Dragon News Bytes Podcast 🚀 This week on Dragon News Bytes, Eli Woodward and Will Baxter break down an intensely fast-paced week in cybersecurity. From the rapid operationalization of AI in supply...
Ransomware-Linked ViperTunnel Malware Hits UK and US Businesses A new Python-based backdoor, dubbed ViperTunnel, has been found hiding in the networks of UK and US businesses, according to the lat...
Post-Sanction Persistence: Triad Nexus’ Operations Infrastructure Reborn Following U.S. Treasury sanctions in 2025, Triad Nexus has matured its operational security, employing geographic fencing t...
🚨 Personal Data Breach Alert! Basic-Fit, Europe’s largest gym chain, has disclosed a data breach affecting around 1 million members. Hackers gained unauthorized access to the company’s systems and...
ChatGPT Under Scrutiny as Florida Investigates Campus Shooting On April 9, Florida Attorney General James Uthmeier announced that his office is investigating OpenAI over the role ChatGPT might hav...
Why Your Deprecated Endpoints Are an Attacker’s Best Friend: The Rise of Ghost APIs Ghost APIs are deprecated endpoints that remain live and accessible; policy says dead, reality says otherwise. U...
Scans for EncystPHP Webshell 🚨 Today, I noticed some scans for what appears to be the “EncystPHP” web shell. Some attackers are paying attention and are deploying webshells with more difficult-to-...
🚨 OpenSSF Warns About New Malware Campaign on Slack The Open Source Security Foundation (OpenSSF) has issued a warning about a new phishing scam targeting software developers via the Slack chat ap...
Mirax Android Trojan Turns Devices Into Residential Proxy Nodes 🚨 A newly identified Android banking trojan, known as Mirax, is spreading across Europe and combines remote access features with res...
Mirax Android Trojan Turns Devices Into Residential Proxy Nodes A newly identified Android banking trojan, known as Mirax, is spreading across Europe and combines remote access features with resid...
FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts The U.S. Federal Bureau of Investigation (FBI), in partnership with the Indonesian National Police, has dismant...
Urgent Meeting on AI Security 🚨 Bloomberg reports that US Treasury Secretary Scott Bessent and Federal Reserve Chair Jerome Powell called Wall Street leaders and banking executives to an urgent me...
Slithering Through the Noise - Deep Dive into the VIPERTUNNEL Python Backdoor During a recent DragonForce ransomware engagement, we identified several artifacts indicative of anomalous behavior in...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-34621 Adobe - Acrobat Reader...
ShinyHunters Claims Rockstar Games Snowflake Breach 🚨 Rockstar Games is back in the news because the ShinyHunters hacking group claims it accessed the company’s Snowflake environment and may be ho...
Google Launches Gmail End-to-End Encryption for Android and iOS 🚀 Google has officially rolled out End-to-End Encryption (E2EE) for the Gmail application on Android and iOS devices. This major upd...
The Mythos Inflection Point Having spent years at Qualys working on vulnerability risk and remediation management, I have watched the disclosure and remediation cycles from every angle. I am obser...
The Mythos Inflection Point 🚀 Having spent years at Qualys working on vulnerability risk and remediation management, I have observed the disclosure and remediation cycles from every angle. The gap...
Overview A fleet of 21 IP addresses is now generating nearly half of all the RDP scanning traffic on the public internet. On April 7, 2026, those IPs produced 1,856,167 of the 2,753,274 RDP Crawle...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2024-1490 WAGO - CC100 (0751-9x01...