Skip to Main Content

Resources

Providing you the latest industry-specific news and insights.

Featured report

Arete’s Q3 2025 Crimeware Report

Arete's Q3 2025 Crimeware Report reveals key ransomware threats, tactics, and trends impacting insurers, brokers, law firms, and insureds, based on real-world incident data.

Read more
  • article

    New FortiCloud SSO Vulnerability Exploited

    A critical Fortinet FortiGate authentication vulnerability (CVE 2026 24858) is being actively exploited, enabling SSO bypass, unauthorized admin creation, and firewall data access. Immediate patching and monitoring are advised.

    Read more
  • podcast

    Cyber Campfire: December Threat Trends & Insights

    Cyber Campfire delivers data-driven insights from Arete’s Threat Intelligence Team. In this episode, we discuss cyber threat trends, statistics, and emerging threat actors from December 2025. Tune in for an in-depth look at the evolving threat landscape and actionable insights for global organizations and security partners.

    Read more
  • article

    Chrome Extensions Used for Credential-Stealing and ClickFix Attacks

    Malicious Chrome extensions enterprise users rely on are being abused to steal sessions, impersonate trusted tools, and provide attackers with initial access through social engineering and browser-level compromise.

    Read more
  • article

    LockBit 5.0: The RaaS That Refuses to Go Away

    LockBit 5.0 ransomware marks the group’s attempted resurgence, introducing updated Windows and Linux variants, enhanced anti-analysis features, and a newly launched data leak site with over 100 alleged victims.

    Read more
  • article

    Ransomware Trends & Data Insights: December 2025

    Get the latest ransomware trends and data insights from December 2025.

    Read more
  • article

    An Apple A (Zero) Day

    Apple released patches for two WebKit zero-day vulnerabilities exploited in sophisticated attacks. Users should update devices immediately to stay secure.

    Read more
  • article

    Max-Severity React2Shell Vulnerability

    React2Shell CVE-2025-55182 patch guidance: CVSS 10 flaw in React/Next.js enables unauthenticated RCE. Patch now and monitor suspicious Node.js activity.

    Read more
  • article

    Ransomware Trends & Data Insights: November 2025

    Get the latest Ransomware Trends Data Insights November 2025. November saw the dominance of Akira and Qilin, the rise of 18 unique groups, and AI-augmented attacks.

    Read more
  • report

    Arete’s Q3 2025 Crimeware Report

    Arete's Q3 2025 Crimeware Report reveals key ransomware threats, tactics, and trends impacting insurers, brokers, law firms, and insureds, based on real-world incident data.

    Read more
  • article

    Operation Endgame: Season 3

    Operation Endgame Season 3 takedown disrupts Rhadamanthys, VenomRAT, and Elysium, seizing servers, domains, and millions of stolen credentials.

    Read more
  • article

    Google Exposes AI-Powered Malware

    Google has reported the first observed cases of AI-augmented malware used in real-world attacks, marking a new stage in adversarial AI.

    Read more
  • article

    Ransomware Trends & Data Insights: October 2025

    Akira led ransomware activity in October, followed by Qilin. Arete analysts identified key cybercrime trends behind these threat actors.

    Read more