Black Arrow Cyber Threat Intelligence Briefing 13 February 2026:

-‘Dead’ Outlook Add-In Hijacked to Phish 4,000 Microsoft Office Store Users

-30+ Chrome Extensions Disguised as AI Chatbots Steal Users’ API Keys, Emails, Other Sensitive Data

-Payroll Pirates Are Conning Help Desks to Steal Workers’ Identities and Redirect Paychecks

-Naming and Shaming: How Ransomware Groups Tighten the Screws on Victims

-LummaStealer Infections Surge After CastleLoader Malware Campaigns

-Devilish Devs Spawn 287 Chrome Extensions to Flog Your Browser History to Data Brokers

-AI Threat Modelling Must Include Supply Chain, Agents, and Human Risk

-Deepfake Fraud Taking Place on an Industrial Scale, Study Finds

-Supply Chain Attacks Now Fuel a ‘Self-Reinforcing’ Cybercrime Economy

-These 4 Critical AI Vulnerabilities Are Being Exploited Faster than Defenders Can Respond

-Those 'Summarise With AI' Buttons May Be Lying to You

-Which Cyber Security Terms Your Management Might Be Misinterpreting

-Follow the Code

Black Arrow Cyber Threat Intelligence Briefing 06 February 2026:

-From Clawdbot to OpenClaw: This Viral AI Agent Is Evolving Fast – and It’s Nightmare Fuel for Security Pros

-Why Moltbook Changes the Enterprise Security Conversation

-Beware of Weaponised Voicemail Messages Granting Hackers Remote Access to Your System

-Open the Wrong “PDF” and Attackers Gain Remote Access to Your PC

-AI Drives Doubling of Phishing Attacks in a Year

-Nitrogen Ransomware Is So Broken Even the Crooks Can’t Unlock Your Files

-The Human Layer of Security: Why People Are Still the Weakest Link in 2026

-What Is Cyber Risk Management and Why It Is Important for Businesses?

-The Growing Cyber Risk in Interconnected Supply Chains

-Over 75 Percent of Cyber Security Professionals Worry About AI Agent Risks

-Experts Show How Major UK Food Crisis Might Occur

Black Arrow Cyber Threat Intelligence Briefing 30 January 2026:

-Cyber Security Failures Stem from Leadership Gaps, Not Technology, Says Former FTSE CISO

-10 Ways AI Can Inflict Unprecedented Damage in 2026

-Vibe-Coded 'Sicarii' Ransomware Can't Be Decrypted

-Over 100 Organisations Targeted in ShinyHunters Phishing Campaign

-77% of Financial Service Organisations Accrued Security Debt in 2025

-Patch or Perish: Vulnerability Exploits Now Dominate Intrusions

-5 Reasons Why a Password Manager Is More Essential than Ever

-Password Reuse in Disguise: An Often-Missed Risky Workaround

-Data Breach Exposes 149M Login Credentials for Apps Such as Gmail, Instagram, Netflix and More

-‘We’re Losing Massively’: EU Cyber Chief Warns Europe’s Defences Lag

Black Arrow Cyber Threat Intelligence Briefing 23 January 2026:

-A New LinkedIn Phishing Scam Is Targeting Executives Online – Make Sure You Don’t Fall for This

-LastPass Warns of Phishing Campaign Attempting to Steal Master Passwords

-VoidLink: Evidence That the Era of Advanced AI-Generated Malware Has Begun

-Analysis of 6 Billion Passwords Shows Stagnant User Behaviour

-For Cyber Risk Assessments, Frequency Is Essential

-Most SMBs Aren’t Set Up to Survive a Major Cyberattack – Here’s What Needs to Be Done

-63% of IT Leaders Say Firms Overestimate Cyber Recovery

-Cyber Risks Among CEOs’ Top Worries Amid Weak Short Term Growth Outlook

-Global Tensions Are Pushing Cyber Activity Toward Dangerous Territory

-Europe Wants to End Its Dangerous Reliance on US Internet Technology

-UK Firms’ Cyber Security Budget Set for Major Increase

-Europe’s GDPR Cops Dished Out €1.2B in Fines Last Year as Data Breaches Piled Up

Black Arrow Cyber Threat Intelligence Briefing 16 January 2026:

-We’re Moving Too Fast: Why AI’s Race to Market Is a Security Disaster

-The Speed Mismatch Putting Modern Security At Risk

-New Intelligence Is Moving Faster than Enterprise Controls

-Cyber Risk Enters a New Era as AI and Supply Chains Reshape Global Security

-Allianz Risk Barometer 2026: Cyber Remains Top Business Risk but AI Fastest Riser at #2

-Downtime Pushes Resilience Planning into Security Operations

-Executives More Likely to Take Phishing Bait than Junior Staff

-QR Codes Are Getting Colourful, Fancy, and Dangerous

-Convincing LinkedIn Comment-Reply Tactic Used in New Phishing

-Cyber Criminals Recruiting Insiders at Specific Organisations

-Ransomware Activity Surges to Record Levels

-State-Backed Cyberattacks Are No Longer a Government Problem – They’re Now a Boardroom Priority

Black Arrow Cyber Advisory - 14 January 2026 - Security Updates - Microsoft, SAP, Adobe

Throughout the year in our weekly Cyber Threat Intelligence Briefing, we bring you insights into the evolving cyber risks that your business faces and importantly, what you can do about them. As a business leader, you are not expected to be a cyber expert; you just need a sound grasp of the fundamentals, and an objective assessment of your risks and controls from an impartial expert so you can appropriately challenge your control providers. Proportionality and impartiality are key, and so too is keeping up to date with how the ground is shifting.

Black Arrow Cyber Threat Intelligence Briefing 09 January 2026:

-2025 Proved Hackers Aren’t Slowing Down – and Neither Should You

-Ransomware Attacks Kept Climbing in 2025 as Gangs Refused to Stay Dead

-Phishing Kits Soared in Popularity Last Year as Rookie Hackers Ramped Up DIY Cyber Attacks

-Cyber Risk Trends for 2026: Building Resilience, Not Just Defences

-Cyber Risk in 2026: How Geopolitics, Supply Chains and Shadow AI Will Test Resilience

-Average Cyberattack Cost Hits $2.5M as Recovery Lags

-New Phishing Attack Impersonate as DocuSign Deploys Stealthy Malware on Windows Systems

-Phishers Exploit Office 365 Users Who Let Their Guard Down

-Dozens of Organisations Fall Victim to Infostealers After Failing to Enforce MFA

Black Arrow Cyber Threat Intelligence Briefing 02 January 2026:

-The Six Biggest Security Challenges Coming in 2026

-Top Sectors Under Cyber Attack in 2025

-Cyber Security Tech Recommended by Cyber Insurer Claims Data

-World Economic Forum Puts Cyber Security on Global Leadership Agenda

-Get Executives on Board with Managing Cyber Risk

-Executives Say Cyber Security Has Outgrown the IT Department

-How FOMO Is Turning AI Into a Cyber Security Nightmare

-Condé Nast Faces Major Data Breach: 2.3M WIRED Records Leaked, 40M More at Risk

-Zoom Stealer Browser Extensions Harvest Corporate Meeting Intelligence

-‘Help! I Need Money. It’s an Emergency’: Your Child’s Voicemail That Could Be a Scam

-The Changing Role of the MSP: What Does This Mean for Security?

-Customers Turn Cyber Breaches into Courtroom Battles

Black Arrow Cyber Threat Intelligence Briefing 26 December 2025:

-Why Hackers Love the Holidays

-Threat Actors Are Hiring Insiders in Banks, Telecoms, and Tech from $3,000 to $15,000 for Access or Data

-Watch Out - Hackers Are Coming After Your Christmas Bonus, as Paychecks Come Under Threat

-Scripted Sparrow Sends Millions of BEC Emails Each Month

-Cybercriminals Flock to a New Unrestricted AI Tool: 10,000 Prompts on the First Day

-Think You Can Beat Ransomware? RansomHouse Just Made It a Lot Harder

-Why Businesses Can No Longer Treat Cyber Security as an IT Problem

-Cyberattack Disrupts France’s Postal Service and Banking During Christmas Rush

-Ministers Confirm Breach at UK Foreign Office but Details Remain Murky

-The NCSC’s Warning to UK Firms: How to Boost Incident Response

-From AI to Cyber Risk, Why IT Leaders Are Anxious Heading into 2026

-Cyber Security Budgets Are Going Up

Black Arrow Cyber Threat Intelligence Briefing 19 December 2025:

-Streisand Effect: Businesses That Pay Ransomware Gangs Are More Likely to Hit the Headlines

-Future of Security Holds Bigger Budgets, New Threats

-The ‘World Is Not Ready’ for AI Cyber Security Risks, Booz Allen CEO Warns

-Phishing Messages and Social Scams Flood Users Ahead of Christmas

-2025’s Top Phishing Trends and What They Mean for Your Security Strategy

-The Agentic Shift: How Autonomous AI Is Reshaping the Global Threat Landscape

-From Open Source to OpenAI: The Evolution of Third-Party Risk

-Shadow Spreadsheets: The Security Gap Your Tools Can’t See

-Financial Times Investigation Raises Questions Over King Gaming Saga

-North Korea Stole a Record $2B in Crypto This Year

-New MI6 Chief Warns of Acute Russian Threat, Urges Tech-Driven Intelligence

-The Things Young Kids Are Using AI for Are Absolutely Horrifying

Black Arrow Cyber Threat Intelligence Briefing 12 December 2025:

-Human-Centric Cyber Risks Surge as AI Enters the Workforce, Report Finds

-Trend Micro Issues Warning Over Rise of 'Vibe Crime' as Cyber Criminals Turn to Agentic AI to Automate Attacks

-What the Rise in Cyber Insurance Claims Reveals About the Vulnerability of UK Businesses

-Nearly Two-Thirds of Organisations to Increase Cyber Security Investments in 2026: Marsh

-When It Comes to Security Resilience, Cheaper Isn’t Always Better

-Cyber Threats Are Evolving Fast - Is Your Leadership Keeping Up?

-A Tale of Two CISOs: Why An Engineering-Focused CISO Can Be a Liability

-Why Small Businesses Can’t Afford to Overlook Cyber Security This Peak Season

-New DroidLock Malware Locks Android Devices and Demands a Ransom

-Push Security Uncovers “ConsentFix”: A New Class of Browser-Native Phishing Attack

-Report Surfaces Multiple Novel Social Engineering Tactics and Techniques

-EU Leaders to Push Defence Readiness Amid Russia ‘Hybrid Attack’ Warnings

Black Arrow Cyber Advisory 10 December 2025 - Security Updates from Microsoft, SAP, Adobe, Fortinet, Google Android, Ivanti, React.js

Black Arrow Cyber Advisory - 08 December 2025 – React2Shell Vulnerability Actively Exploited in Web Technologies

Black Arrow Cyber Threat Intelligence Briefing 05 December 2025:

-Are MSPs the Weakest Link in Your Security Chain?

-Marquis Data Breach Impacts Over 74 US Banks, Credit Unions

-Stealthy Browser Extensions Waited Years Before Infecting 4.3M Chrome, Edge Users With Backdoors and Spyware

-How Financial Institutions Can Future-Proof Their Security Against a New Breed of Cyber Attackers

-Malicious LLMs Empower Inexperienced Hackers with Advanced Tools

-Companies Fear State Attacks More as Threat Landscape Evolves

-Spear Phishing is North Korean Hackers’ Top Tactic: How to Stay Safe

-CISOs, CIOs and Boards: Bridging the Cyber Security Confidence Gap

-Disinformation and Cyber Threats Expand Globally

-Cyber Attacks Among Biggest Risks to Financial Stability, Bank Chief Warns

-NATO May Get 'More Aggressive' in Countering Russia’s Hybrid Attacks, Top Military Official Says

-Ex Teen Hackers Warn Parents Are Clueless as Children Steal 'Millions'

Black Arrow Cyber Threat Intelligence Briefing 28 November 2025:

-M&A Risk: Ransomware Hackers Attack SMBs Being Acquired to Try and Gain Access to Multiple Companies

-CrowdStrike Catches Insider Feeding Information to Hackers

-A Third of Workers Risk Cyber Security Breach by Using Work Devices for Personal Use

-Shadow AI Security Breaches Will Hit 40% of All Companies by 2030, Warns Gartner

-New (ISC)2 Report Finds That Vendor Security Gaps Threaten Critical Infrastructure and Supply Chains

-A Fake Windows Update Screen Is Fooling Windows Users into Installing Malware

-FBI: Cybercriminals Stole $262 Million by Impersonating Bank Support Teams Since January

-Compromised Credentials Responsible for 50% of Ransomware Attacks

-Russian and North Korean Hackers Form Alliances

-Alliances Between Ransomware Groups Tied to Recent Surge in Cybercrime

Black Arrow Cyber Threat Intelligence Briefing 21 November 2025:

-The Trojan Prompt: How GenAI Is Turning Staff Into Unwitting Insider Threats

-Copy And Paste Cyber Security Warning — 99% Of Enterprises Now At Risk

-Google: Threat Groups Will Accelerate Their Use of AI in 2026

-“We’ve Seen a 30% Increase in Successful Email Scams in the Last Two Years”

-“We Are Moments Before the First Real Cyberwar, One in Which Not a Single Shot Is Fired”

-Our Industries Are Vulnerable to Cyber Attacks: Boardrooms Must Prioritize Resilience, Not Reaction

-Overconfidence Is the New Cyber Risk: Immersive’s 2025 Cyber Workforce Benchmark Report Exposes a Global Readiness Illusion

-The Hidden Cost of a Hack: Unpacking the Ripple Effect of Cybercrime

-Half of Ransomware Access Due to Hijacked VPN Credentials

-Half a Million Stolen FTSE 100 Credentials Found on Criminal Sites

-UK Targets Russian Cyber Gang as £14.7 Billion Attacks Hit British Economy

-Cyber-enabled Kinetic Targeting: Iran-linked Actor Uses Cyber Operations to Support Physical Attacks

Black Arrow Cyber Threat Intelligence Briefing 14 November 2025:

-Microsoft Teams’ New “Chat With Anyone” Feature Exposes Users To Phishing and Malware Attacks

-Chinese Spies Told Claude To Break Into About 30 Critical Orgs. Some Attacks Succeeded

-5 Reasons Why Attackers Are Phishing Over LinkedIn

-Cyber Insurers Paid Out Over Twice as Much for UK Ransomware Attacks Last Year

-Large Organisations Aren’t Paying Ransomware Threats Anymore: SMBs Are

-FBI: Akira Gang Has Received Nearly $250 Million in Ransoms

-Companies Forced to Make Financial Changes After a Cyberattack

-Cyberattack Impact on Employees May Be as Serious as Technical Fallout

-UK’s New Cyber Security and Resilience Bill Targets Weak Links in Critical Services

-Spy Boss Says Authoritarian Nations Ready to Commit ‘High Impact Sabotage’

-Online Age Checking Is Creating a Treasure Trove of Data for Hackers

-Google Play Store Hosted 239 Malicious Apps That Were Downloaded 40 Million Times

-Android Malware Steals Your Card Details and PIN to Make Instant ATM Withdrawals

Black Arrow Cyber Advisory - 12 November 2025 - Security Updates from Microsoft, Adobe and SAP

Black Arrow Cyber Threat Intelligence Briefing 07 November 2025:

-Enterprises are Not Prepared for a World of Malicious AI Agents

-The Phishing Renaissance, How AI Brought Back the Classics

-‘Data Sprawl’ Is Now Your Security Team’s Biggest Headache – And It’s Only Going to Get Worse

-Old Threats, New Consequences: 90% of Cyber Claims Stem from Email and Remote Access

-Survey: Organisations are Too Confident in Their Cyber Resiliency

-Thousands Fall Victim to Ransomware as European Attacks Reach Record Highs - Here’s Why They’re So at Risk

-How Ransomware Attacks Leverage Cyber Insurance Policies

-Violent Cybercrime Surges in Europe Amid Big Payouts

-Three of the Biggest Cybercrime Gangs Around Appear to Be Teaming Up - Which Could Be Bad News for All of Us

-Google Says 2026 Will Be the Year AI Supercharges Cybercrime

-Enterprises are Losing Track of the Devices Inside Their Networks

-Britain ‘Highly Vulnerable’ to Russian Cyber Attacks, Warns Former Army Chief