AUMINT.io Blog

 

Welcome to our blog. Subscribe and get the latest industry news, stay up to date with discovered new attack types and resources

How strong OSINT can be.

From Handle to Human: Unmasked “Rey” of Scattered LAPSUS$ Hunters Scattered LAPSUS$ Hunters (SLSH) emerged as one of the most disruptive cyber-extortion crews of recent years, blending social engineering, data theft, and public shaming campaigns against major global...

Beyond the Search Bar: Methodological OSINT in 2026

In the early days of Open-Source Intelligence (OSINT), the discipline was often defined by the "tool-first" mentality. Success was measured by the size of one’s bookmark folder or the obscurity of a specific Python script. However, as we move through 2026, the...

2026 Cyber Forecast: The Rise of “Super-Malware” and Deep Infrastructure Sieges

As we close out 2025, the threat landscape has shifted from opportunistic attacks to highly engineered, systemic campaigns. The final quarter of this year gave us two "canary in the coal mine" moments—the financial industrialization of GoldFactory and the deep...

Critical Alert: Sophisticated Impersonation Campaign Targets 150+ Organizations

As reported by the Microsoft Threat Intelligence Center (MSTIC), we are currently witnessing a new, high-volume wave of sophisticated spear-phishing attacks. This campaign marks a significant escalation in nation-state tradecraft for the 2026 threat landscape....

Prompt Engineering Your Family Christmas Dinner

A Survival GuideThe bird is roasting, the LEDs are twinkling, and you haven’t even hit the bottom of your first eggnog when the inevitable breach occurs. Uncle Bob flanks you, brandishing a fossilized iPad, and whispers the holiday curse: "Since you’re the computer...

Recent Bite-Size Posts

Are your employees your biggest security threat?

Social media is now a part of everyday life. It’s impossible to avoid it these days. However, whilst posting about work successes or life events seems innocuous enough, this information can be used by hackers. In fact, social media data breaches accounted for 56% of...

Leaking-focused RaaS: a new type of threat?

Ransomware-as-a-Service (RaaS) has been growing in popularity with hackers as it makes extortion more accessible. Criminals don’t need to develop the ransomware themselves, instead, they can purchase it from certain ransomware groups who create it to sell via a...

Cryptomalware: What is it and is it on your computer?

Cryptomalware - also known as cryptojacking - is when attackers install undetectable malware on a victim’s computer in order to use their computing resources to mine cryptocurrency. With the popularity of all kinds of cryptocurrency surging, this type of attack is...

How to combat insider threats

Insider threats - when an employee illegally discloses confidential information - are often a result of sophisticated social engineering. And, as we enter into difficult economic times, the potential for this to happen increases.  But why are some employees...

Why cybersecurity is so important during a recession

With fears of a recession looming, many companies are looking for ways to reduce spending. Cybersecurity is an area where it can be tempting to cut costs as it doesn’t directly contribute to the bottom line. However, there are several reasons why cybersecurity should...

5 ways AI can help with cybersecurity

Although artificial intelligence (AI) is not new, it’s become the focus of many mainstream conversations thanks to the launch of high-profile generative AI like ChatGPT and Dall-E. So how can cybersecurity professionals benefit from using AI in their work? Curating...

4 tips from cybersecurity experts

Cybersecurity threats are constantly evolving and trends change rapidly, so it can be hard to know how to stay on top of it all. Following leading cybersecurity experts and keeping up to date with information they share is a good way to do this, so in this blog post...

Data breach vs data leak: what’s the difference?

Although the terms data breach and data leak are sometimes used interchangeably, they are actually quite different and can therefore require slightly different approaches when it comes to cyber security. So what are the differences? What is a data breach? A data...

Should businesses be wary of TikTok?

Over the last few weeks, a number of countries have banned the use of TikTok on government devices over concerns that confidential data could be shared with the Chinese government. Are these concerns legitimate and should companies be worried about employees using the...

Pig butchering scams: what are they and how to spot them

Over the last few years a new type of financial scam (largely around cryptocurrency) has emerged that takes advantage of social engineering techniques. It’s known as “pig-butchering.”  The name comes from the fact that scammers work hard to build trust with the...

Risk assessment social engineering

#CISO, If you call your servers, laptops, stations, firewalls, routers, mobile phones and faxes - The stuff, so stop reading now. But you don’t. You do an asset list, with specific risk for each asset, mitigation plan and monitoring. Same you need to do with your...

3 coworking cybersecurity risks to be aware of

Since the pandemic, the use of coworking spaces has increased as more companies want to give their employees flexibility around how they work. In the US in 2022, more than 1m people worked in co-working spaces, compared to just 331,000 in 2015, and more than one third...

See how the Hacker sees you

Get your FREE Exposure Report NOW
Get the report