Dark Watch

Dark Watch follows active cyber threats, ransomware, malware, cybercrime, espionage, phishing and data breaches. Coverage focuses on how attacks develop, the systems and behaviours they exploit, and what defenders can learn from verified threat research, incident reporting and attacker activity—while clearly separating confirmed facts from unverified claims.

Multiple Asian airlines report data breaches linked to Amadeus IT Group cyberattack

Dark Watch
Multiple airlines in Asia have reported data breaches linked to a cyberattack on Amadeus IT Group, a Spanish IT provider responsible for flight reservation and ticketing systems. Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore...

Google dismantles XCPE botnet of 1.3 million infected Android TV boxes linked to advertising fraud

Dark Watch
Google has announced the dismantling of the XCPE botnet, which comprised over 1.3 million infected Android TV set-top boxes, a move that is expected to disrupt access to an additional 10 million compromised devices. This botnet,...

Threat actors adopt AI tools for cybercrime, enhancing data theft and extortion tactics

Dark Watch
Recent observations from Unit 42 reveal a concerning trend in cybercrime, where threat actors are increasingly leveraging artificial intelligence (AI) tools to enhance their data theft and extortion tactics. This shift, noted in their latest threat...

Florida warns of data breach exposing sensitive information of nearly 5 million financial aid applicants

Dark Watch
Florida's Department of Education (FLDOE) has reported a significant data breach affecting nearly 5 million individuals who applied for financial aid in the state....

Revolve reports cyber incident exposing payment card information of 127,200 customers

Dark Watch
Online fashion retailer Revolve has disclosed a cyber incident in which hackers accessed sensitive payment card information, including card numbers and expiration dates, affecting...

Microsoft investigates human-operated intrusions exploiting Teams for help desk impersonation and AD CS abuse

Dark Watch
Microsoft is currently investigating two significant human-operated intrusions that exploited Microsoft Teams to impersonate IT support personnel, enabling attackers to socially engineer users into...

Ransomware operators claim 565 retail organizations targeted during 2026 holiday season

Dark Watch
As the 2026 holiday shopping season approaches, ransomware operators have claimed to target 565 retail organizations, according to a report from Palo Alto Networks'...

Ukrainian national sentenced to 70 months for role in Nefilim and Hive ransomware attacks

Dark Watch
A Ukrainian national, Artem Aleksandrovych Stryzhak, has been sentenced to 70 months in prison in the United States for his involvement in the Nefilim...

Hackers repeatedly breach third-party suppliers holding UK police data, watchdog reports

Dark Watch
Hackers have repeatedly compromised third-party suppliers holding British police data since 2021, according to a report published by His Majesty’s Inspectorate of Constabulary and...

eMudhra’s intermediate CA certificates compromised due to cryptographic defect, prompting revocation

Dark Watch
Eight intermediate certificate authority (CA) private keys belonging to Indian CA eMudhra Limited were compromised due to a critical cryptographic defect during the certificate...

City of Columbia confirms ransomware attack disrupting online services, investigation ongoing

Dark Watch
The City of Columbia, South Carolina, has confirmed that a cybersecurity incident identified on October 24, 2026, was a ransomware attack that disrupted several...
123...185Page 1 of 185

Recent Articles

Cyber Warriors Conclave Chapter X — Beyond the Ballroom