Actionable Cyber Threat Intelligence Blog | KELA Cyber

Upcoming Webinar / Breached By Association - Outsmarting Cyber Risk In Your Supply Chain

Read more

Cyber Intelligence Hub

Reduce your cyber risk and enhance your security posture with our expert resources. We provide the intelligence and strategies you need to protect your organization from evolving cyber threats.
AllCTIThreat Actor SpotlightDark Web
Warlock’s Attack on Colt Leak Analyzed
Threat Actor Spotlight

August 19, 2025

Warlock’s Attack on Colt Leak Analyzed: Sensitive Files Potentially ExposedThe ransomware attack on Colt Technology Services was claimed by the Warlock ransomware group. KELA examined the list of allegedly stolen files published by Warlock.
why third party risk in healthcare demands immediate attention
Compliance

August 16, 2025

Why Third-Party Risk in Healthcare Demands Immediate AttentionThird party risk in healthcare is no longer just a compliance concern but a direct threat to patient safety, data privacy, and operational continuity. As healthcare organizations increasingly rely on
the evolution of phishing and brand protection
Cybersecurity

August 13, 2025

Smarter Detection, Less Noise: The Evolution of Phishing and Brand ProtectionPhishing has evolved into a highly targeted and realistic threat, often serving as the entry point for major breaches. Discover the key capabilities your organization needs to protect its brand, domai
a close up of a cell phone with the words kela cybercrime update
Threat Actor Spotlight

August 12, 2025

KELA Cybercrime Update: July 2025 SnapshotKELA reveals key cybercrime trends, from pro-Russian hacktivist attacks to advanced payload loaders and active vulnerabilities. This blog series highlights the latest threats shaping the cybercrime la
a red and black background with the words 2013 threat recap
Threat Actor Spotlight

August 11, 2025

2025 Midyear Cyber Threat Recap: Evolving Tactics and Emerging DangersCybercrime is surging in 2025, with record ransomware attacks, millions of infostealer infections, and faster vulnerability exploitation. KELA’s Midyear Threat Report outlines the key threats and urge
dark forums chronicles
Threat Actor Spotlight

July 30, 2025

DarkForums Chronicles: A Look into the Forum's Leadership DarkForums, originally launched as "DARK4RMY Forums" in 2022, has skyrocketed in activity, with a 600% surge in activity between April 1 and June 30, 2025. It swiftly absorbed much of BreachForums' us
XSS Forum Seized: KELA Reveals User Reactions and Speculations
Dark Web

July 23, 2025

XSS Forum Seized: KELA Reveals User Reactions and SpeculationsOn July 22, 2025, Ukrainian authorities arrested a man suspected of operating XSS, one of the most prominent Russian-language cybercrime forums active on the dark web. The arrest was the culmination o
Access Brokers: Their Pivotal Role in Cybercrime
Dark Web

July 15, 2025

Access Brokers: Their Pivotal Role in CybercrimeAccess brokers play a critical role in the cybercrime ecosystem, enabling cybercriminals to gain and sell unauthorized access to networks. This post explores their role and highlights effective strate
The group behind the aviation industry attacks - scattered spider
Threat Actor Spotlight

July 8, 2025

Scattered Spider: The Group Behind the Aviation Industry AttacksThis blog offers a comprehensive overview of Scattered Spider’s evolution, tactics, victims, and current threat level, drawing from a Scattered Spider Threat Actor Profile, which compiles research an