tokens
-
Analyzing a New PowerShell-Based Telegram Session Stealer: From Pastebin to Bot API Exfiltration
Threat actors are currently refining a specialized class of infostealers specifically designed to hijack Telegram sessions. Unlike broad-spectrum malware that…
Read More » -
GitLab Issues Emergency Patches for 11 Vulnerabilities
GitLab has issued an urgent security advisory following the discovery of 11 distinct vulnerabilities affecting both its Community Edition (CE)…
Read More » -
The Industrialization of Web3 Theft: How HexagonalRodent Leverages AI and Social Engineering to Loot Developers
In a sophisticated evolution of North Korean cyber operations, a threat actor group known as HexagonalRodent is systematically targeting the…
Read More » -
The Multi-Stage Supply Chain Compromise of Checkmarx KICS
In a sophisticated demonstration of supply chain exploitation, the official Checkmarx KICS (Keeping Infrastructure as Code Secure) ecosystem has fallen…
Read More » -
Critical Supply Chain Compromise: Malicious Infostealer Detected in Xinference Python Package
The software development community is facing a significant security milestone as a sophisticated supply chain attack has successfully targeted Xinference,…
Read More » -
Security Advisory: Discovery of “Auraboros,” an Unauthenticated, High-Capability RAT Framework
In a significant finding for the threat intelligence community, a previously undocumented Remote Access Trojan (RAT) framework, dubbed Auraboros, has…
Read More » -
CISA Issues Urgent Alert Over Compromised Axios NPM Package
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent advisory regarding a sophisticated software supply chain attack targeting…
Read More » -
The Trojan Horse in Your Inbox: How Attackers Are Weaponizing GitHub Issue Notifications
In a sophisticated evolution of social engineering, threat actors are no longer just sending fake emails; they are hijacking the…
Read More » -
TP-Link Routers Under Attack: Mirai Exploitation via Critical Vulnerability
Active scanning campaigns are targeting vulnerable TP-Link home routers to deploy Mirai-style malware, exploiting the CVE-2023-33538 vulnerability in a new…
Read More » -
ATHR: Integrated Telephony-Based Attack Infrastructure and AI-Driven Voice Social Engineering in TOAD Attack Campaigns
Cybercriminal threat actors are increasingly leveraging telephone-oriented attack delivery (TOAD) methodologies to circumvent conventional email security infrastructure. This trend is…
Read More » -
Exploitation of CVE-2026-39987 in Marimo: A Multi-Stage Attack Campaign Targeting AI/ML Developer Infrastructure
Threat actors are actively exploiting CVE-2026-39987, a critical pre-authentication remote code execution (RCE) vulnerability in the marimo Python notebook platform,…
Read More » -
Cisco Webex Vulnerability CVE-2026-20184 Allows Unauthenticated User Impersonation
Cisco has issued an urgent security advisory exposing a critical vulnerability in its Webex communication platform. Tracked as CVE-2026-20184, this…
Read More » -
How Cybercriminals Are Turning Your Inbox Rules Into a Backdoor
Hackers are quietly exploiting a built-in Microsoft 365 feature to steal emails, hide security alerts, and maintain long-term access to…
Read More » -
Microsoft Releases April 2026 Patch Tuesday Update: 168 Vulnerabilities Patched Including Active Zero-Day Exploit
Microsoft has addressed a critical security gap by releasing its April 2026 Patch Tuesday updates, covering 168 vulnerabilities across its…
Read More » -
Rockstar Games Data Breach: ShinyHunters Leaks 78.6 Million Records
Rockstar Games has suffered a significant data breach after the infamous threat group ShinyHunters leaked over 78.6 million internal records…
Read More » -
China-Linked APT41 Deploys Stealthy Linux Backdoor with SMTP Command-Control
Security researchers have uncovered a previously undocumented Linux backdoor attributed to China-linked APT41 (Winnti) group, actively targeting cloud workloads across…
Read More »