Attack Vectors

Social Engineering Phishing Remote Attacks Prompt Injection Cloud Security AI Tools Credential Theft Cross-Prompt Injection Malware Credential Attacks

4 ARTICLES

2w ago

TerminalFix Uses Fake Cloudflare CAPTCHA to Install WebSocket Reverse Tunnel

The implant opens an encrypted WebSocket to gitnow.dev that can proxy arbitrary TCP into corporate networks, turning a compromised PC into a network pivot.

5 ARTICLES

4w ago

Aryaka Uncovers ‘BlackSanta’ Malware That Kills EDR in Year-Long HR Resume Campaign

6 ARTICLES

8mo ago

Huntress Uncovers 'CrashFix' Browser Extension That Crashes Chrome to Push ModeloRAT

7 ARTICLES

8mo ago

Fake Booking.com BSOD Lures Install DCRat via MSBuild in European Hotel Hack

7 ARTICLES

8mo ago

Crypto Theft Soared in 2025 Even as Attacks Fell Sharply, Year-End Analyses Find

4 ARTICLES

9mo ago

CISA Flags Actively Exploited WatchGuard Firebox RCE as Patches and IoCs Roll Out

10 ARTICLES

10mo ago

Memento Labs CEO Confirms Dante Spyware Ownership After Chrome Zero-Day Campaign Exposed

4 ARTICLES

11mo ago

Microsoft Revokes 200+ Fraudulent Certificates Tied to Fake Teams Installers Used in Rhysida Attacks

4 ARTICLES

11mo ago

Pro-Russian Hacktivists Fooled by Water-Plant Honeypot, Forescout Reveals

7 ARTICLES

last yr.

Active FileFix Campaign Uses Steganographic JPGs to Deliver StealC via Fake Meta Alerts

Attack Vectors

TerminalFix Uses Fake Cloudflare CAPTCHA to Install WebSocket Reverse Tunnel

Operators Compromised More Than 14,500 Dahua Cameras in 35‑Day Campaign

SQL Injection Used to Compile Khunt Toolkit Inside Oracle Database

Fifteen Flaws in TP‑Link Omada ZTP Can Be Chained to Take Over Networks

Ukraine's CERT Says UAC-0099 Hid Malware in Fake Notepad++ Plugin

Researchers Use Context Bombs to Stop AI Hacking Agents

Massive Password-Spray Flood Targets Azure CLI, Compromises Dozens

CloudZ Malware Hijacks Microsoft Phone Link to Steal SMS Codes and Credentials

CrowdStrike Flags Cordial and Snarky Spider for Fast SaaS Extortion Campaigns

Google Patches Antigravity Flaw That Let Prompt Injection Break the Sandbox

Never miss stories about

Attack Vectors

OpenAI Fixes Codex Flaw That Let Malicious Git Branches Steal GitHub Tokens

Aryaka Uncovers ‘BlackSanta’ Malware That Kills EDR in Year-Long HR Resume Campaign

Huntress Uncovers 'CrashFix' Browser Extension That Crashes Chrome to Push ModeloRAT

Fake Booking.com BSOD Lures Install DCRat via MSBuild in European Hotel Hack

Crypto Theft Soared in 2025 Even as Attacks Fell Sharply, Year-End Analyses Find

CISA Flags Actively Exploited WatchGuard Firebox RCE as Patches and IoCs Roll Out

Memento Labs CEO Confirms Dante Spyware Ownership After Chrome Zero-Day Campaign Exposed

Microsoft Revokes 200+ Fraudulent Certificates Tied to Fake Teams Installers Used in Rhysida Attacks

Pro-Russian Hacktivists Fooled by Water-Plant Honeypot, Forescout Reveals

Active FileFix Campaign Uses Steganographic JPGs to Deliver StealC via Fake Meta Alerts

Never miss stories about

Attack Vectors