
Weekly Intelligence Snapshot – Week 45
In our latest Weekly #Intelligence Summary: ASEC Analysis Team has seen LockBit 3.0 Ransomware deployed through Amadey Bot, an Infostealer

In our latest Weekly #Intelligence Summary: ASEC Analysis Team has seen LockBit 3.0 Ransomware deployed through Amadey Bot, an Infostealer

Microsoft reports the RaspberryRobin worm is now part of a malware ecosystem and one of the largest active malware distribution

The US publishes its new #NationalSecurity Strategy focussed on China and Russia and emphasizing the key role of the Indo-Pacific

This week the Microsoft Threat Intelligence Center reports on ransomware, “Prestige”, which targets transportation and logistics sectors in Poland and

A CISA advisory reveals vulnerabilities exploited by China-sponsored groups. PatchTuesday: Microsoft fixes 84 #vulnerabilities (inc two 0-day).

This week, we analyze new espionage-driven campaigns related to the Lazarus/ZINC activity cluster.

We are closely following increased geopolitical tensions after the potential sabotage attacks to Nordstream pipelines in the Baltic sea.

Malware analyst 3xp0rt has uploaded a Lockbit 3 ransomware builder, allowing anyone to build executables for their own operation.

This week we analyze the latest campaign of the alleged Russian #threatactor TA505 and how it uses ServHelper and TeslaGun

This week we focus on Mobile Banking Trojan Ermac, aimed at stealing credentials from financial and Cryptocurrency applications.
Try searching our blog

PHP Prepares Emergency Fixes for Two Vulnerabilities | Storm-0940 Uses AI to Accelerate Microsoft 365 Attacks | Lithuania Links Starlink Arson Attempt to Russian Sabotage

AI Coding Agents Publish Internal Screenshots from Over 300 Organizations to Public GitHub Repositories | Denmark Says Russia Has Conducted Sabotage Attacks Against Its Defense Firms
ECSO interviewed Marco Riccardi after QuoIntelligence won the ECSO STARtup Award 2026 as Europe’s Most Promising Cybersecurity Start-up.

AI-Driven Cyberattack on Dutch Institute for Vulnerability Disclosure (DIVD) Automates Exploitation and Post-Compromise Activity | European Trade Unions and Civil Society Groups Tell European Governments To End All Contract With Palantir