malicious

June 26, 2026

The Phantom Order: How Fake Receipts in the Shop App Are Driving Vishing Attacks

Cybersecurity landscapes are shifting from external delivery methods, like traditional phishing emails, to sophisticated in-app social engineering. Recently, threat actors…
Read More »
June 26, 2026

Unmasking CL-STA-1062: The Stealthy Threat Targeting Southeast Asian Infrastructure

During 2025, a Chinese-speaking threat actor, tracked as CL-STA-1062, significantly escalated its regional operations. Targeting government entities and critical energy…
Read More »
June 26, 2026

Critical Escalation: CISA Flags Actively Exploited SSRF Vulnerability in Cisco Unified Communications Manager

The Cybersecurity and Infrastructure Security Agency (CISA) has officially updated its Known Exploited Vulnerabilities (KEV) catalog to include a critical…
Read More »
June 26, 2026

Threat Intelligence Report: Mini Shai-Hulud, Miasma, and Hades Malware Targeting Developer Ecosystems

A sophisticated new wave of supply-chain attacks—driven by the Mini Shai-Hulud, Miasma, and Hades malware families—is currently targeting the npm…
Read More »
June 25, 2026

The Evolution of LokiBot: Deep Dive into Modern Evasion and Injection Techniques

LokiBot is no stranger to the threat landscape. First surfacing in underground forums around May 2015 via vendors known as…
Read More »
June 25, 2026

Supply Chain Alert: Shai-Hulud/Hades Malware Targets Leo/RStreams Ecosystem

A sophisticated supply-chain attack has been identified targeting the Leo/RStreams ecosystem, an AWS-native event streaming SDK frequently utilized in Kinesis,…
Read More »
June 25, 2026

Technical Analysis: Sophisticated AiTM Phishing Campaign Targeting AWS Console Users

A highly coordinated and technically proficient phishing campaign has been identified, specifically targeting AWS console users through an Adversary-in-the-Middle (AiTM)…
Read More »
June 25, 2026

Analyzing macOS.Gaslight: A Sophisticated Rust-Based Implant Targeting Analyst Workflows

Threat researchers have identified a sophisticated new macOS implant, tracked as macOS.Gaslight. Built using the Rust programming language, this malware…
Read More »
June 25, 2026

Critical Security Patch: Google Chrome Addresses Multiple Memory Safety Vulnerabilities

Google has officially deployed a critical security update for the Chrome browser, releasing versions 149.0.7827.196/197 for Windows and macOS, and…
Read More »
June 25, 2026

Dismantling the Cybercrime Assembly Line: Inside Operation Endgame’s Infrastructure Takedown

In a massive synchronized strike against the digital underworld, Europol—working in tandem with a global coalition of law enforcement agencies…
Read More »
June 25, 2026

Unveiling StrikeShark: Deep Dive into the SharkLoader Infection Chain

During a recent forensic investigation into cyber activity targeting a diplomatic mission in Indonesia, security researchers identified a previously undocumented…
Read More »
June 25, 2026

Anthropic Accuses Alibaba of Orchestrating Massive AI Model Theft Campaign

In a significant escalation of the ongoing tension between Western AI developers and global competitors, Anthropic has formally accused the…
Read More »
June 24, 2026

Deep Dive: The Synergy of ModeloRAT and Backdoor.Mistic in Initial Access Brokerage

Security researchers are uncovering a sophisticated operational pipeline linking the Python-based remote access trojan (RAT) ModeloRAT with a newly identified…
Read More »
June 24, 2026

Social Engineering at Scale: How a Fake Document Utility Deployed Anatsa Banking Trojan to 100K Users

A sophisticated Android malware campaign has recently been identified, leveraging a deceptive “document reader” application to distribute the notorious Anatsa…
Read More »
June 24, 2026

Post-Mortem: Analyzing the TanStack NPM Supply Chain Attack on Grafana Labs

Grafana Labs has officially disclosed a sophisticated supply chain attack targeting the TanStack npm ecosystem, which ultimately led to the…
Read More »
June 24, 2026

Threat Intelligence Report: Sophisticated Microsoft Teams Impersonation Campaign Deploying Signed RATs

A highly organized phishing campaign is currently targeting users by impersonating Microsoft Teams. Rather than relying on traditional malware, this…
Read More »
June 24, 2026

GhostShell Espionage Campaign Targets Ukrainian UAV Ecosystem via RAR Exploitation

A sophisticated espionage campaign has been identified targeting the unmanned aerial vehicle (UAV) infrastructure in Ukraine. This operation, attributed to…
Read More »
June 24, 2026

Breaking the Sandbox: How the Payouts King Actor Uses “Edgecution” to Pivot from Browser to Host

A sophisticated campaign orchestrated by an initial access broker linked to the Payouts King ransomware ecosystem has introduced a highly…
Read More »
June 24, 2026

Technical Analysis: Privilege Escalation via Stored XSS in Webmin (CVE-2026-22678)

A critical security flaw has been identified in Webmin, a widely utilized web-based interface for Unix system administration. The vulnerability,…
Read More »
June 24, 2026

Technical Analysis: SSRF Vulnerability in Microsoft Exchange EWS (CVE-2026-45502)

A functional proof-of-concept (PoC) has surfaced for CVE-2026-45502, a Server-Side Request Forgery (SSRF) vulnerability residing within the Exchange Web Services…
Read More »

Previous page Next page