SecurityBrief UK - Technology news for CISOs & cybersecurity decision-makers
United Kingdom

ReliaQuest Stories

UK Stories

ReliaQuest stories

Global Stories

ReliaQuest stories

AI helped build Gryxa malware operation, report says
Malware

AI helped build Gryxa malware operation, report says

ReliaQuest says a single operator may have used a commercial AI coding agent to build malware, a console and update pipeline across 324 hosts.

By Joseph Gabriel Lagonsin • 5 min read • Last month
Clop-linked web shell hits Windchill in new exploit
Virtual Private Networks

Clop-linked web shell hits Windchill in new exploit

Manufacturers face credential theft and engineering-data loss after a tailored Windchill web shell tied to Clop exploited CVE-2026-12569.

By Sean Mitchell • 4 min read • Wed, 19th Aug 2026
ReliaQuest deepens Anthropic deal to bolster GreyMatter
Data Protection

ReliaQuest deepens Anthropic deal to bolster GreyMatter

GreyMatter users will gain wider access to Anthropic's Claude models as ReliaQuest brings them deeper into its threat response platform.

By Mark Tarre • 4 min read • Wed, 19th Aug 2026
APT28-linked campaign hijacks hotel Wi-Fi for logins
Virtual Private Networks

APT28-linked campaign hijacks hotel Wi-Fi for logins

Corporate travellers at hotels and conference centres were quietly sent to fake Microsoft 365 pages after attackers took over guest Wi-Fi gateways.

By Joseph Gabriel Lagonsin • 4 min read • Mon, 27th Jul 2026
The Gentlemen tops ransomware rankings in Q2 review
Malware

The Gentlemen tops ransomware rankings in Q2 review

Ransomware activity stayed elevated in Q2, with 2,252 named victims and The Gentlemen overtaking Qilin to top the rankings.

By Mark Tarre • 5 min read • Fri, 17th Jul 2026
Phishing toolkits target Microsoft 365 MFA in surge
Multi-factor authentication

Phishing toolkits target Microsoft 365 MFA in surge

Account takeovers are becoming harder to stop as attackers use real-time code theft and fake login pages to bypass Microsoft 365 MFA.

By Mark Tarre • 5 min read • Wed, 15th Jul 2026
Helix data extortion group linked to BlackFile, ShinyHunters
Software-as-a-Service

Helix data extortion group linked to BlackFile, ShinyHunters

Businesses face a fresh wave of identity theft-driven extortion as Helix is linked to BlackFile and ShinyHunters through shared infrastructure.

By Sean Mitchell • 5 min read • Thu, 9th Jul 2026
Attackers abuse trust as ClickFix spreads to macOS
Ransomware

Attackers abuse trust as ClickFix spreads to macOS

The tactic now reaches Mac users, as attackers turn to trusted tools and social engineering to evade defences and steal credentials.

By Joseph Gabriel Lagonsin • 4 min read • Thu, 2nd Jul 2026
AI makes cybercrime faster, cheaper & harder to spot
Malware

AI makes cybercrime faster, cheaper & harder to spot

Existing phishing and fraud tactics are becoming faster, cheaper and harder to detect, raising the risk for large organisations, ReliaQuest said.

By Sean Mitchell • 4 min read • Thu, 25th Jun 2026
Klue breach lets attackers steal Salesforce CRM data
Customer Relationship Management

Klue breach lets attackers steal Salesforce CRM data

Trusted third-party access has let attackers quietly pull large volumes of Salesforce records from enterprise systems via a Klue integration.

By Sean Mitchell • 4 min read • Mon, 22nd Jun 2026
New China-linked OP-512 cluster targets old IIS servers
Security Operations Centres

New China-linked OP-512 cluster targets old IIS servers

Older, internet-facing IIS servers are being singled out by China-linked hackers, with one new cluster able to persist despite partial containment.

By Sean Mitchell • 5 min read • Thu, 11th Jun 2026
ReliaQuest warns of SonicWall MFA bypass after patching
Ransomware

ReliaQuest warns of SonicWall MFA bypass after patching

Patching alone has left some older SonicWall devices exposed to VPN attacks, with reliaQuest finding the first known in-the-wild use of CVE-2024-12802.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 22nd May 2026
KongTuke uses Microsoft Teams chats to breach firms
Malware

KongTuke uses Microsoft Teams chats to breach firms

Corporate users can be compromised in under five minutes when attackers pose as help-desk staff in external Microsoft Teams chats, researchers say.

By Sofiah Nichole Salivio • 4 min read • Fri, 15th May 2026
ReliaQuest spots ClickFix attack using PySoxy proxy
Malware

ReliaQuest spots ClickFix attack using PySoxy proxy

The attack kept retrying for hours after network blocks, as a scheduled task and Python proxy preserved access on the host.

By Sean Mitchell • 4 min read • Thu, 14th May 2026
Ransomware posts rise 22% as leak sites proliferate
Software-as-a-Service

Ransomware posts rise 22% as leak sites proliferate

Leak-site noise is making it harder for firms to tell real breaches from extortion theatre, as active sites hit 91 in the first quarter of 2026.

By Joseph Gabriel Lagonsin • 5 min read • Wed, 29th Apr 2026
Former Black Basta affiliates target executives in Teams
Unified Communications

Former Black Basta affiliates target executives in Teams

Senior staff are increasingly in the crosshairs as suspected former Black Basta affiliates use Teams impersonation to seize remote access.

By Joseph Gabriel Lagonsin • 4 min read • Thu, 16th Apr 2026

Stories from Other Regions

ReliaQuest stories

ReliaQuest backs Florida State AI cybersecurity push
EduTech

ReliaQuest backs Florida State AI cybersecurity push

Florida State University will expand AI cyber training and research after a USD $1.5 million gift from ReliaQuest to fund new student and faculty programmes.

By Sean Mitchell • 3 min read • Fri, 1st May 2026