ALT The Radamanthys infostealer is targeting hotels, restaurants and other businesses in Switzerland and the United Kingdom. Mayur Sewani analyzes it in detail:

ALT Our X-Labs team recently observed increased activity from a new infostealer called VIPKeyLogger. Prashant Kumar analyzes it to show how this keylogger variant works:

ALT Maintaining HIPAA compliance is critically important—especially as more healthcare companies migrate services to the cloud. Tim Herr shares thoughts for implementing a HIPAA-compliant cloud security strategy:

ALT In the final post of our Future Insights 2025 series, Nick Savvides examines how the balkanization of global privacy regulation in the age of AI will impact data security in 2025 and beyond.

ALT New research from X-Labs: Streala Stealer #malware targets customers in Europe. Prashant Kumar shows you how it works:

ALT Mayur Sewani takes a look inside the Latrodectus #malware campaign to see what makes it tick. Read more:

ALT New from X-Labs: Prashant Kumar analyzes new activity from the Astaroth banking trojan delivered via secureserver[.]net URLs.

ALT Our X-Labs team identified a malspam campaign that targets businesses and individuals in Italy via PEC, the country’s certified email system. Hassan Faizan breaks down how hackers are doing it:

ALT Our X-Labs team found a new attack that uses a fake Ukrainian bank invoice to spread a malicious RMS tool. Pavlo Prodanchuk analyzes the campaign:

ALT New research from X-Labs: Mayur Sewani analyzes an AsyncRAT attack variant where hackers use Python and TryCloudflare to deploy #malware. Read more:

ALT New X-Labs analysis of #malware found lurking behind secureserver[.]net URLs being used to attack banks in Spanish and Portuguese-speaking regions. Prashant Kumar shares more:

ALT Threat actors use Telegram’s APIs for illicit activity—in this analysis from Forcepoint's X-Labs, stealing credentials.

ALT Our X-Labs team’s research seems to have discovered and identified basic ransomware targeting Turkish businesses. Read more from Mayur Sewani:

ALT Security News You Can Use, Issue 15—The biweekly series returns. Lionel Menchaca shares news about global police dismantling 600 Cobalt Strike servers, Cloudflare’s new tool that stops AI bots from scraping sites for training and much more: