Blog

Ghost-Tapping and the Chinese cybercriminal retail fraud ecosystem

Explore how Chinese-speaking cybercriminals use NFC relay fraud (“ghost-tapping”) to exploit mobile wallets, conduct retail fraud, and launder funds via Telegram.
http://news.poseidon-us.com/TMV3gj

Intelligence-Driven Defense: Four Critical Ransomware Trends Organizations Must Address

Discover four critical ransomware trends—from AI-driven phishing to supply chain exploits—and how cyber threat intelligence can counter them.
http://news.poseidon-us.com/TMV3fS

Tracking Candiru’s DevilsTongue Spyware in Multiple Countries

Recorded Future’s Insikt Group uncovers active infrastructure linked to Candiru’s DevilsTongue spyware across multiple countries. Discover how this stealthy spyware targets high-value individuals and evades detection.
http://news.poseidon-us.com/TMV3fC

Cloud Threat Hunting and Defense Landscape

Explore top cloud threats in 2025. Learn how attackers exploit misconfigurations, credentials, and native tools—and how to defend cloud environments.
http://news.poseidon-us.com/TMV3dJ

Enhanced Recorded Future Integrations Now Available for Google Security Operations

Discover powerful new updates to Recorded Future’s Google Security Operations integrations, including expanded SOAR automation and a brand-new SIEM integration to elevate your threat intelligence and response.
http://news.poseidon-us.com/TMV3bm

Why Patch Management Isn’t Enough: SharePoint, Webshells & the Modern Threat Landscape

SharePoint vulnerabilities and AI-discovered webshells expose how checkbox compliance fails against evolving threats. Learn why resilience—not just patching—is the new security imperative.
http://news.poseidon-us.com/TMV3bl

ToolShell Exploit: Critical SharePoint Zero-Day Threatens Global Enterprises

A zero-day exploit chain—ToolShell—targets on-prem Microsoft SharePoint servers via CVE-2025-53770 & CVE-2025-53771. Learn how attackers achieve RCE, persist access post-patch, and how to defend using YARA rules, Nuclei templates, and Recorded Future’s threat intelligence.
http://news.poseidon-us.com/TMV3bh

Inside DDoSia: NoName057(16)’s Pro-Russian DDoS Campaign Infrastructure

Discover how NoName057(16) targeted 3,700+ hosts across Europe using its DDoSia platform. This in-depth report reveals multi-tiered C2 infrastructure, attack patterns, and strategic geopolitical motivations behind the hacktivist-led campaign.
http://news.poseidon-us.com/TMV3bb

Anthropic MCP Inspector: CVE-2025-49596: Vulnerability Disclosure

Learn about CVE-2025-49596, a critical missing authentication vulnerability affecting Anthropic’s MCP Inspector tool. Download our Nuclei template to check if your systems are vulnerable.
http://news.poseidon-us.com/TMV3Zx

A place where former federal workers can speak freely, preserving stories lost in the wake of sweeping government cuts

“It’s not only to capture institutional knowledge, but also start to build a database of stories,” said Dr. Jason Chernesky. The post A place where former federal workers can speak freely, preserving stories lost in the wake of sweeping government cuts first appeared on Federal News Network.
http://news.poseidon-us.com/TMV3Lw