targeted
-
Context.ai Compromise Exposes Vercel Customers
In a recent disclosure that highlights the growing complexity of modern software supply chains, Vercel has confirmed a sophisticated security…
Read More » -
Harvester APT Deploys Linux Variant of GoGra Backdoor via Microsoft Graph API, Outlook Mailboxes
In a significant pivot for cyber espionage tactics, security researchers have uncovered a Linux-compatible variant of the GoGra backdoor. This…
Read More » -
From Disclosure to Exploitation in Hours: LMDeploy SSRF Vulnerability Exploited in the Wild
In the rapidly evolving landscape of AI infrastructure, the window between vulnerability disclosure and active exploitation is shrinking to a…
Read More » -
Tropic Trooper Campaign: Leveraging GitHub and VS Code Tunnels for Stealthy C2
A sophisticated new campaign attributed to the threat actor Tropic Trooper (also known as Earth Centaur or Pirate Panda) has…
Read More » -
Critical Supply Chain Compromise: Malicious Infostealer Detected in Xinference Python Package
The software development community is facing a significant security milestone as a sophisticated supply chain attack has successfully targeted Xinference,…
Read More » -
Security Patch: iOS and iPadOS 26.4.2 Fixes Notification Data Leakage Vulnerability
Apple has officially deployed iOS 26.4.2 and iPadOS 26.4.2, a targeted security release designed to mitigate a critical privacy vulnerability.…
Read More » -
Exploiting the Frictionless Frontier: How Criminal Syndicates Weaponize French Freelancer Fintech Accounts
The rapid evolution of digital banking has provided unprecedented convenience for the modern entrepreneur, but it has also inadvertently engineered…
Read More » -
Analyzing DinDoor, the Deno-Powered Backdoor Disguised as Legitimate Tooling
In the evolving landscape of advanced persistent threats (APTs), attackers are increasingly moving away from custom compiled binaries in favor…
Read More » -
Claude Mythos Breach Exposes Critical Flaw in AI Security Supply Chains
In a significant blow to the specialized AI security sector, a group of unauthorized actors has successfully bypassed multi-layered access…
Read More » -
Over 1,300 SharePoint Servers Remain Vulnerable to Active Spoofing Exploits
In what is becoming a stark case study in patch management latency, more than 1,370 Microsoft SharePoint servers remain exposed…
Read More » -
Critical Infrastructure Breach: Compromise of France’s ANTS National Identity Portal
In a significant blow to national digital sovereignty, the French National Agency for Secure Documents (ANTS) has confirmed a major…
Read More » -
LOTUSLITE: How Mustang Panda is Weaponizing Trusted Binaries Against the Banking Sector
In a sophisticated display of “living off the land” tradecraft, threat actors are increasingly leveraging Microsoft-signed developer tools to mask…
Read More » -
The Rise of GenAI-Assisted NFC Relays: Analyzing the New NGate Malware Campaign
Cybersecurity researchers have identified a sophisticated new evolution in the NGate malware family. In this latest iteration, threat actors are…
Read More » -
The Rise of ‘Gentlemen’: A Multi-Platform RaaS Threat Targeting Enterprise Infrastructure
The ransomware landscape is witnessing the rapid ascent of a sophisticated Ransomware-as-a-Service (RaaS) operation known as Gentlemen. Unlike many opportunistic…
Read More » -
The Trojan Horse in Your Inbox: How Attackers Are Weaponizing GitHub Issue Notifications
In a sophisticated evolution of social engineering, threat actors are no longer just sending fake emails; they are hijacking the…
Read More » -
Critical RCE Vulnerability Discovered in SGLang: How Malicious GGUF Models Can Compromise Inference Servers
In an era where AI infrastructure speed is prioritized, a significant security oversight has been uncovered within SGLang, a high-performance…
Read More » -
Stealth by Design: Unpacking the Sophisticated ‘Stealtok’ Malicious Extension Campaign
In a sobering reminder of how easily trust can be exploited, security researchers at LayerX have exposed a highly coordinated…
Read More » -
Operation PhantomCLR: Exploiting .NET AppDomain Mechanisms via Trusted Intel Binaries
In a sophisticated display of living-off-the-land (LotL) tactics, threat actors are hijacking the fundamental architecture of the .NET AppDomain to…
Read More »