Blackpoint

Kimsuky, the North Korean threat group, is stealing credentials via QR codes in its latest round of attacks. 🔎

"Nevan Beal, principal MDR Analyst at Blackpoint, explained that quishing works because it hides the malicious link within a QR image, which can slip past email defenses that are built to inspect normal clickable URLs."
- Steve Zurier, SC Media

https://hubs.ly/Q03__rFl0 |

FBI: Kimsuky steals credentials via QR code 'quishing' attacks North Koreans use quishing to steal identities on mobile devices.

Over 5,000 vulnerabilities were disclosed last month — with more than 2,300 rated high or critical. 🚨

https://hubs.ly/Q03-b-m-0 |

Several have been actively exploited and added to the CISA KEV Catalog, including flaws in WatchGuard, SonicWall, Fortinet, Cisco, and popular frameworks such as React Next.js.

Blackpoint's Adversary Pursuit Group (APG) breaks down December 2025 in the latest vulnerability review.

Cyber insurance carriers have raised the bar — and alerts alone won't cut it anymore. 👇

Underwriters demand active response to stop attacks in real time. Why? Because the cost of a breach continues soaring, and an unread alert at 2:00AM could mean a massive claim.

Stop paying the 'passive tax.' Learn how to meet strict cyber insurance requirements and protect your margins.

https://hubs.ly/Q03ZMs400 |