campaigns

June 18, 2026

Critical Information Disclosure in Gravity SMTP Plugin: Active Exploitation of API Credentials

Security researchers have identified a significant information disclosure vulnerability in the Gravity SMTP WordPress plugin, which is currently being leveraged…
Read More »
June 16, 2026

Active Exploitation Detected: Critical Vulnerabilities Targeting Fortinet FortiSandbox Infrastructure

The cybersecurity landscape has seen a rapid escalation in activity as threat actors pivot toward targeting core security infrastructure. Recent…
Read More »
June 16, 2026

Advanced Phishing Evolution: UNC1151 Targets Gmail with Real-Time 2FA Interception

The threat actor known as Ghostwriter (UNC1151) has significantly upgraded its operational capabilities, moving beyond localized phishing to execute sophisticated,…
Read More »
June 16, 2026

The Ransomware Consolidation Wave: How Hyflock and The Gentlemen are Reshaping the RaaS Landscape

The ransomware landscape is undergoing a period of rapid reconsolidation. Rather than the disappearance of major players, we are witnessing…
Read More »
June 15, 2026

Velvet Ant: Surgical Subversion of Critical Infrastructure Authentication Stacks (PAM and OpenSSH)

In a sophisticated display of cyber-persistence, the China-nexus threat actor known as Velvet Ant has been unmasked for executing a…
Read More »
June 15, 2026

The Anatomy of SearchJack: Exploiting Chrome Settings for Large-Scale Affiliate Revenue

A sophisticated, coordinated campaign involving 23 seemingly benign Chrome extensions—tracked under the moniker “SearchJack”—has successfully compromised the default search configurations…
Read More »
June 15, 2026

Technical Analysis: The PromptSnatcher (Panel 231) AI Data Exfiltration Campaign

PromptSnatcher (internally identified as Panel 231) represents a sophisticated, dual-vector data exfiltration operation. Operating via two distinct browser extensions that…
Read More »
June 12, 2026

Edge-Centric Warfare: APT28’s Strategic Pivot to Botnet-Powered Proxy Infrastructure

A significant operational evolution has been observed within the GRU-linked intrusion set APT28 (alternatively identified as Fancy Bear, Sofacy, Forest…
Read More »
June 12, 2026

Supply Chain Warfare: Advanced Typosquatting Targets Web3 Development Ecosystems

Threat actors are increasingly weaponizing the inherent trust placed in open-source dependencies to target Web3 engineering teams. By deploying sophisticated…
Read More »
June 12, 2026

Critical Security Breach Alleged Against Tchap: French Government Communication Infrastructure Compromised

A significant cybersecurity incident has reportedly targeted Tchap, the sovereign, secure messaging platform utilized by French government agencies. Initial reports…
Read More »
June 12, 2026

Deconstructing the AudiA6 Takedown: A Blow to the Industrialized Crypto-Laundering Ecosystem

In a landmark victory for international law enforcement, a massive cryptocurrency laundering infrastructure known as “AudiA6” has been dismantled. This…
Read More »
June 11, 2026

The Rise of Deceptive DMG Installers: How macOS Infostealers Exploit Human Trust

A sophisticated shift in the macOS threat landscape has emerged, with threat actors increasingly pivoting toward weaponized disk images (.dmg)…
Read More »
June 10, 2026

Algorithmic Malice: How Short-Form Video is Weaponizing Social Media for Malware Distribution

A sophisticated new phishing vector is emerging, weaponizing the high-engagement nature of short-form video platforms like TikTok and Instagram Reels.…
Read More »
June 10, 2026

Critical Remote Code Execution Flaw Uncovered in Veeam Backup & Replication

A high-severity Remote Code Execution (RCE) vulnerability has been identified within the Veeam Backup & Replication ecosystem, presenting a significant…
Read More »
June 9, 2026

Technical Analysis: UNK_DeadDrop Phishing Campaign Targeting Developer Workflows

A sophisticated, sustained phishing campaign is currently targeting the developer community by weaponizing legitimate recruitment and code-review processes. Labeled UNK_DeadDrop…
Read More »
June 9, 2026

Technical Analysis: WhatsApp Disrupts NSO Group Spyware Campaign Amid Legal Escalation

WhatsApp has successfully neutralized a recent spyware campaign attributed to the NSO Group, the developer of the notorious Pegasus spyware.…
Read More »
June 9, 2026

The Evolution of PyPI Supply Chain Attacks: Analyzing the Newest Waves of Shai-Hulud, Miasma, and Hades

For security researchers and DevOps engineers, the landscape of software supply chain attacks is often a game of cat and…
Read More »
June 8, 2026

Emerging Extortion Threat: Analyzing the Pink (CL-CRI-1147) Cloud-Centric Campaign

A sophisticated new extortion brand, identified by researchers as Pink (CL-CRI-1147), has emerged with a highly specialized mission: targeting enterprise…
Read More »
June 8, 2026

Critical Logic Flaw in Instagram’s Password Recovery Workflow Exposes Unmasked User Data

A significant logic vulnerability within Instagram’s web-based account recovery mechanism recently exposed unredacted user contact information—including full email addresses and…
Read More »
June 6, 2026

Advanced Espionage: Deconstructing OP-512’s Custom ASPX Web Shell Framework

A sophisticated China-linked threat actor, designated as OP-512, has been identified deploying a highly specialized web shell framework designed specifically…
Read More »

Previous page Next page