Black Arrow Cyber Threat Intelligence Briefing 19 June 2026:

-FortiBleed Exposes Admin Passwords for 75,000 Fortinet Firewalls

-24 Billion Records, Including Usernames and Passwords, Exposed in Colossal Data Leak: What Does That Mean for You?

-Meet Kali365 — The ‘Amazon of Cybercrime’ Where Hackers Use AI to Completely Circumvent Multi-Factor Authentication

-HP Warns 11% of Email Threats Bypass Security Gateways

-Cybercriminals Are Moving Away from Mass Phishing Campaigns

-One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes

-“Dangerous” AI Models Are Coming No Matter What

-Low-Skilled Attacker Used Claude, Codex to Breach 14 Companies

-It’s Time to Update Incident Response for the AI Era

-NCSC CEO: Hostile States Linked to Three-Quarters of Cyber Attacks Affecting UK’s Critical Systems

-Over Two-Thirds of Security Pros Say Cyber Is Getting Harder

Black Arrow Cyber Threat Intelligence Briefing 12 June 2026:

-AI Risk Worries Insurers and Businesses Alike

-UK Regulator Warns AI Cyber Risks Pose Top Banking Threat

-Your AI Agent Could Become Your Biggest Insider Threat

-This New AI-Powered Worm Spreads Itself and Adapts in Real Time — Here’s How to Stop It

-AI Is Helping Low-Skill Hackers Pull Off Advanced Cyberattacks

-84% of Organisations Hit by Digital Risk Incidents Last Year. Most Can't Detect an AI-Generated Attack.

-Frontline Workers Twice as Likely to Use Unapproved AI

-Hackers Getting an Easy Ride: Misconfigured Cloud Settings Behind Growing Number of Data Breaches

-Cyber Security Software Fails to Detect Fifth of Browser-Based Phishing Attacks

-How Cyber-Risk Can Fall Flat in the Boardroom

-Ukraine’s Experience Highlights the Need for Preparation and Resilience in Cyber Security

-NCSC Urges Organisations to Shore Up Supply Chain Security Practices

Black Arrow Cyber Threat Intelligence Briefing 05 June 2026:

-Why Your Board Is Still Not Ready for Cyber Risk - And What Actually Needs To Change

-Execs Must Treat Cyber Threats as Statecraft, ISACA Expert Says

-UK Firms Prioritise AI Threat Preparedness as Cyber Risks Evolve

-Nation State Attacks: The Risk to UK Firms

-The Gentlemen Are Coming for Your Files, and Then Your Network

-Ransomware Groups Grow Revenue by Almost 40% in Q1 2026

-'The Com' Cyberattacks Support Violence & Sexploitation

-What Is Configuration Drift - And Why It’s Your Biggest M365 Security Risk

-Supply Chain Risk Is Now a Cyber Resilience Problem

-82% of IT Pros Report a Web-Based Security Incident in Past Year – BYOD, SaaS Tools, and Remote Work Policies All Play a Part in Security Resilience

-M&S Chief’s Pay Slashed by £3M After Cyberattack Turmoil

Black Arrow Cyber Threat Intelligence Briefing 29 May 2026:

-Could Your CEO Be the Weakest Link When It Comes to AI Security? New Study Warns Execs Are ‘Knowingly Bypassing Safeguards Because the Perceived Benefits Outweigh the Risks’

-Companies Built AI into Core Systems Before Figuring out How to Govern It

-When Your Biggest Security Risk Has Never Signed a Contract

-The AI Phishing Revolution: From Spray-and-Pray to Autonomous Operations

-Bosses Blinded by Confidence About Shadow AI Use by Workers

-68% of UK Firms Plan to Increase Cyber Spending as AI Risks Rise

-Preparing for Severe Cyber Threat: Why Leaders Must Act Now

-The UK’s Top Spy Says the Window to Stay Ahead of China and Russia Is Narrowing and Cyber Security Needs to Become ‘10 Times More Urgent’

-UK Spy Chief Labels AI ‘Unstoppable Force’ with Offensive, Defensive Ramifications for Cyberspace

-Phishing Most Prevalent Cyber Attack, Confirms UK Survey

-Security Experts Caution MFA Alone Can No Longer Stop Threat Actors

-To Pay, or Not to Pay: 58% of CISOs Say They Would Pay the Ransom for Their Data

-Lessons for Organisations from the Verizon 2026 Data Breach Investigations Report

Black Arrow Cyber Threat Intelligence Briefing 22 May 2026:

-Bank of England, FCA and Treasury Raise Alarm Over Frontier AI

-NCSC Publishes Guidance on Securing Agentic AI Use

-Social Engineering Attacks Are Rising as Employee Data Becomes Easier to Exploit

-Mobile Phishing Is a Bigger Threat than Email Now – How to Stay Protected

-Verizon DBIR 2026: Vulnerability Exploitation Overtakes Credential Theft as Top Breach Vector

-Critical Microsoft Vulnerabilities Doubled: from Exposure to Escalation

-Cyber Attacks Cost UK Businesses £3.7Bn in Litigation in 2025

-Crime Increasingly a ‘Serious Barrier’ to UK Growth, Say Business Leaders

-Cyber Resilience is the New Business Continuity Plan

-Cyber Threats Push SMBs to Spend More on Security

-When Compliance Isn’t Continuous, That’s a Security Risk

-Taking Care of Business: The CISO’s Role in a Cyber Crisis

-Four Incident Response Mistakes That Slow Recovery and Raise Breach Costs

Black Arrow Cyber Threat Intelligence Briefing 15 May 2026:

-Vibe Coding Is Causing ‘Thousands’ of Data Security Vulnerabilities

-NCSC and International Partners Warn of Agentic AI Risks

-Why Agentic AI Is Security's Next Blind Spot

-Over Half of MSPs Admit to Being Breached Multiple Times in Past Year

-Businesses Ask Non-Specialist Employees to Take On Cyber Security Tasks

-Poor Employee Awareness and Skills Gap Drive Cyber Security Breaches

-Increase in Email Attacks Driven by AI and Phishing-as-a-Service

-QR Code Phishing Was ‘Fastest-Growing’ Form of Email Attacks in Q1, Reports Microsoft Threat Intelligence

-Cyber Crime Increasingly Coming with Threats of Physical Violence

-The Evolution of Cyber Risk: Addressing Geopolitical Threats

-Europe Is Moving to Block Microsoft, Amazon, and Google from Handling Government Health, Financial, and Legal Data

-Britons Build ‘Emergency Stashes’ as Fears over Cyber-Attacks and Power Cuts Grow

-AI Cyber Attack Threatens Global Financial Crisis, Warns International Monetary Fund

Black Arrow Cyber Threat Intelligence Briefing 08 May 2026:

-Cyber is the Number One Global “People Risk,” Says Marsh

-Employees Are Now More Dangerous to Their Company than External Hackers

-Your Employees Know What Phishing Looks Like. They’re Still Getting Fooled. Here’s Why.

-Nearly Half of Initial Access Attacks Start with One Human Mistake

-86% of Phishing Attacks are AI Driven, KnowBe4 Research Finds

-Phishing Campaign Hits 80+ Orgs Using SimpleHelp and ScreenConnect RMM Tools

-Researchers Discover New All-in-One ‘Bluekit’ Phishing Kit Capable of Bypassing Enterprise 2FA Protocols and Emulating 40+ Global Brands

-MuddyWater Uses Microsoft Teams to Steal Credentials in False Flag Ransomware Attack

-Only One in Nine Ransomware Attacks Is Made Public

-Five Eyes Spook Shops Warn Rapid Rollouts of Agentic AI Are Too Risky

-AI Speeds Flaw Discovery, Forcing Rapid Updates, UK NCSC Warns

-Bank Executives Cite Economy, Cyber Security Risks as Top Concerns

-North Korea Stole 76% of All Crypto Taken in 2026

Black Arrow Cyber Threat Intelligence Briefing 01 May 2026:

-Cyber Attacks Now the Top Operational Risk for 60% of Financial Organisations

-Get Ready to be Attacked - NCSC

-UK Cyber Essentials Overhaul Could Trigger Instant Certification Failures

-Cyber Threat Literacy, AI Disruption Top Risks to an Organisation’s People

-AI Rush Is Reviving Old Cyber Security Mistakes, Mandiant VP Warns

-Deepfake Era Demands Proof-Based Security, Not Just Awareness

-Mythos Changed the Math on Vulnerability Discovery. Most Teams Aren't Ready for the Remediation Side

-Over 2.8 Billion Credentials Stolen in 2025 as Ransomware Evolves

-A Sneaky Cyber Enemy Is Creeping into Our Browsers and Password Managers

-The Behavioural Shift: Why Trusted Relationships Are the Newest Attack Surface

-Threat Actors Ditch ‘Spray and Pray’ Attacks in Shift to Targeted Exploitation

-A Dozen Allied Agencies Say China Is Building Covert Hacker Networks out of Everyday Routers

-What’s Behind Europe’s Efforts to Ditch US Software in Favour of Sovereign Tech

Black Arrow Cyber Threat Intelligence Briefing 24 April 2026:

-AI Is Now a ‘Standard Part of the Attacker Toolkit’

-Every Old Vulnerability Is Now an AI Vulnerability

-New Technology Is Increasing the Speed and Depth of Cyber Attacks

-The AI Era Demands a Different Kind of CISO

-Phishing and MFA Exploitation: Targeting the Keys to the Kingdom

-Phishing Reclaims the Top Initial Access Spot, Attackers Experiment with AI Tools

-Surge in Silent Subject Phishing Attacks Targets VIP Users

-Threat Actors Exploiting Trust in Everyday Workflows

-UK Must Brace for Rise in State-Backed Cyberattacks, Security Chief Says

-CISOs See Gaps in Their Incident Response Playbooks

-SMEs Say Cyber Resilience Is Lacking Amid Fears Security Is Failing

-Insurance Carriers Quietly Back Away from Covering AI Outputs

-Ransomware, Fraud, and Lawsuits Drive Cyber Insurance Claims to New Peaks

Black Arrow Cyber Threat Intelligence Briefing 17 April 2026:

-UK Financial Regulators Rush to Assess Risks of Anthropic Latest AI Model, FT Reports

-AI Adoption Is Outpacing the Safeguards Around It

-PwC: Cyber Security Risk Outpaces Corporate Ability to Manage

-New VENOM Phishing Attacks Steal Senior Executives’ Microsoft Logins

-Beyond Wipers: Iran-Backed Cyber Attacks and the Threat to Businesses

-Wiz: 80% of Cloud Breaches Are Caused by Basic Mistakes

-Ransomware Lives On, Blending Hacktivism and Crime, Fuelled by AI

-Security Leaders Overconfident About Ransomware Recovery

-‘It’s More Common Than You Think’: Experts Reveal How Hackers Are Trying to Hijack Your Inbox with These Clever Tactics

-From Awareness to Action: Closing the Human Risk Gap in Cyber Security

-How the Enterprise Supply Chain Has Created a Global Attack Surface

-UK Reliance on US Big Tech Companies Is ‘National Security Risk’, Claims Report

-The Most Important Cyber Security Trends in 2026 So Far

Black Arrow Cyber Threat Intelligence Briefing 10 April 2026:

-Anthropic’s New AI Model Finds and Exploits Zero-Days Across Every Major OS and Browser

-Hundreds of Orgs Compromised Daily in Microsoft Device Code Phishing Attacks

-Qilin Ransomware Uses Malicious DLL to Kill Almost Every Vendor’s EDR Solutions

-More than Half of Enterprises Are Using Devices with Out-of-Date Operating Systems – and It’s Leaving Them Wide Open to Attacks

-Russian Hackers Exploiting Home and Small-office Routers in Massive DNS hijacking Attack

-Why Britain’s Most Common Crime Has Been Poorly Investigated for Decades

-Mobile Attack Surface Expands as Enterprises Lose Control

-FBI: Cyber Fraud Surges to $17.6 Billion in Losses as Scams, Crypto Theft Soar

-Boards Are Falling Short on Cyber Security

-72% of Workers Say AI Is Giving Phishing a Dangerous New Edge, Sagiss Managed Security Survey Finds

-The Rise of Proactive Cyber: Why Defence Is No Longer Enough

-Better Prepare for a Cyber Breach

Black Arrow Cyber Advisory 10 April 2026 – Frontier AI and the Changing Cyber Threat Landscape

Black Arrow Cyber Advisory - 10 April 2026 - Microsoft device code phishing campaigns targeting Microsoft 365 users

Black Arrow Cyber Threat Intelligence Briefing 03 April 2026:

-Iran Targets M365 Accounts with Password-Spraying Attacks

-Iran Deploys 'Pseudo-Ransomware,' Revives Pay2Key Operations

-North Korea Hackers Suspected of Attack on Widely Used Software Tool

-Most Businesses Couldn’t Survive Three Days Downtime

-Cyber Security and Operational Resilience: A Board-Level Imperative

-95% of Organisations Don’t Trust Their Cyber Security Vendors

-3 Reasons Attackers Are Using Your Trusted Tools Against You (And Why You Don’t See It Coming)

-The Company’s Biggest Security Hole Lived In the Breakroom

-The Next Cyber Security Crisis Isn’t Breaches - It’s Data You Can’t Trust

-New Criminal Service Plans to Monetise Data Stolen by Ransomware Gangs

-Nearly Half a Million Mobile Customers of Lloyds Banking Group Affected by Security Incident

Black Arrow Cyber Threat Intelligence Briefing 27 March 2026:

-When Confidence Becomes a Risk: The Gap Between Cyber Resilience Readiness and Reality

-Cyber Warfare Outstripping Business Defence Capabilities

-Enterprise Cyber Security Software Fails 20% of the Time, Warns Absolute Security

-An AI-Powered Phishing Campaign Has Compromised Hundreds of Organisations

-NCSC Warns Vibe Coding Poses a Major Risk to Businesses

-32% of Top-Exploited Vulnerabilities Are Over a Decade Old

-It’s Time Cyber Security Understood Human Behaviour and Acted Accordingly

-The Phone Call Is the New Phishing Email

-Financial Brands Targeted in Global Mobile Banking Malware Surge

-UK Finance Firms Given 12 Months to Prepare for Stricter Cyber Reporting

-NCA Boss Warns That Teens Are Being “Radicalised” Into Cybercrime Online

-Most Wanted Hackers Hide in Plain Sight – And There’s Nothing Police Can Do

-US Regulator Bans Imports of New Foreign-Made Routers, Citing Security Concerns

Black Arrow Cyber Threat Intelligence Briefing 20 March 2026:

-Cyberattacks Spike 245% in the Two Weeks After the Start of War with Iran

-Attack on Stryker’s Microsoft Environment Wiped Employee Devices Without Malware

-Researchers Ask AI Agents to Create LinkedIn Posts. They Publish Passwords Instead

-AI Finally Delivers Those Elusive Productivity Gains… for Cybercriminals

-Phishers Weaponise Safe Links with Multi-Layered URL Rewriting to Evade Detection

-Ransomware Gang Exploits Cisco Flaw in Zero-Day Attacks Since January

-Your Favourite Image-Saving Chrome Extension Was Scraping Your Data for Cash

-Credential-Stealing Crew Spoofs VPN Clients From Cisco, Fortinet, and Others

-EDR Killers Are Now Standard Equipment in Ransomware Attacks

-Your Employees’ Tech Frustration is a Gift to Cybercriminals

-Third-Party Risk Management Must Now Confront AI, Cyber Security, and Technology Risk Head-On

-North Korea’s 100,000-Strong Fake IT Worker Army Rake In $500M a Year for Kim Jong Un

-Why Cyber Attacks on Critical National Infrastructure Are Such a Huge Threat

Black Arrow Cyber Threat Intelligence Briefing 13 March 2026:

-Only 30 Minutes per Quarter on Cyber Risk: Why CISO-Board Conversations Are Falling Short

-The Who, What, and Why of the Attack That Has Shut Down Stryker’s Windows Network

-Insights: Increased Risk of Wiper Attacks

-Iran Plots 'Infrastructure Warfare' Against US Tech Giants

-Middle East Conflict Tests Cyber War Exclusions, S&P Warns

-New Windows Malware Impersonates Everyday Apps to Infect Your Computer

-Cyber Attacks on UK Firms Increase at Four Times Global Rate

-Why Cyber Security Threats Are Growing

-The Human Side of Password Security That Tools Can’t Fix

-Credential Stuffing in 2025 – How Combolists, Infostealers and Account Takeover Became an Industry

-Microsoft: Hackers Abusing AI at Every Stage of Cyber Attacks

-Microsoft Warns North Korean Threat Groups Are Scaling Up Fake Worker Schemes With Generative AI

-Google Threat Intelligence Group Warns Enterprise Systems Increasingly Targeted by Zero-Day Exploits

Black Arrow Cyber Threat Intelligence Briefing 06 March 2026:

-European Police Body Warns Iran Crisis Raises Threat of Terror, Extremism and Cyber Attacks

-NCSC Warns UK Organisations to Prepare for Potential Iran-Linked Cyber Activity

-Ransomware Attacks Soar as Hackers Pivot to Small Businesses

-Ransomware Activity Peaks Outside Business Hours

-Ransomware Groups Switch to Stealthy Attacks and Long-Term Access

-Most Organisations Unprepared for External Cyber Risks and Supply Chain Disruptions

-High‑Risk Vulnerabilities Surge, Deepening Security Debt for IT Teams

-AI Went from Assistant to Autonomous Actor and Security Never Caught Up

-Why Enterprise AI Agents Could Become the Ultimate Insider Threat

-AI Raises the Cybersecurity Stakes — But People Still Open the Door

-Hackers Are Turning to Easy, Fast AI Solutions to Roll Out Attacks – So How Can Your Business Stay Safe?

-New AirSnitch Attack Bypasses Wi-Fi Encryption in Homes, Offices, and Enterprises

-Employees Install Pirate Software Despite Malware Risks

Black Arrow Cyber Threat Intelligence Briefing 27 February 2026:

-The Growing Risk of Malicious Apps in a Mobile-First Workplace

-Why 'Call This Number' TOAD Emails Beat Gateways

-New Phishing Hacks Aren’t Sloppy—They’re Personalised

-Google Disrupts Chinese-Linked Hackers That Attacked 53 Groups Globally

-Basic Security Gaps Leave Enterprises Exposed to AI-Boosted Attacks

-'God-Like' Attack Machines: AI Agents Ignore Security Policies

-13 Ways Attackers Use Generative AI To Exploit Your Systems

-AI Accelerates Attacker Breakout Time to Just Four Minutes

-Resilience: Cyber Risk Shifts from Disruption to Long-Tail Losses

-Ransomware Readiness is the Difference Between a Bad Day at Work and No More Workplace

-So You Think You Have Cyber Insurance? The Breach is Only the First Incident. The Claim is the Second.

-Russia Stepping Up Hybrid Attacks, Preparing for Long Standoff with West, Dutch Intelligence Warns

Black Arrow Cyber Threat Intelligence Briefing 20 February 2026:

-New Phishing Campaign Tricks Employees into Bypassing Microsoft 365 MFA

-Microsoft Patches Security Flaw That Exposed Confidential Emails to AI

-SMEs Wrong to Assume They Won’t Be Hit by Cyber-Attacks, NCSC Boss Warns

-One Stolen Credential Is All It Takes to Compromise Everything

-Ukrainian Sentenced to 5 Years in Prison for Facilitating North Korean Remote Worker Scheme

-1,500 Percent Increase in New, Unique Malware Highlights Growing Complexity

-A Worrying Dell Zero-Day Flaw Has Reportedly Gone Unpatched for Nearly Two Years – and Chinese Hackers Are Taking Advantage

-AI Agents Abound, Unbound by Rules or Safety Disclosures

-‘An All-Time High’: Number of Ransomware Groups Exploded in 2025 As Victim Growth Rate Doubled – With Qilin Dominating the Landscape

-Ransomware Hackers Targeting Employee Monitoring Software to Access Computers

-Low-Skilled Cybercriminals Use AI to Perform "Vibe Extortion" Attacks

-Europe Must Adapt to ‘Permanent’ Cyber and Hybrid Threats, Sweden Warns