Cyber Attacks
Organisations face persistent threat from imgdecode npm package still hosting encrypted shellcode loader
The malicious imgdecode package downloads encrypted payloads from GitHub and injects them into a new process on Windows systems.
Sandbox Desk Threat Research Desk
The Sandbox Desk Threat Research Desk is the part of the Sandbox Desk newsroom that covers attacks, malware, scams and the groups behind them. It is a newsroom desk, not a single person. Sections: Cyber Attacks, Malware & Ransomware, Threat Intelligence. Stories start from more than 150 monitored sources. Drafts are prepared with AI assistance and checked by software against the cited sources before they are published. It has published 6 articles so far. See the editorial policy or report an error.
Threat Intelligence
Physical drone strikes on Yandex data centers disrupt Russian cloud and AI services
Ukrainian drone attacks on three Yandex facilities force emergency mode and raise concerns about data loss and AI training delays.
Cyber Attacks
Healthcare Ransomware Frequency Surges in Q3 2026 Data
Attack volume against medical organizations more than doubled compared to the same period last year, averaging over three incidents daily.
Malware & Ransomware
USAF Afghanistan Ops Risked Classified Data via Pilots' Unvetted USB Drives
Pilots bought flash drives from local vendors and used them on classified systems, creating a risk of malware transfer between network environments.
Cyber Attacks
Android Deploys AI to Block Scams in Messages, Calls and Screen Shares
New Android features use artificial intelligence to detect fraud in texts and calls, while masking login data during screen sharing sessions.
Cyber Attacks
IMF warns AI debt web and cyber risks threaten global financial stability
The International Monetary Fund says interconnected AI financing and cyber threats to infrastructure could destabilize markets.