Research

Cyber Threat Intelligence Reports | Cybersecurity Risk Research

The latest industry news, interviews, technologies, and resources.

Research 2025-09-23

Qatar Threat Landscape Report

Executive Summary In this report, our researchers analysed recent cyber activity targeting Qatar, including data leaks, the sale of initial access, and ransomware incidents. We explain how initial access often…

Research 2025-09-23

From MUSE to Manual: Cyberattack Analysis on European Airport Operations

Executive Summary On 19 September 2025, multiple major European airports, including London Heathrow (LHR), Brussels (BRU), and Berlin Brandenburg (BER), experienced severe operational disruptions following a cyberattack that impacted check-in…

Research 2025-09-22

CYFIRMA INDUSTRY REPORT : FINANCE INDUSTRY

EXECUTIVE SUMMARY The CYFIRMA Industry Report delivers original cybersecurity insights and telemetry-driven statistics of global industries, covering one sector each week for a quarter. This report focuses on the finance…

Research 2025-09-19

DeerStealer Malware Campaign: Stealth, Persistence, and Rootkit-Like Capabilities

Executive Summary At CYFIRMA, we are dedicated to providing current insights into prevalent threats and the strategies employed by malicious entities targeting both organizations and individuals. DeerStealer is a sophisticated…

Research 2025-09-18

CYFIRMA : Defence Industry Threat Report

EXECUTIVE SUMMARY Between May and August 2025, CYFIRMA observed sustained cyber operations against the global defence sector, driven by both state-aligned groups and criminal actors. Campaigns linked to the People’s…

Research 2025-09-17

Fortnightly Vulnerability Summary

Fortnightly Vulnerability Summary CHECK OUT THESE FAST FACTS ON FORTNIGHTLY OBSERVED VULNERABILITIES. Fortnight's Most Impacted Products HarmonyOS | Windows | Chrome Fortnightly Trends in Vulnerabilities

Research 2025-09-16

UNMASKING A PYTHON STEALER – “XillenStealer”

EXECUTIVE SUMMARY Cyfirma’s threat intelligence assessment of XillenStealer identifies it as an open-source, Python-based information stealer publicly available on GitHub. The malware is designed to harvest sensitive system and user…

Research 2025-09-15

DIGITAL FRONTLINES : INDIA UNDER MULTI-NATION HACKTIVIST ATTACK

DIGITAL FRONTLINES : INDIA UNDER MULTI-NATION HACKTIVIST ATTACK EXECUTIVE SUMMARY At CYFIRMA, we are committed to offering up-to-date insights into prevalent threats and tactics employed by malicious actors, targeting both…

Research 2025-09-11

TRACKING RANSOMWARE : August 2025

EXECUTIVE SUMMARY In Aug 2025, ransomware activity remained elevated with 522 global victims, a slight decline from July but still far above 2023–2024 levels. Professional services, consumer services, and manufacturing…