Resources

Resources and Insights

The latest industry news, interviews, technologies, and resources.

News 2026-02-20

Weekly Intelligence Report – 20 February 2026

Ransomware of the week CYFIRMA Research and Advisory Team would like to highlight ransomware trends and insights gathered while monitoring various forums. This includes multiple - industries, geography, and technology…

Research 2026-02-17

Fortnightly Vulnerability Summary

Fortnightly Vulnerability Summary CHECK OUT THESE FAST FACTS ON FORTNIGHTLY OBSERVED VULNERABILITIES. Fortnight's Most Impacted Products Qsync| MacOS | Wekan Decrease in vulnerability compared to the previous two weeks. Fortnightly…

Research 2026-02-16

AUTOMOTIVE Q1 I 2026 : INDUSTRY REPORT

EXECUTIVE SUMMARY The CYFIRMA Industry Report delivers original cybersecurity insights and telemetry-driven statistics of global industries, covering one sector each week for a quarter. This report focuses on the automotive…

News 2026-02-13

Weekly Intelligence Report – 13 February 2026

Research 2026-02-12

TRACKING RANSOMWARE : JAN 2026

EXECUTIVE SUMMARY The January 2026 Ransomware Threat Report highlights a ransomware ecosystem that has matured into a highly adaptive, service-oriented criminal economy defined less by technical exploitation and more by…

Research 2026-02-11

APT Profile – Fancy Bear

Fancy Bear is a well-documented Russian state-sponsored threat actor that has been active since at least 2007 and is widely assessed to operate in close coordination with Russian intelligence services.…

Research 2026-02-09

TRANSPORT & LOGISTICS Q1 I 2026 : INDUSTRY REPORT

Research 2026-02-08

LTX Stealer : Analysis of a Node.js–Based Credential Stealer

EXECUTIVE SUMMARY At CYFIRMA, we analyze attacker techniques that rely on legitimate installers and user trust to enable low noise system compromise. This report presents the analysis of a Windows-based…

Research 2026-02-07

Re-Emerging Telegram Phishing Campaign Targeting User Authorization Prompts

INTRODUCTION CYFIRMA has identified an active and evolving Telegram phishing operation that abuses Telegram’s native authentication workflows to obtain fully authorized user sessions. Unlike traditional phishing attacks that rely solely…

Research 2026-02-06

CVE-2026-23760 – SmarterTools SmarterMail Authentication Bypass Vulnerability

EXECUTIVE SUMMARY CVE-2026-23760 represents a severe authentication bypass vulnerability in SmarterTools SmarterMail email server software. The flaw exists in the password reset API endpoint (force-reset-password), which permits unauthenticated requests and…