3AM Hits European Schools: A Hybrid AI Ransomware Attack, Part Human, Part Agentic Loop

I’d like to thank my colleagues, Adrian Schipor and Martin Zugec, for their invaluable ...

Technical Advisory: PHP2Shell Pre-Auth RCE (CVE-2026-109618, CVE-2026-109619)

[CRITICAL] | CVSS v4.0 9.2 | No exploitation observed by Bitdefender | Patch immediately

Bitdefender Threat Debrief | October 2026

Operation KillSwitch Halts KillSec’s Ransomware Activity

Bitdefender Supported Operation KillSwitch: What the KillSec Takedown Changes for Defenders

Europol published the results of Operation KillSwitch on the first day of October 2026, ...

CyberLeek: Extortion Built for an Audience, Not a Victim

CyberLeekpositions itself as afinancially motivated extortionist group, taking part in the ...

SilkParasite: Tracking a China-Nexus APT Across Central Asia

TL;DR: SilkParasite is a cyberespionage operation, assessed at medium confidence as ...

Bitdefender Threat Intelligence: Built for How Security Teams Work

Simple investigations are known for only starting out that way. They can quickly become a ...

Operation Saffron: Bitdefender Joins “First VPN” Takedown

An international law enforcement operation led by France and the Netherlands dismantled ...

FamousSparrow APT Targets Azerbaijani Oil and Gas Industry

I'd like to thank my co-author, Martin Zugec, for his valuable contributions to this report.

Technical Advisory: ShinyHunters Breach of Instructure Canvas LMS

[CRITICAL] | Active extortion campaign | Exposure window closed | Credential rotation and ...

Subscribe to Blog Updates

On-demand Webinar

2023 MITRE Engenuity ATT&CK® Evaluations: Enterprise -Deciphering the Results

WATCH NOW