishing blog Ransom blog Safety blog Security blog Social blog Spam blog Vulnerebility blog
DATE | NAME | Info | CATEG. | WEB |
|
24.10.26 |
Ukraine’s State Data-Exchange System Targeted by Russian-Speaking Operator via Graylog Log4Shell | Disclosure note: Before publishing this research, we shared our findings and the victim data we recovered with the national CERTs of the affected countries. The CERTs are handling notification of the affected organizations in their jurisdictions. | BigBrother blog | HUNT.IO |
|
17.10.26 |
Spike in attacks targeting digital video recorders in Ukraine | GreyNoise identified an increase in scanning and exploitation attempts targeting Digital Video Recorders (DVR) in Ukraine between 21 September and 1 October 2026. The activity coincides with an escalation in Russian strikes across the country. There are a myriad of malicious use cases for compromising DVRs; one involves gaining the ability to physically survey an area to gain battlespace awareness before, during, and after kinetic strikes. | BigBrother blog | GRAYNOISE |
|
17.10.26 |
2026 Financial Sector Cyberattack Chain Analysis & Defense | Between September 30 and October 3, 2026, consecutive customer data leaks were confirmed at several major commercial banks in Korea. In particular, most of the leaks were found to have exploited APIs by targeting authentication and authorization flaws, and there are even concerns about potential automated attacks using AI agents. | BigBrother blog | Enki White Hat |
|
17.10.26 |
Yandex outage: data shows that instead of going dark, malicious bots went on the move | Following reported strikes on Yandex data centers, claims circulated on the Internet that Russian bot farms and influence operations had been knocked offline. HTTP traffic charts showed steep drops, fueling speculation that the infrastructure damage had stopped these malicious actors. However, aggregate traffic metrics can easily mislead. There are two autonomous system numbers (ASNs) associated with Yandex: AS13238 is used by Yandex’s search engine, while AS200350 runs its cloud services. | BigBrother blog | Cloudflare Blog |
|
17.10.26 |
French Supermarket Cyberattack: Exposed OT Behind France’s Food Supply | Supermarkets across France opened on Monday, October 12, to warm freezers and spoiled stock. Overnight, attackers had taken control of refrigeration controllers in hundreds of stores and forced them into defrost, heating equipment to as high as 50°C. Prosecutors confirmed fires, retailers estimated losses in the tens of millions of euros, and Coopérative U’s chief executive called the attack unprecedented. | BigBrother blog | SOCRADAR |
|
17.10.26 |
Iran War Cyber Threat Outlook: Conflict Phases and What Comes Next | Since the Iran War began on February 28, 2026, the conflict has moved through phases that most threat frameworks were not built to track. In cyberspace, SOCRadar tracked 1,357 incidents prominent in the first month that spanned 25+ countries, 15+ sectors, and 40+ distinct attack groups. That data does more than record what happened. It reveals a pattern | BigBrother blog | SOCRADAR |
|
17.10.26 |
Russia Is Tightening Internet Controls, Leading to Operational Risks | Since mid-2025, the Kremlin has intensified restrictions on digital communications and infrastructure, very likely to suppress the organization of domestic political dissent and conduct digital surveillance within Russia. | BigBrother blog | RECORDEDFUTURE |
|
10.10.26 |
CISA AA26-281A: How Chinese Government-Linked Actors Steal Sensitive Data | CISA published a joint cybersecurity advisory on October 8, 2026, which describes how Chinese government-linked threat actors combine automated reconnaissance with hands-on intrusion to steal sensitive data. | BigBrother blog | PICUSSECURITY |
|
10.10.26 |
Japan Adopts Proactive Cyber Defense Strategy | Japan’s Active Cyber Defense (ACD) framework shifts the country from voluntary information sharing and post-incident investigation to mandatory reporting, preventive communications analysis, and limited disruption of attack infrastructure. | BigBrother blog | RECORDEDFUTURE |
|
30.9.26 |
The 2026 U.S. Midterms Election Cyber Landscape | In late April 2026, Army General Joshua Rudd, the head of U.S. Cyber Command and the NSA, testified before the Senate Armed Services Committee that foreign adversaries would likely attempt to interfere in the upcoming midterm elections. When pressed on whether the joint Election Security Group had been stood up, he said he was not sure. | BigBrother blog | SOCRADAR |
|
3.9.26 |
Pegasus Spyware Infection of Serbian Pro-Democracy Student Activist - The Citizen Lab | In collaboration with the SHARE Foundation, the Citizen Lab confirmed that the iPhone of a member of Serbia’s student protest movement was infected with Pegasus spyware. | BigBrother blog | CITIZENLAB |
|
29.8.26 |
Cambodia-focused cluster uses multistage infection chain with localized lures |
Acronis’ Threat Research Unit (TRU) identified a recent campaign focused on Cambodia. The analyzed archives, discovered while hunting for related activity, use several lure themes, including Cambodian government notices, public health announcements, dental examination records, real estate documents, and promotional offers. |
||
| 26.8.26 | UK Power Facility Cyberattack Shutdown: What Critical-Infrastructure Operators and Defenders Need to Know | A reported cyberattack on a UK power-generation facility in July 2026 shows that even disruptions at a single site can raise broader questions about critical infrastructure resilience. | BigBrother blog | Trend Micro |
|
22.8.26 |
Operation CameraSwarm: Over 14,000 Dahua cameras compromised across Ukraine and Russia | Disclosure note: The relevant national CERTs were notified on 10 August 2026, and Dahua's PSIRT was notified regarding the issues that affect devices in all countries observed in this campaign. We appreciate Dahua PSIRT's engagement in reviewing parts of this research ahead of publication. Publication was held until 18 August 2026 under TLP:AMBER. | BigBrother blog | HUNT.IO |
|
1.8.26 |
Iran War’s Secondary Effects Shape 2026 US Violent Extremism | Explore the 2026 US violent extremism threat landscape. This report analyzes rising risks from HVEs, DVEs, and Iran-nexus actors to public and | BigBrother blog | Recorded Futures |
| 27.6.26 | Operation Endgame Targets SocGholish: What It Means for Defenders | Last year, Silent Push published research into SocGholish and its operator, TA569, highlighting how the group evolved from a “fake browser update” threat into one of the most sophisticated malware delivery and initial access operations active today. | BigBrother blog | SILENTPUSH |
| 18.4.26 | Germany has reclaimed its position as a primary focus for cyber extortion in Europe. While data leak site (DLS) posts rose almost 50% globally in 2025, Google Threat Intelligence (GTI) data shows that the surge is hitting German infrastructure harder and faster than its regional neighbors, marking a significant return to the high-pressure levels previously observed in the country during 2022 and 2023. | BigBrother blog | GTI | |
| 11.4.26 | FCC Bans Routers Made Outside USA. But What IS a Router? | The FCC recently announced a ban on the sale of consumer-grade internet routers manufactured outside the United States. More specifically, the FCC received a National Security Determination that caused them to update their “Covered List,” to include all foreign-made consumer-grade routers. | BigBrother blog | Eclypsium |
| 11.4.26 | UK Businesses Are Being Targeted Through Their Middle East Supply Chains — What to Do Now | Middle East supply chain risk is exposing UK businesses to indirect cyber threats through vendors, dependencies, and geopolitical tensions. | BigBrother blog | Cyble |
| 11.4.26 | SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks | Executive summary Forest Blizzard, a threat actor linked to the Russian military, has been compromising insecure home and small-office internet equipment like routers, then modifying their settings in ways that turn them into part of the actor’s malicious infrastructure. | BigBrother blog | Microsoft blog |
| 11.4.26 | U.S. Public Sector Under Siege: Threat Intelligence for Q1 2026 | The first quarter of 2026 has reinforced a hard truth: U.S. government agencies and educational institutions are operating in the most hostile cyber threat environment ever recorded. | BigBrother blog | Trend Micro |
| 4.4.26 | The democratisation of business email compromise fraud | This week, Martin tells the story of a crime he encountered and how it shows that the threat landscape is changing. | BigBrother blog | CISCO TALOS |
| 28.3.26 | India’s Evolving Cyber Threat Landscape: State-Sponsored Attacks, Hacktivism, and What’s Next in 2026 | India cyber threat landscape 2026 highlights state sponsored cyber attacks India, growing hacktivism, and shifting cyber risks. | BigBrother blog | Cyble |
| 14.3.26 | Australia, New Zealand, Tonga, Warn of Rising INC Ransom Attacks Targeting Pacific Networks | ACSC, NCSC, and CERT Tonga warn of growing INC Ransom activity targeting healthcare and organizations across Australia, New Zealand, and Pacific states. | BigBrother blog | Cyble |
| 28.2.26 | ENISA’s Updated Cybersecurity Methodology Aligns with NIS2 and EU Cybersecurity Act | ENISA’s Cybersecurity Exercise Methodology helps organizations align with NIS2 and the EU Cybersecurity Act while improving readiness and resilience. | BigBrother blog | Cyble |
| 21.2.26 | Turf Wars vs. Supply Chains: The Great Divergence in State Cyber Threats | Russia uses proxies; the PRC uses assembly lines. Discover how the Quartermaster, Breacher, and Specialist layers redefine 2026 threats. | BigBrother blog | Trelix |
| 7.2.2026 | France’s Cybersecurity Roadmap: Talent, Deterrence, and European Digital Sovereignty | France’s 2026-2030 cybersecurity strategy prioritizes talent, aiming to build Europe’s largest cyber workforce and strengthen national resilience. | BigBrother blog | Cyble |