CYBERSECURITYJOURNAL The Monthly BriefOriginal cybersecurity reporting and practical analysis, alongside headlines from trusted publications, agencies and researchers.
The national intelligence service says it detected the intrusion in December 2025, stopped it and repaired the affected email service. Its statement adds the responder’s account to ESET’s investigation.
A Romanian server was configured to collect correspondence involving NATO and EU addresses. The finding places the exposure inside a government correspondent’s own mail system.
Netcraft documents fraudulent downloads and storefronts as Rockstar sets November 10 preloading ahead of its November 19 launch.
Two help desk impersonation cases show how remote support access reached certificate-backed privileges.
Talos finds a Windows implant that can make AI requests using credentials available on an infected host.
New research into a 2025 Ukrainian intrusion shows why incident responders must test whether an initial foothold served more than one operator.
Brief changes to update infrastructure show why a clean download today cannot settle whether a workstation was exposed months ago.
Joint research traces an espionage operation that combined familiar document lures with an archive-software exploit.
New FBI guidance calls for checks across the employment lifecycle as facilitators take on a wider role in fraudulent hiring.
ESET’s new research traces a downloader used against Ukrainian organizations and explains why an apparently harmless program can conceal a second role.
Cisco Talos describes targeted invitations and altered QR codes aimed at Taiwan research organizations.
Proofpoint’s new TA419 research puts trusted professional outreach under scrutiny at universities, think tanks and law firms.
Microsoft’s latest research puts renewed attention on follow-up emails, event invitations and the trust built during ordinary professional exchanges.
Ontinue’s research describes an information stealer that interferes with endpoint visibility and persists beyond a simple file removal.
Microsoft’s latest Storm-3168 research shows why workload permissions deserve the same scrutiny as human administrator accounts.
996 sourced updates · Publication dates or labeled coverage weeks shown · Read full coverage at the source