Browsing: attacks

In April 2026, we at Kaspersky’s Global Emergency Response Team (GERT) responded to a security incident at a manufacturing organization in the Middle East. The threat actor obtained domain admin-equivalent control of the organization’s Active Directory environment and authored a malicious Group Policy Object (GPO) named PAYLOAD, linking it at the domain root. Through that…

A recent wave of AI-powered voice phishing attacks targeting some of Wall Street’s most sophisticated financial firms has highlighted a growing cybersecurity reality: organizations can no longer trust what they hear. In August 2026, attackers reportedly used AI-generated voice clones to impersonate executives and trusted colleagues in an attempt to gain access to systems at…

Hiscox’s 10th Cyber Readiness Report found that 29% of organisations suffered at least one successful cyber attack in the past year. The study drew on responses from 6,800 cyber security decision-makers, including 1,000 in the UK.

Attackers are increasingly moving upstream, targeting the systems that build and distribute code rather than the applications that emerge from them. CI/CD pipelines, package registries including npm and PyPI, GitHub Actions workflows, and the AI agent tooling are now connected to all of them, attracting the attention that production software used to. Adversaries take over…