Introduction: why this report matters now A fresh Help Net Security write-up highlights new survey data on how managed service providers (MSPs) are coping with Microsoft 365 at scale. The research—conducted by Syncro—confirms that operational complexity, incomplete backup coverage, and…
Introduction: what happened and why it matters On October 17, 2025, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens — AP) fined Experian Nederland €2.7 million for multiple GDPR violations tied to large-scale collection and use of personal data for credit…
Introduction: the problem and the tactic Threat actors are publishing TikTok videos that masquerade as quick “activation” or “fix” guides for Windows, Microsoft 365, Adobe apps, CapCut Pro, Discord Nitro, and even streaming services. Viewers are instructed to run a…
A Complete Practical Guide to the NIS2 Directive for Organizations Across the EU The NIS2 Directive is the most significant update to Europe’s cybersecurity legislation in years.It redefines how organizations across the EU must manage risk, protect critical services, and…
Introduction: a high-impact supply-chain hit on aviation IT In September 2025, a cyberattack against Collins Aerospace (an RTX company) disrupted passenger processing across several major European airports by impacting MUSE (Multi-User System Environment), a common check-in/boarding platform used by multiple…
Introduction: the allegation and the target On October 19, 2025, China’s Ministry of State Security (MSS) accused the U.S. National Security Agency (NSA) of long-running cyber intrusions against the National Time Service Center (NTSC)—the organization that maintains China’s official time…
Introduction: what changed Fortinet has linked a fresh wave of phishing-led intrusions to the Silver Fox (aka SwimSnake / Void Arachne / UTG-Q-1000) cybercrime cluster. The actor, previously focused on China and Taiwan, is now actively targeting Japan and Malaysia,…
Introduction: what is “CAPI Backdoor”? Researchers have documented a previously unknown .NET backdoor dubbed “CAPI Backdoor” used in a campaign that likely targets Russian automotive and e-commerce organizations. The intrusion starts with phishing emails carrying a ZIP archive; inside, a…
Introduction: the problem and why it matters A new malvertising wave is pushing macOS infostealers by impersonating Homebrew, LogMeIn, and TradingView in sponsored Google Search results. The campaign uses polished fake download/“verification” pages and ClickFix social engineering (copy-paste a Terminal…