CYBERSECURITY 752
- Investigation into APT 5 and PLA Troop 61786
- Schneider Electric IGSS Vulnerability Advisory
- NASA Core Flight System Health & Safety Application Vulnerability Advisory
- CosmosEscape Taking Over Every Database in Azure Cosmos DB
- The Average Cost of a Data Breach Rises to $5 Million
- Cleaning Out Inboxes TA488 Comes for Outlook with Another Half-Click Exploit
- Turns Out the Ghost Was the PLA
- Siemens Mendix Runtime Vulnerability Advisory
- igloohome Smart Lock Mobile Application Vulnerability Alert
- AutoIT Payload Injector A New Wave of Malware
- Ernst & Young Data Breach Claimed by ShinyHunters Extortion Gang
- OpenAI Not Part of the New Open Secure AI Alliance
- Dear Diary Today I Found A Ghost In The Network
- Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable
- Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials
- New Dolphin X Malware Uses AI to Rank High-Value Targets
- Data Breach Exposes Client Information at Origin Energy
- TA458 Roundpress Exploits A New Threat in Webmail Security
- New Dolphin X Malware Uses AI to Rank High-Value Targets
- MZ Automation libIEC61850 Vulnerabilities Exposed
- Upbound Hack Results in $13 Million Fraudulent Acima Leases
- CISA, FBI, EPA and U.S. Government Partners Warn of Iranian Threats to Critical Infrastructure
- Chick-fil-A Loyalty Accounts Hijacked Using Stolen Passwords
- Opening the Black Box Agentless Threat Detection for Virtual Appliances
- INC Ransomware Affiliate Targets ESXi & NAS Devices in AD Environment
- Malicious Cloud Customers Can Bring Down the Power Grid
- Cruciferra Crypter Uses Process Ghosting to Evade Detection
- Abbott Laboratories Investigates Cybersecurity Incidents Amid Extortion Claims
- Begun, the Patch Wars Have
- UAT-11795 Deploys Novel Starland RAT and Bespoke WLDR C2 Implant in Financially Motivated Campaign
- ThreatsDay Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories
- Suspected Chinese Operators Use Claude Code and DeepSeek to Breach Government Systems Across Four Countries
- Six Minutes to Compromise How 'Patriot Bait' Actor Used AI to Build and Deploy a C&C Botnet
- Hacking the Hackers Can You Still Deceive an AI Attacker?
- DomainTools Investigations Threat Intelligence Report - The Pro-Iran Hacktivist Ecosystem 2026
- Open Directory Exposes Three Evilginx Phishing Operators
- OAuth Client ID Spoofing Why Fake Client IDs Are Gaining Traction for Stealthy Enumeration
- UK and EU Strike Russian Cyber Networks with New Sanctions
- Csa Improve Router Hygiene
- Malicious Go Module Exposes GitHub Malware Lure Network
- OpenPLC v3 Vulnerability Advisory
- One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement
- GodDamn Ransomware Latest Beast Rebrand Uses Malicious Driver to Disable Defenses
- 6.9 Million Driver's License Numbers Stolen from AssuranceAmerica
- My Threat Feed Told Me It Was 'Chalubo.' The Binary Disagreed
- A Hacker Claims 35 GB of Accenture Source Code
- Spanish Police Arrest Man Linked to CARR, Z-Pentest, and NoName057(16)
- RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service
- FBI and Spanish Police Arrest Alleged Cyber Army of Russia Reborn Member
- Experts Say There’s Now an Open Source AI Model as Scary as Mythos
- A US Cyber Agency Is Finally Using Anthropic’s Mythos
- Cavern Manticore Exposing Iran-Linked Modular C2 Framework
- U.S. Army Websites Defaced in Apparent 404 Hijacking Campaign
- PamStealer Mimics Maccy Clipboard Manager Silently Harvests Data and Clipboard Contents
- Indian Govt Bans Apps Being Misused to Stop E-Rickshaws Remotely
- Agentic Ransomware JADEPUFFER Invades Database at Machine Speed
- WinRAR Flaw Could Allow Attackers to Take Control of Your Computer
- ST Engineering iDirect iQ-Series Terminals Vulnerabilities
- RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS
- New ChocoPoC Malware Targets Researchers via Trojanized PoC Exploits
- Hackers Breached DHS Information-Sharing Network
- Brazilian Banking Trojan Ousaban Targets Spain and Portugal
- RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS
- Browser-Only Ransomware From LLM Hallucinations to a Practical Attack Technique
- Mitsubishi Electric MELSOFT Update Manager Vulnerabilities
- Delta Electronics DVP12SE PLC Vulnerabilities
- The Bear Necessities A Look at the Drivers, Dynamics, and Applications of the Pro-Russia Influence Ecosystem
- From Bing Search to Ransomware Bumblebee and AdaptixC2 Deliver Akira
- KDDI Data Breach Affects 14.2 Million Email Accounts
- Someone Hacked Johnson & Johnson's Internal Systems to Teach It a Lesson
- CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure
- AsyncRAT Family Threat Overview
- Tata Electronics Confirms Data Breach After 630GB Leak Claim Targets Apple and Tesla
- STOCKSTAY The Latest Addition to Turla's Intelligence Gathering Apparatus
- Information Sought on UNC5792 Cyber Group
- Critical Vulnerability in Delta Electronics DTM Soft
- Deepfake as a Service' Sees 39% Spike in Dark Web Conversations
- Be on the lookout for Mistic, a new backdoor used by ransomware broker
- INC Ransomware Targets Mainframes
- Amateur Hacker Used Claude And OpenAI Agents To Hack 14 Companies
- Xsolis Data Breach Affects 1.4 Million People
- Siemens WinCC Certificate Manager Vulnerability Advisory
- Cordyceps CI/CD Flaw Exposes Major Repos to Pipeline Hijacking
- Thousands of D-Link Routers Under Control of AryStinger Botnet
- Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
- New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer
- Texas Government Data Breach Exposes Over 3 Million Driver's Licenses
- FortiBleed You Can't Patch Your Way Out of This
- I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID.
- AzeoTech DAQFactory Vulnerability Advisory
- Roblox Developers Face Malware Attacks Losing Entire Games
- Junior Hacker Used Tailscale and OpenSSH to Maintain Access After C2 Went Offline
- FortiBleed Leak Exposes Fortinet VPN Credentials for 73,000 Devices
- Synthetic APTs The Collapse of TTP
- Rockwell Automation RSLinx Vulnerability Advisory
- Public and Private Medical Community Targeted by China-Nexus Threat Actor Pursuing AI and Cyber Research
- Hidden in Teams DragonForce Attackers Weaponize Microsoft Teams Relays
- FishMonger's Arsenal Upgraded SprySOCKS for Windows
- Ababil of Minab Exposed LA Metro SCADA Backups and Israeli Victim Data Left Open
- Operation Highland Uncovering Velvet Ant's Intrusion
- Feds Freaked Over Fable 5 After Simple 'Fix This Code' Prompt
- DPAPISnoop Tool Enhances Offline Windows Credential Recovery
- Evil MSI Background BASE64 Statistical Analysis
- Hackers Hide New Argamal Malware Inside Working Hentai Games
- Over 80% of Sports Organizations Targeted by Hackers in the Last Year
- Akira, LimeWire, and the Sour Taste of Data Exfiltration
- VRChat Denies Data Breach Claims
- OnyxC2 Malware-as-a-Service Offers Enterprise-Grade Data Theft
- OceanLotus From External Espionage to Domestic Targeting
- A Tale of Two Eras
- Oracle PeopleSoft Servers Hacked in ShinyHunters Data Theft Attacks
- Justice Department and FBI Disable 13 Websites Linked to Chinese Agents
- Siemens KACO Blueplanet Inverters Vulnerabilities
- Fighting Spyware An Update From WhatsApp
- BLUERABBIT A Golang-Based Backdoor with Ransomware and Destructive Capabilities
- 75% of Firms Deploy Vulnerable Code Amid Pressure on CISOs, Report Finds
- New EDRChoker Tool Uses Policy-Based Quality of Service to Block EDR Processes
- Former Cyber Executive Turns Whistleblower Against IBM for Data Breach Cover-Up
- Magecart Skimmer Turns Stripe into a Malware Command Server
- iFood Confirms Data Breach Affecting 1.2 Million Users in Brazil
- VerdantBamboo Just Another BRICKSTORM in the Firewall
- NAVTOR NavBox Vulnerability Advisory
- New Fake-Invoice Campaign Uncovered by Malwarebytes
- From Malspam to DesckVB RAT Deployment
- Espionage Campaign Targeted Stock Exchange Executive for Five Months
- HP Poly VoIP Vulnerability Sets the Stage for Executive Voice Deepfakes
- Anthropic Lets Claude Mythos Spread Its Glasswings
- Pointing a Cursor at Evading Detection
- Windows Server Vulnerability Can Grant System Privileges
- Inside Gamaredon Cyber Operations FSB's Matryoshka
- Election Interlopers Register 5K+ Domains, Hope to Catch Some Voting Phish
- CISA Adds Critical Palo Alto Networks Firewall Flaw to KEV
- Unidentified RAT Pushes NetSupport RAT
- Tracking APT28 PixyNetLoader Evolutions from 2024 to 2026
- GREYVIBE A Russia-nexus Group Leveraging AI in State-Aligned Operations
- 17 Million Strong Botnet of Compromised Devices Dismantled by Dutch Authorities
- Meet GREYVIBE, the Russia-Linked Hacking Group Using AI to Target Ukraine and Still Making Rookie Mistakes
- Hackers Disguised as IT Support Installing Malware In-Person, FBI Warns
- Silent Ransom Group Impersonating IT Personnel through Social Engineering
- The AI Era Is Creating a Bug Hunting Arms Race
- Smart Contracts for C&C How ClearFake Hid in Plain Sight on BSC Testnet
- Cloud Atlas APT Group Modifies termsrv.dll to Enable Multiple RDP Sessions
- Zero-Click WhatsApp Account Takeover Hits iPhone Users Running iOS 16
- The Alert Firehose Finally Meets Its Match
- British Drivers Exposed After Mercedes Data Surfaces on Hacker Market
- PyrsistenceSniper Advanced Tool for Detecting Malware Techniques
- Megalodon Chums the Waters in 5.5K+ GitHub Repo Poisonings
- From Edge Appliance to Enterprise Compromise Multi-Stage Linux Intrusion via F5 and Confluence
- Canadian Man Arrested for Administering KimWolf DDoS Botnet
- Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor
- One Man, One AI, One Fake Persona - Inside the 5-Year Influence and Fraud 'Patriot Bait' Campaign
- WantToCry Ransomware Evades Detection Through SMB Abuse
- Trapdoor Android Ad Fraud Scheme Hits 659 Million Daily Bid Requests
- Verizon 2026 Data Breach Investigations Report (DBIR)
- Pwn2Own Berlin 2026 Closes With $1.3 Million in Zero-Day Payouts
- ShinyHunters Hack 7-Eleven Franchisee Data and Salesforce Records Exposed
- New Reaper Malware Uses Fake Microsoft Domain to Steal macOS Passwords
- Hackers Actively Exploiting Critical NGINX RCE Vulnerability in the Wild
- Grafana Rejects Ransom Demand After Source Code Theft
- Malicious JPEG Images Could Trigger PHP Memory Safety Vulnerabilities
- Gamaredon's Infection Chain Spoofed Emails, GammaDrop and GammaLoad
- Pwn2Own Berlin 2026 - Day One Results
- Kazuar Anatomy of a Nation-State Botnet
- ClickFix Finds a Backup Plan in PySoxy Proxy Chains
- State-sponsored Actors The Friends You Don't Want
- New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots
- Critical Vulnerability in ABB AC500 V3 PLCs
- Darcula aka. Magic Cat - Blog
- Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak
- Let's Encrypt Halts Certificate Issuance After Cross-Signed Root Certificate Incident
- Fake Call History Apps Stole Payments From Users After 7.3 Million Play Store Downloads
- Unpacking Russian-Iranian Private-Sector Cyber Connections
- Trellix Discloses Data Breach After Source Code Repository Hack
- OceanLotus Distributing ZiChatBot Malware via PyPI Packages
- Critical Vulnerability in MAXHUB Pivot Client Application
- Attackers Adopt JavaScript Runtime Bun to Spread NWHStealer
- Sailor Framework - Chinese Backed Phishing Services
- Hacktivists' DDoS Onslaught Leaves Ubuntu Services Limping Days Later
- Kaspersky Suspects Chinese Hackers Planted a Backdoor into Daemon Tools in 'Widespread' Attack
- A Single 732-Byte Python Script Can Obtain Root on Linux Time to Update Your Kernel
- Wiz ZeroDay.Cloud Event Reveals 20-Year-Old PostgreSQL Vulnerabilities
- Cyber-Secure Philanthropy Tech Infrastructure for Global Donations
- Paying Ransom Won't Help as VECT 2.0 Ransomware Destroys Data Irreversibly
- Brace for the Patch Tsunami AI is Unearthing Decades of Buried Code Debt
- Watch Guard! Qilin Affiliate Exploits Network Appliances for Initial Access
- EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades
- Polymarket Rejects Data Breach Claims as Hacker Alleges 300K Records Stolen
- Italy Extradites Chinese Cyber-Espionage Suspect to US
- VECT Ransomware by Design, Wiper by Accident
- Tall Tales How Chinese Actors Use Impersonation and Stolen Narratives to Perpetuate Digital Transnational Repression
- DragonBreath A Critical 0-Day Vulnerability in the Kernel
- Microsoft Entra Agent ID Flaw Enabled Tenant Takeover via Privilege Escalation
- NASA Employees Duped in Chinese Phishing Scheme Targeting U.S. Defense Software
- Mystery ShadowBrokers Reference Reveals High-Precision Software Sabotage 5 Years Before Stuxnet
- Defending Against China-Nexus Covert Networks of Compromised Devices
- FIRESTARTER Backdoor Malware Analysis
- FIRESTARTER Backdoor Analysis
- FIRESTARTER Backdoor Analysis by CISA
- Tropic Trooper AdaptixC2 and Custom Beacon Uncovered
- The Shadowy SIM Farms Behind Those Incessant Scam Texts - And How To Stay Safe
- Surge in Silent Subject Phishing Attacks Targets VIP Users
- Harvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph API
- Unmasking DPRK Cyber Threat Actors Fake IT Worker Infrastructure & Post-Exposure Analysis
- Fake Google Antigravity Downloads Are Stealing Accounts in Minutes
- New NGate Malware Developed Using AI Hides in NFC Payment Apps
- Fake Google Antigravity Downloads Are Stealing Accounts in Minutes
- Beyond the Breach Inside a Cargo Theft Actor's Post-Compromise Playbook
- ZionSiphon Malware Threatens Water Treatment Systems
- Researchers Say Fiverr Left User Files Open to Google Search
- PowMix Botnet Targets Czech Workforce
- From APT28 to RePythonNET Automating .NET Malware Analysis
- Compromised DVRs and Finding Them in the Wild
- Securing Remote Server Access Why VPNs Matter for Administrators
- Autovista Blames Ransomware for Service Disruption
- Autovista Blames Ransomware for Service Disruption
- Post-Sanction Persistence Triad Nexus' Operations Infrastructure Reborn
- Omnistealer Uses the Blockchain to Steal Everything It Can
- AI Supply Chain Attacks and Iranian Exploits Uncovered
- AI Supply Chain Attacks and Iranian Exploits in Cybersecurity
- Ransomware-Linked ViperTunnel Malware Hits UK and US Businesses
- Mirax Android Trojan Turns Devices Into Residential Proxy Nodes
- Mirax Android Trojan Turns Devices Into Residential Proxy Nodes
- Slithering Through the Noise - Deep Dive into the VIPERTUNNEL Python Backdoor
- ShinyHunters Claims Rockstar Games Snowflake Breach via Anodot
- Just 21 IP Addresses Are Now Behind Nearly Half of All RDP Scanning on the Internet
- The Threat Hunter's Gambit
- Several Dozen' High-Value Corporations Targeted by New Extortion Crew
- From the Field to the Report How Incident Responders Can Use the Year in Review
- Contemporary Controls BASC 20T Vulnerability Advisory
- Rotten Apple An Invasive Threat Actor Targeting Civil Society in Lebanon
- npm Malware, Fake Devs, and Deepfake Videos These Are A Few of My Favorite DPRK Things
- npm Malware, Fake Devs, and Deepfake Videos - A Few of My Favorite DPRK Things
- New Lua-based Malware 'LucidRook' Targeting Taiwanese Organizations
- China Supercomputer Hackers Hnk Intl
- Frostarmada Forest Blizzard DNS Hijacking
- How Often Are Redirects Used in Phishing in 2026?
- Qilin EDR Killer Infection Chain
- New Akira Lookalike Ransomware Campaign Targeting Windows Users in South America
- Researchers Observe Sub-One-Hour Ransomware Attacks
- UK Manufacturers Under Cyber Fire with 80% Reporting Attacks
- Casbaneiro Phishing Targets Latin America and Europe Using Dynamic PDF Lures
- PX4 Autopilot Vulnerability Exposed
- Application Control Bypass for Data Exfiltration
- Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs
- Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs
- Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities
- Masters of Imitation How Hackers and Art Forgers Perfect the Art of Deception
- TP-Link, Canva, HikVision Vulnerabilities Disclosed
- BPFdoor in Telecom Networks Sleeper Cells in the Backbone
- Active Magecart Campaign Targets Spain, Steals Card Data via Hijacked eStores for Bank Fraud
- Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities
- Masters of Imitation How Hackers and Art Forgers Perfect the Art of Deception
- TP-Link, Canva, HikVision Vulnerabilities Disclosed
- BPFdoor in Telecom Networks Sleeper Cells in the Backbone
- Active Magecart Campaign Targets Spain, Steals Card Data via Hijacked eStores for Bank Fraud
- Kamasers Analysis A Multi-Vector DDoS Botnet Targeting Organizations Worldwide
- The Kill Chain Is Obsolete When Your AI Agent Is the Threat
- Inside Cyber Council The Toughest RSAC Ticket to Get
- Kamasers Analysis A Multi-Vector DDoS Botnet Targeting Organizations Worldwide
- The Kill Chain Is Obsolete When Your AI Agent Is the Threat
- Inside Cyber Council The Toughest RSAC Ticket to Get
- Critical Vulnerability in Grassroots DICOM (GDCM) Detected
- Critical Vulnerability in Pharos Controls Mosaic Show Controller
- Critical Vulnerability in Grassroots DICOM (GDCM) Detected
- Critical Vulnerability in Pharos Controls Mosaic Show Controller
- Case Study How Predictive Shielding in Defender Stopped GPO-Based Ransomware Before It Started
- Exposing a Fraudulent DPRK Candidate
- Case Study How Predictive Shielding in Defender Stopped GPO-Based Ransomware Before It Started
- Exposing a Fraudulent DPRK Candidate
- CTI-REALM A New Benchmark for AI Detection Rule Generation
- CTI-REALM A New Benchmark for AI Detection Rule Generation
- Vibe Hacking Has Arrived - And We Have to Figure Out How to Stop It
- Speagle Malware Hijacks Cobra DocGuard to Steal Data via Compromised Servers
- Vibe Hacking Has Arrived - And We Have to Figure Out How to Stop It
- Speagle Malware Hijacks Cobra DocGuard to Steal Data via Compromised Servers
- The Beast Returns Analysis of a Beast Ransomware Server
- Warlock Ransomware Group Enhances Post-Exploitation Techniques
- Katana A Mirai Variant Targeting Android TV Set-Top Boxes
- CODESYS Vulnerabilities in Festo Automation Suite
- Qihoo 360 Leaked Its Own Wildcard SSL Private Key Inside Public AI Installer
- Researchers Find Data Leak Risk in AWS Bedrock AI Code Interpreter
- Researchers Warn of Global Surge in Fake Shipment Tracking Scams
- China-Linked Hackers Target Asian Militaries in Espionage Operation
- AI-Generated Slopoly Malware Used in Interlock Ransomware Attack
- Escorted Out! Major Cybersecurity Takedown
- Announcing Pwn2Own Berlin for 2026
- AI-Generated Slopoly Malware Used in Interlock Ransomware Attack
- INC Ransomware Group Holds Healthcare Hostage in Oceania
- A Foreign Hacker Accessed FBI Files on Epstein Back in 2023 - Report
- INC Ransomware Group Holds Healthcare Hostage in Oceania
- A Foreign Hacker Accessed FBI Files on Epstein Back in 2023 - Report
- Sednit Reloaded - Back in the Trenches
- DNB Podcast JWT Cracks, South American Telecom Breaches, and the Kinetic-Cyber Nexus in Iran
- EV Charger Company ELECQ Hit by Ransomware Attack, Customer Data Compromised
- Ericsson US Discloses Data Breach After Service Provider Hack
- Critical Zero-Click Command Injection in AVideo Platform Allows Stream Hijacking
- New Social Security Scam Emails Use Fake Tax Documents to Hijack PCs
- Russian APT Targets Ukraine with BadPaw and MeowMeow Malware
- Russian APT Targets Ukraine with BadPaw and MeowMeow Malware
- Manufacturing Supply Chains Face Cascading Cyber Risk as Third-Party Breaches Hit Record Levels
- LexisNexis Confirms Data Breach Affecting Customer Records
- Europol, Microsoft, TrendAI™ and Collaborators Halt Tycoon 2FA Operations
- Ransomware Attack Exposes 1.2 Million University of Hawaii Cancer Center Records
- Malvertising Threat Actor D-Shortiez Abuses WebKit Back-Button Hijack
- Coruna - Inside the Nation-State
- Dust Specter APT Targets Government Officials in Iraq
- Dust Specter APT Targets Government Officials in Iraq
- Exorcising Demons - Fake Tech Support Delivers Havoc Command & Control
- Apt37 Adds New Capabilities for Air Gapped Networks
- UFP Technologies Discloses Data Breach After Cybersecurity Incident
- Five Eyes Urgent Warning Patch Your Cisco SD-WAN to Prevent Root Takeover!
- Vshell - A Chinese-Language Alternative to Cobalt Strike
- Post-Exploitation at Scale - The Rise of AILM
- Treasury Sanctions Exploit Broker Network for Cyber Tools Theft
- DNB Podcast The Long Game and the Laptop Farm
- Wormable XMRig Campaign Uses BYOVD Exploit and Time-Based Logic Bomb
- New Phishing Framework Starkiller Proxies Real Login Pages to Bypass MFA
- Data Breaches in 2026 - What’s Old, What’s New?
- Another Day, Another Malicious JPEG
- Another Day, Another Malicious JPEG
- LLMs in the Kill Chain - Inside a Custom MCP Targeting FortiGate Devices Across Continents
- Digital Skimmer Hits Global Supermarket Chain
- Trump Administration's AI Cybersecurity Strategy Unveiled
- India’s AI Revolution - Why This Is India’s Most Significant Moment
- Texas Sues TP-Link Over Alleged Chinese Government Access
- Hackers Made Death Threats Against Security Researcher A Big Mistake
- Telegram Channels Expose Rapid Weaponization of SmarterMail Flaws
- Job Scam Alert Fake Google Forms Site Harvesting Logins
- Aussie Fintech Platform Youx Confirms Data Breach As Hacker Shares Massive Dataset Online
- SmartLoader Hackers Clone Oura MCP Project to Spread StealC Malware
- Delta Electronics ASDA-Soft Vulnerability Advisory
- Washington Hotel in Japan Discloses Ransomware Infection Incident
- Threat Actor Selling OpenSea 0-Day Exploit for $100,000
- Suspected Russian Hackers Deploy CANFAIL Malware Against Ukraine
- Operation Macromaze APT28's New Campaign Unveiled
- Fintech Firm Figure Discloses Data Breach Following Phishing Attack
- Hand Over the Keys for Shannon’s Shenanigans
- Siemens Siveillance Video Management Servers Vulnerability Advisory
- Odido Confirms Massive Data Breach Affecting 6.2 Million Customers
- LummaStealer Activity Surges After Law Enforcement Disruption
- Critical Vulnerability in Airleader Master Exposed
- Kimwolf Botnet Disrupts I2P Network
- Were Telcos Warned About the Ancient Telnet Bug?
- Pulling Back the Curtain on Warlock's Next Act
- Fake Recruiter Campaign Targets Crypto Developers
- Crazy Ransomware Gang Abuses Employee Monitoring Tool in Attacks
- Largest Multi Agency Cyber Operation Launched Against APT Threats
- Password Guessing Without AI How Attackers Build Targeted Wordlists
- Beware of Fake 7-Zip Downloads Turning PCs into Proxy Nodes!
- LocalGPT – A Secure Local Device Focused AI Assistant Built in Rust
- UK Construction Firm Targeted by Prometei Botnet in Windows Server
- DOGE May Have Misused Social Security Data, DOJ Admits
- Spain's Ministry of Science Shuts Down Systems After Breach Claims
- Knife Cutting The Edge Unveiling the DKnife Framework
- Deadvax Threat Research Security Advisory
- APT28 - Geofencing as a Targeting Signal (CVE-2026-21509 Campaign)
- When Hacktivists Target Water Utilities - Inside a Russian-Aligned OT Attack
- Critical Vulnerability in Synectix LAN 232 TRIO Exposed
- AT&T Breach Data Resurfaces with New Risks for Customers
- Notepad++ Hijacked by State-Sponsored Hackers
- ShadowHS - A Fileless Linux Post‑Exploitation Framework Built on a Weaponized hackshell
- Phishing kits adapt to the script of callers
- I'm locked in!
- Cant Stop Wont Stop Ta584 Innovates Initial Access
- WhatsApp Rolls Out Lockdown-Style Security Mode to Protect Targeted Users From Spyware
- 14M Panera Bread customer records leaked - What do we know so far?
- PeckBirdy - A Versatile Script Framework for LOLBins Exploitation Used by China-aligned Threat Groups
- GOGITTER, GITSHELLPAD, and GOSHELL Analysis
- 1Password Adds Pop-Up Warnings for Suspected Phishing Sites
- Investigation underway after 72M Under Armour records surface online
- Fortinet warns of active FortiCloud SSO bypass affecting updated devices
- Vulnerabilities in EVMAPA
- Osiris - New Ransomware, Experienced Attackers?
- Phishing and Spoofed Sites Remain Primary Entry Points For Olympics
- Peruvian Loan Scam Harvests Cards and PINs via Fake Applications
- Damn Vulnerable' Training Apps Leave Vendors' Clouds Exposed
- Kimwolf Botnet Lurking in Corporate, Govt. Networks
- Ingram Micro admits summer ransomware raid exposed thousands of staff records
- From Extension to Infection - An In-Depth Analysis of the Evelyn Stealer Campaign Targeting Software Developers
- Mandiant releases quick credential cracker, to hasten the death of a bad protocol
- Tennessee Man Pleads Guilty to Repeatedly Hacking Supreme Court’s Filing System
- Gootloader now uses 1,000-part ZIP archives for stealthy delivery
- CodeBuild Flaw Put AWS Console Supply Chain At Risk
- Inside RedVDS - How a single virtual desktop provider fueled worldwide cybercriminal operations
- CERT-UA reports PLUGGYAPE cyberattacks on defense forces
- Unveiling VoidLink – A Stealthy, Cloud-Native Linux Malware Framework
- Hunting Lazarus - Inside the Contagious Interview C2 Infrastructure
- CastleLoader Analysis - A Deep Dive into Stealthy Loader Targeting Government Sector
- CrazyHunter ransomware escalates with advanced intrusion tactics, six Taiwan healthcare victims confirmed
- Instagram’s 17 Million User Data Leak Was Just Scraped Records from 2022
- Instagram denies breach amid claims of 17 million account data leak
- Phishing Campaign Uses Maduro Arrest Story to Deliver Backdoor Malware
- Inside GoBruteforcer - AI-Generated Server Defaults, Weak Passwords, and Crypto-Focused Campaigns
- Black Cat Behind SEO Poisoning Malware Campaign Targeting Popular Software Searches
- Hospitality Sector Hit By PHALT#BLYX ClickFix Malware Campaign
- Coinbase insider who sold customer data to criminals arrested in India
- New Zealand orders review into ManageMyHealth cyberattack
- Hackers claim to hack Resecurity, firm says it was a honeypot
- Prince of Persia ran a covert Iranian spy campaign for over a decade
- Hackers attack WatchGuard Firebox firewalls 120K IPs exposed and vulnerable
- Hackers Abuse Popular Monitoring Tool Nezha as a Stealth Trojan
- RansomHouse upgrades encryption with multi-layered data processing
- Cybersecurity Professionals Plead Guilty to Launching Ransomware Attacks
- Rudepanda Owns Iis Servers Like 2003
- OAuth Device Code Phishing Campaigns Surge Targets Microsoft 365
- New BeaverTail Malware Variant Linked to Lazarus Group
- Zeroday Cloud hacking event awards $320,0000 for 11 zero days
- WhatsApp device linking abused in account hijacking attacks
- UAT-9686 actively targets Cisco Secure Email Gateway and Secure Email and Web Manager
- BlueDelta’s Persistent Campaign Against UKR.NET
- Russian APT actor phishes the Baltics and the Balkans
- Russia Hits Critical Orgs Via Misconfigured Edge Devices
- Google is discontinuing its dark web report - why it matters
- China's Ink Dragon Hides Out in European Government Networks
- Think Like an Attacker - Cybersecurity Tips From Cato Networks' CISO
- New SantaStealer malware steals data from browsers, crypto wallets
- Your questions, answered by Cybernews - Can your vape be hacked?
- CISA Warns of Windows Cloud Files Mini Filter 0-Day Vulnerability Exploited in Attacks
- 7 Best Security Awareness Training Platforms For MSPs in 2026
- Stanford University pits cybersecurity researchers versus AI - should humans worry?
- Cracking ValleyRAT From Builder Secrets to Kernel Rootkits
- Scammers harvesting Facebook photos to stage fake kidnappings, warns FBI
- New JS#SMUGGLER Campaign Drops NetSupport RAT Through Infected Sites
- Android Malware FvncBot, SeedSnatcher, and ClayRat Gain Stronger Data Theft Features
- US military contractor breach expose employee data
- Attackers launch dual campaign on GlobalProtect portals and SonicWall APIs
- Unveiling WARP PANDA A New Sophisticated China-Nexus Adversary
- Penn and Phoenix Universities Disclose Data Breach After Oracle Hack
- 29.7 Tbps DDoS Attack Via Aisuru Botnet Breaks Internet With New World Record
- Researchers Capture Lazarus APT's Remote-Worker Scheme Live on Camera
- Everest Ransomware Claims ASUS Breach and 1TB Data Theft
- How a Russian Threat Actor Uses a Recent WinRAR Vulnerability in Their Ukraine Operations
- North Korea-linked actors behind Contagious Interview uploaded 197 new malicious npm packages to distribute a new OtterCookie malware version.
- House panels seek testimony from Anthropic, Google, Quantum Xchange after report on PRC-linked AI attack
- Years of JSONFormatter and CodeBeautify Leaks Expose Thousands of Passwords and API Keys
- KawaiiGPT – New Black-Hat AI Tool Used by Hackers to Launch Cyberattacks
- Department 40 Exposed Inside the IRGC Unit Connecting Cyber Ops to Assassinations
- CrowdStrike Fires Worker Over Insider Leak to Scattered Lapsus Hunters
- ShinyHunters 'does not like Salesforce at all,' claims the crew accessed Gainsight 3 months ago
- Google exposes BadAudio malware used in APT24 espionage campaigns
- WrtHug Exploits Six ASUS WRT Flaws to Hijack Tens of Thousands of EoL Routers Worldwide
- Attackers are using “Sneaky 2FA” to create fake sign-in windows that look real
- Researchers Detail Tuoni C2's Role in an Attempted 2025 Real-Estate Cyber Intrusion
- What Should A Modern Cybersecurity Stack Look Like?
- Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT
- AI's scary new trick - Conducting cyberattacks instead of just helping out
- Five Plead Guilty in U.S. for Helping North Korean IT Workers Infiltrate 136 Companies
- Decades-old ‘Finger’ protocol abused in ClickFix malware attacks
- The State of Ransomware – Q3 2025
- Russian Hackers Create 4,300 Fake Travel Sites to Steal Hotel Guests' Payment Data
- SIEM Modernization and Optimization - Step 2 - Define Your Goals
- Zscaler warns industrial operations face mounting risk as IoT, OT attacks surge across energy, manufacturing sectors
- Patch now Samsung zero-day lets attackers take over your phone
- North Korean hackers exploit Google’s safety tools for remote wipe
- Nine NuGet packages disrupt DBs and industrial systems with time-delayed payloads
- Dangerous runC flaws could allow hackers to escape Docker containers
- Microsoft Uncovers 'Whisper Leak' Attack That Identifies AI Chat Topics in Encrypted Traffic
- LANDFALL New Commercial-Grade Android Spyware in Exploit Chain Targeting Samsung Devices
- Gootloader malware back for the attack, serves up ransomware
- GlassWorm Returns New Wave Strikes as We Expose Attacker Infrastructure
- Russian hackers sneak a full Linux virtual machine inside Windows to run undetected
- Russian spies pack custom malware into hidden VMs on Windows machines
- Ransomware negotiator, pay thyself!
- Operation Peek-a-Baku Silent Lynx APT makes sluggish shift to Dushanbe
- New Dante Spyware Linked to Rebranded Hacking Team, Now Memento Labs
- Hackers Deliver SSH-Tor Backdoor Via Weaponized Military Documents in ZIP Files
- Penn hacker claims to have stolen 1.2 million donor records in data breach
- Threat Actors Utilize AdaptixC2 for Malicious Payload Delivery
- Russian hackers, likely linked to Sandworm, exploit legitimate tools against Ukrainian targets
- New AI-Targeted Cloaking Attack Tricks AI Crawlers Into Citing Fake Info as Verified Facts
- Massive risk 92% of Exchange servers in Germany unprotected after Microsoft support ends
- BiDi Swap The bidirectional text trick that makes fake URLs look real
- Qilin ransomware escalates rapidly in 2025, targeting critical sectors with 700 attacks amid RansomHub shutdown
- OpenAI Atlas Browser Vulnerability Allows Malicious Code Injection into ChatGPT
- Iran's school for cyberspies could've used a few more lessons in preventing breaches
- Hackers exploiting Windows updates Microsoft urges users to patch
- Europol Warns of Rising Threat From Caller ID Spoofing Attacks
- Chrome Zero-Day Exploitation Linked to Hacking Team Spyware
- LockBit 5.0 Actively Attacking Windows, Linux, and ESXi Environments
- Hackers exploiting critical vulnerability in Windows Server Update Service
- Buying Spying - How the commercial surveillance industry works and what can be done about it
- Agenda Ransomware Deploys Linux Variant on Windows Systems Through Remote Management Tools and BYOVD Techniques
- SocGholish Malware Using Compromised Sites to Deliver Ransomware
- Jaguar Land Rover hack cost UK economy an estimated $2.5 billion, report says
- Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July Patch
- Russian Coldriver Hackers Deploy New 'NoRobot' Malware
- Ransomware Payouts Surge to $3.6m Amid Evolving Tactics
- CISA’s International, Industry and Academic Partnerships Slashed
- CISA confirms hackers exploited Oracle E-Business Suite SSRF flaw
- Self-spreading GlassWorm malware hits OpenVSX, VS Code registries
- Cyber defenders sound the alarm as F5 hack exposes broad risks
- AI-Driven Social Engineering Top Cyber Threat for 2026, ISACA Survey Reveals
- New .NET CAPI Backdoor Targets Russian Auto and E-Commerce Firms via Phishing ZIPs
- Collins Aerospace attack claimed by Everest, linking ransomware group to last month's European airport chaos
- Senate Investigates Cisco Over Zero-Day Firewall Vulnerabilities
- North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart Contracts
- Misconfigured NetcoreCloud Server Exposed 40B Records in 13.4TB of Data
- Chinese Threat Group 'Jewelbug' Quietly Infiltrated Russian IT Network for Months
- UK NCSC Reports 130% Spike in "Nationally Significant" Cyber Incidents
- Hacker Group TA585 Emerges With Advanced Attack Infrastructure
- Dragos sounds alarm over cyberattacks targeting distributed energy and industrial microgrids
- Researchers Warn RondoDox Botnet is Weaponizing Over 50 Flaws Across 30+ Vendors
- How to tell if your mobile number has been hacked and what to do next
- Attackers exploit valid logins in SonicWall SSL VPN compromise
- North Korean Hackers Have Stolen $2 Billion in Cryptocurrency in 2025
- Hackers leveraging Teams to drop malware, steal data, Microsoft warns
- Foreign threat actors adopting ChatGPT, AI to bolster "old playbook" of attacks, OpenAI finds
- The Y2K38 Bug Is a Vulnerability, Not Just a Date Problem, Researchers Warn
- Reading the ENISA Threat Landscape 2025 report
- Ransomware Group “Trinity of Chaos” Launches Data Leak Site
- Patch Now Dell UnityVSA Flaw Allows Command Execution Without Login
- Hackers exploited Zimbra flaw as zero-day using iCalendar files
- Ghost in the Cloud Weaponizing AWS X-Ray for Command & Control
- Discord Data Breach Hackers Access IDs, Billing Details and Support Chats
- CometJacking One Click Can Turn Perplexity's Comet AI Browser Into a Data Thief
- Oracle says hackers are trying to extort its customers
- Phishing Dominates EU-Wide Intrusions, says ENISA
- Exposing CharmingKitten's malicious activity for IRGC-IO division Counterintelligence division
- Massive network of 30,000 websites filters victims before delivering scams or malware
- VMware virtual machines under attack hackers may have exploited zero-day for months
- Phantom Taurus A New Chinese Nexus APT and the Discovery of the NET-STAR Malware Suite
- Medusa Ransomware Claims Comcast Data Breach, Demands .2M
- EvilAI Malware Masquerades as AI Tools to Infiltrate Global Organizations
- Cisco Talos attributes Asian telecom and manufacturing attacks to Naikon PlugX campaign
- Ransomware's favorite target in 2025 and what you can do about it
- Hackers Leverage AI-Generated Code to Obfuscate Its Payload and Evade Traditional Defenses
- Chinese Cyberspies Hacked US Defense Contractors
- Who is Salt Typhoon Really? Unraveling the Attribution Challenge
- UK agency makes arrest in airport cyberattack investigation
- Threat Actors Breaking to Enterprise Infrastructure Within 18 Minutes From Initial Access
- COLDRIVER Updates Arsenal with BAITSWITCH and SIMPLEFIX
- SolarWinds Releases Hotfix for Critical CVE-2025-26399 Remote Code Execution Flaw
- Researchers expose MalTerminal, an LLM-enabled malware pioneer
- Nimbus Manticore Deploys New Malware Targeting Europe
- ShadowLeak Radware Uncovers Zero-Click Attack on ChatGPT
- RaccoonO365 Phishing Network Dismantled as Microsoft, Cloudflare Take Down 338 Domains
- How a Plaintext File On Users’ Desktops Exposed Secrets Leads to Akira Ransomware Attacks
- China-linked APT41 targets government, think tanks, and academics tied to US-China trade and policy
- BreachForums Owner Sent to Prison in Resentencing
- Going Underground China-aligned TA415 Conducts U.S.-China Economic Relations Targeting Using VS Code Remote Tunnels
- EvilAI malware campaign exploits AI-generated code to breach global critical sectors
- DNV details ‘SteganoAmor’ malware campaign used against Iranian oil and gas traders, extends to maritime operators
- FBI warns of UNC6040, UNC6395 hackers stealing Salesforce data
- Huntress's 'hilarious' attacker surveillance splits infosec community
- France Warns Apple Users of New Spyware Campaign
- DELMIA Factory Software Vulnerability Exploited in Attacks
- Popular AI chatbots leaking data millions of users could be affected
- New Buterat Backdoor Malware Found in Enterprise and Government Networks
- KillSec Ransomware is Attacking Healthcare Institutions in Brazil
- Unmasking The Gentlemen Ransomware Tactics, Techniques, and Procedures Revealed
- Axios Abuse and Salty 2FA Kits Fuel Advanced Microsoft 365 Phishing Attacks
- 45 Previously Unreported Domains Expose Longstanding Salt Typhoon Cyber Espionage
- Windows Defender Vulnerability Allows Service Hijacking and Disablement via Symbolic Link Attack
- GhostAction Supply Chain Attack Compromises 3000+ Secrets
- Czech cyber agency NUKIB flags Chinese espionage risks to critical infrastructure
- 18 Popular Code Packages Hacked, Rigged to Steal Crypto
- Salesloft Drift Breach Traced to GitHub Compromise and Stolen OAuth Tokens
- Scattered Lapsus$ Hunters Demand Google Fire Security Experts or Face Data Leak
- NoisyBear Weaponizing ZIP Files to PowerShell Loaders and Exfiltrate Sensitive Data
- GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module
- RapperBot Hijacking Devices to Launch DDoS Attack In a Split Second
- Ukrainian Network FDN3 Launches Massive Brute-Force Attacks on SSL VPN and RDP Devices
- New Report on Commercial Spyware Vendors Detailing Their Targets and Infection Chains
- New Phishing Attack Via OneDrive Attacking C-level Employees for Corporate Credentials
- Iran-Nexus Hackers Abuses Omani Mailbox to Target Global Governments
- Hidden Commands in Images Exploit AI Chatbots and Steal Data
- Android Droppers Now Deliver SMS Stealers and Spyware, Not Just Banking Trojans
- Microsoft Unveils Storm-0501’s Advanced Cloud Ransomware Attack Tactics
- Kea DHCP Server Vulnerability Let Remote Attacker Crash With a Single Crafted Packet
- International coalition calls out three Chinese companies over hacking campaign
- CISA Publish Hunting and Mitigation Guide to Defend Networks from Chinese State-Sponsored Actors
- New Phishing Campaign Abuses ConnectWise ScreenConnect to Take Over Devices
- AI-Powered Ransomware Has Arrived With 'PromptLock'
- MixShell Malware Delivered via Contact Forms Targets U.S. Supply Chain Manufacturers
- Hackers steal data from Salesforce instances in widespread campaign
- Transparent Tribe Targets Indian Govt With Weaponized Desktop Shortcuts via Phishing
- Fake macOS Help Sites Seek to Spread Infostealer in Targeted Campaign
- Credential harvesting campaign targets ScreenConnect cloud administrators
- ClickFix Attack Tricks AI Summaries Into Pushing Malware
- Malicious Go Module Poses as SSH Brute-Force Tool, Steals Credentials via Telegram Bot
- Attackers Abuse Virtual Private Servers to Compromise SaaS Accounts
- APT36 hackers abuse Linux .desktop files to install malware in new attacks
- Hackers Using New QuirkyLoader Malware to Spread Agent Tesla, AsyncRAT and Snake Keylogger
- Oregon man charged with administering “Rapper Bot” DDoS-for-hire Botnet
- Like burglars closing a door, Apache ActiveMQ attackers patch critical vuln after breaking in
- From Campus to C2 Tracking a Persistent Chinese Operation Against Vietnamese Universities
- Web Hosting Firms in Taiwan Attacked by Chinese APT for Access to High-Value Targets
- Microsoft Windows Vulnerability Exploited to Deploy PipeMagic RansomExx Malware
- Man Jailed for 20 Months After Compromising Millions of Accounts
- Cybersecurity in Focus Recent Threats Targeting India Amid Independence Day Celebrations
- Blue Locker' Analysis Ransomware Targeting Oil & Gas Sector In Pakistan
- Charon Ransomware Hits Middle East Sectors Using APT-Level Evasion Tactics
- New Ransomware Charon Uses Earth Baxia APT Techniques to Target Enterprises
- Update WinRAR tools now RomCom and others exploiting zero-day vulnerability
- Cybersecurity Firm Profero Cracks DarkBit Ransomware Encryption
- Unmasking SocGholish Silent Push Untangles the Malware Web Behind the “Pioneer of Fake Updates” and Its Operator, TA569
- Ukraine claims to have hacked secrets from Russia's newest nuclear submarine
- The Growing Threat of Mobile Infostealers
- Google suffers data breach in ongoing Salesforce data theft attacks
- SonicWall investigates possible zero-day amid Akira ransomware surge
- GenAI Used For Phishing Websites Impersonating Brazil’s Government
- From Bing Search to Ransomware Bumblebee and AdaptixC2 Deliver Akira
- ShadowSyndicate Infrastructure Used by Multiple Ransomware Groups Including Cl0p, LockBit and RansomHub
- LegalPwn Attack Tricks GenAI Tools Into Misclassifying Malware as Safe Code
- Fake Telegram Premium Site Distributes New Lumma Stealer Variant
- Hackers Regularly Exploit Vulnerabilities Before Public Disclosure, Study Finds
- Arctic Wolf Observes July 2025 Uptick in Akira Ransomware Activity Targeting SonicWall SSL VPN
- AI-Generated Malicious npm Package Drains Solana Funds from 1,500+ Before Takedown
- Unmasking Interlock Group's Evolving Malware Arsenal
- The Commented Kill Chain Why Old Ransomware Playbooks Never Die
- Ransomware in Q2 2025 AI Joins the Crew, Cartels Rise, and Payment Rates Collapse
- From Laptops to Laundromats How DPRK IT Workers Infiltrated the Global Remote Economy
- APT36 Expands Beyond Military New Attacks Hit Indian Railways, Oil & Government Systems
- ShinyHunters behind Salesforce data theft attacks at Qantas, Allianz Life, and LVMH
- Cobalt Strike Beacon delivered via GitHub and social media
- China’s Covert Capabilities | Silk Spun From Hafnium
- Behind Random Words DoubleTrouble Mobile Banking Trojan Revealed
- Anubis and the Death of Data A New Era of Ransomware Operations
- GOLD BLADE remote DLL sideloading attack deploys RedLoader
- Revisiting UNC3886 Tactics to Defend Against Present Risk
- Cybersecurity Scams Targeting Fans and Teams at the 2025 Belgian Grand Prix
- Researchers Expose Massive Online Fake Currency Operation in India
- Florida Student Research Deploys AI to Spot Stealthy Android Malware
- ToolShell, SharePoint, and the Death of the Patch Window
- Methods to Bypass OTP in Mobile Apps Successful VAPT Scenarios
- Hunting Laundry Bear Infrastructure Analysis Guide and Findings
- Unmasking the new Chaos RaaS group attacks
- ToolShell An all-you-can-eat buffet for threat actors
- A Spike in the Desert How GreyNoise Uncovered a Global Pattern of VOIP-Based Telnet Attacks
- US nuclear weapons agency hacked in Microsoft SharePoint attacks
- Signed, Sealed, Altered? Deepdive into PDF Tempering
- Ports are getting smarter and more hackable
- Operation CargoTalon UNG0901 Targets Russian Aerospace & Defense Sector using EAGLET implant.
- HAFNIUM-Linked Hacker Xu Zewei Riding the Tides of China’s Cyber Ecosystem
- Ransomware Group Uses AI Chatbot to Intensify Pressure on Victims
- How DEF CON hacking villages help to save the planet
- Clickfix on macOS AppleScript Malware Campaign Uses Terminal Prompts to Steal Data
- Back to Business Lumma Stealer Returns with Stealthier Methods
- The SOC files Rumble in the jungle or APT41’s new target in Africa
- Microsoft Fix Targets Attacks on SharePoint Zero-Day
- Malware Identified in Attacks Exploiting Ivanti Connect Secure Vulnerabilities
- How China’s Patriotic ‘Honkers’ Became the Nation’s Elite Cyberspies
- Greedy Sponge Targets Mexico with AllaKore RAT and SystemBC
- Getting to the Crux (Ransomware) of the Matter
- The Linuxsys Cryptominer
- Mobile Forensics Tool Used by Chinese Law Enforcement Dissected
- CryptoJacking is dead, long live CryptoJacking
- UNG0002, Regional Threat Operations Tracked Across Multiple Asian Jurisdictions
- Salt Typhoon breach Chinese APT compromises U.S. Army National Guard network
- Ongoing SonicWall Secure Mobile Access (SMA) Exploitation Campaign using the OVERSTEP Backdoor
- Old Miner, New Tricks H2miner Resurfaces with Lcrypt0rx Ransomware
- Threat Actors Exploit SVG Files in Stealthy JavaScript Redirects
- On the Move Fast Flux in the Modern Threat Landscape
- Hyper-volumetric DDoS attacks skyrocket Cloudflare’s 2025 Q2 DDoS threat report
- eSIM Vulnerability in Kigen's eUICC Cards Exposes Billions of IoT Devices to Malicious Attacks
- The Good, the Bad, and the Encoding An SS7 Bypass Attack
- KongTuke FileFix Leads to New Interlock RAT Variant
- GLOBAL GROUP Emerging Ransomware-as-a-Service, Supporting AI Driven Negotiation and Mobile Control Panel for Their Affiliates
- Behind the Clouds Attackers Targeting Governments in Southeast Asia Implement Novel Covert C2 Communication
- Chasing Ghosts Over RDP Lateral Movement in Tiny Bitmaps
- GAO finds progress in cyber information sharing, warns of rising attacks on critical infrastructure
- Where Everybody Knows Your Name Observing Malice-Complicit Nameservers
- Rendershock Weaponizing Trust in File Rendering Pipelines
- Malware of the Day – Multi-Modal C2 Communication – Numinon C2
- Fix the Click Preventing the ClickFix Attack Vector
- Code highlighting with Cursor AI for $500,000
- AMD Warns of New Transient Scheduler Attacks Impacting a Wide Range of CPUs
- GitHub Abused to Spread Malware Disguised as Free VPN
- From Click to Compromise Unveiling the Sophisticated Attack of DoNot APT Group on Southern European Government Entities
- Combolists and ULP Files on the Dark Web A Secondary and Unreliable Source of Information about Compromises
- NordDragonScan Quiet Data-Harvester on Windows
- Hackers abuse leaked Shellter red team tool to deploy infostealers
- Deploying NetSupport RAT via WordPress & ClickFix
- BERT Ransomware Group Targets Asia and Europe on Multiple Platforms
- NightEagle APT Exploits Microsoft Exchange Flaw to Target China's Military and Tech Sectors
- When Installers Turn Evil The Pascal Script Behind Inno Setup Malware Campaign
- Silent Push Uncovers Chinese Fake Marketplace e-Commerce Phishing Campaign
- Exposed JDWP Exploited in the Wild What Happens When Debug Ports Are Left Open
- Okta observes v0 AI tool used to build phishing sites
- Houken seeking a path by living on the edge with zero-days
- Critical Vulnerability in Microsens Devices Exposes Systems to Hackers
- Jasper Sleet North Korean remote IT workers’ evolving tactics to infiltrate organizations
- Hawaiian Airlines Hit by Cybersecurity Incident
- Odyssey Stealer The Rebrand of Poseidon Stealer
- DeepSeek Deception Sainbox RAT & Hidden Rootkit Delivery
- Patch and Persist Darktrace’s Detection of Blind Eagle (APT-C-36)
- Cybercrime is surging across Africa
- Crash (exploit) and burn Securing the offensive cyber supply chain to counter China in cyberspace
- OneClik A ClickOnce-Based APT Campaign Targeting Energy, Oil and Gas Infrastructure
- Cybercriminals Abuse Open-Source Tools To Target Africa’s Financial Sector
- Cryptominers’ Anatomy Shutting Down Mining Botnets
- Chinese “LapDogs” ORB Network Targets US and Asia
- APT36 Phishing Campaign Targets Indian Defense Using Credential-Stealing Malware
- Zoom & doom BlueNoroff call opens the door
- Resurgence of the Prometei Botnet
- Aflac notifies SEC of breach suspected to be work of Scattered Spider
- Part 2 Tracking LummaC2 Infrastructure
- Cobalt Strike Operators Leverage PowerShell Loaders Across Chinese, Russian, and Global Infrastructure
- What’s in an ASP? Creative Phishing Attack on Prominent Academics and Critics of Russia
- Threat actor Banana Squad exploits GitHub repos in new campaign
- Ransomware Gangs Collapse as Qilin Seizes Control
- How Fraudsters Are Poisoning Search Results to Promote Phishing Sites
- PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud Environments
- Kali Linux 2025.2 released with 13 new tools, car hacking updates
- Is your AI safe? Threat analysis of MCP (Model Context Protocol)
- Fileless AsyncRAT Distributed Via Clickfix Technique Targeting German Speaking Users
- Anubis A Closer Look at an Emerging Ransomware with Built-in Wiper
- Ransomware Scum Disrupted Utility Services with SimpleHelp Attacks
- JSFireTruck Exploring Malicious JavaScript Using JSF*ck as an Obfuscation Technique
- Fog Ransomware Unusual Toolset Used in Recent Attack
- Toxic trend Another malware threat targets DeepSeek
- Researcher Finds Five Zero-Days and 20+ Misconfigurations in Salesforce Cloud
- Global analysis of Adversary-in-the-Middle phishing threats
- Unmasking the Infrastructure of a Spearphishing Campaign
- iMessage Zero-Click Attacks Suspected in Targeting of High-Value Individuals
- Sleep with one eye open how Librarian Ghouls steal data by night
- GhostVendors Exposed Silent Push Uncovers Massive Network of 4000+ Fraudulent Domains Masquerading as Major Brands
- Follow the Smoke | China-nexus Threat Actors Hammer At the Doors of Top Tier Targets
- DanaBleed DanaBot C2 Server Memory Leak Bug
- Mapping Hidden Alliances in Russian-Affiliated Ransomware
- Operation Endgame Disrupts AvCheck, Forces Threat Actors to Seek Alternatives
- Chinese Hackers Infiltrated U.S. Telecom Networks a Year Earlier Than Previously Known
- Abusing Paste.ee to Deploy XWorm and AsyncRAT Across Global C2 Infrastructure
- The strange tale of ischhfd83 When cybercriminals eat their own
- The Bitter End Unraveling Eight Years of Espionage Antics—Part One
- StormWall Reveals India, China and US Faced Most DDoS Attacks in Q1 2025
- From open-source to open threat Tracking Chaos RAT’s evolution
- Criminals Bribed Outsourced Contractors to Steal Coinbase User Data
- Android malware trends Stealthier, easier-to-use
- The Hidden Cost of Trust New Data Reveals Alarming Employee Engagement with Vendor Email Compromise
- How Threat Actors Exploit Human Trust A Breakdown of the 'Prove You Are Human' Malware Scheme
- Victims risk AsyncRAT infection after being redirected to fake Booking.com sites
- Malicious Ruby Gems Exfiltrate Telegram Tokens and Messages Following Vietnam Ban
- Backdoors in Python and NPM Packages Target Windows and Linux
- Acreed Emerges as Dominant Infostealer Threat Following Lumma Takedown
- Interlock ransomware what you need to know
- Monkey-Patched PyPI Packages Use Transitive Dependencies to Steal Solana Private Keys
- Haozi’s Plug-and-Play Phishing-as-a-Service Has Facilitated $280,000 of Criminal Transactions Over Past Five Months
- Cybercriminals camouflaging threats as AI tool installers
- Zanubis in motion Tracing the active evolution of the Android banking malware
- Pakistan Telecommunication Company (PTCL) Targeted by Bitter APT During Heightened Regional Conflict
- Text-to-Malware How Cybercriminals Weaponize Fake AI-Themed Websites
- New Russia-affiliated actor Void Blizzard targets critical sectors for espionage
- Malware or LLM? Silent Werewolf employs new loaders to attack Russian and Moldovan organizations
- Employees Searching Payroll Portals on Google Tricked Into Sending Paychecks to Hackers
- Earth Lamia Develops Custom Arsenal to Target Multiple Industries
- AIVD and MIVD identify new Russian cyber threat actor
- SilverRAT Source Code Leaked Online Here’s What You Need to Know
- Reborn in Rust AsyncRAT
- Eye of the Storm Dissecting the Playbook of Cyber Toufan
- Operation Sindoor – Anatomy of a Digital Siege
- Credential-Stealing Crew Spoofs VPN Clients from Cisco, Fortinet, and Others