Attack Vectors

Social Engineering Phishing Remote Attacks Prompt Injection Cloud Security Economic Risks Credential Theft Credential Attacks Malware Electromagnetic Attacks

3 ARTICLES

last mo.

ChainScript RAT Uses Polygon Smart Contract to Rotate WebSocket C2

Researchers warn the on‑chain resolver lets operators move command servers without touching infected hosts, so defenders should prioritize process and behavior signals over static IP or domain lists.

4 ARTICLES

2mo ago

Aryaka Uncovers ‘BlackSanta’ Malware That Kills EDR in Year-Long HR Resume Campaign

6 ARTICLES

9mo ago

Huntress Uncovers 'CrashFix' Browser Extension That Crashes Chrome to Push ModeloRAT

7 ARTICLES

10mo ago

Fake Booking.com BSOD Lures Install DCRat via MSBuild in European Hotel Hack

7 ARTICLES

10mo ago

Crypto Theft Soared in 2025 Even as Attacks Fell Sharply, Year-End Analyses Find

4 ARTICLES

10mo ago

CISA Flags Actively Exploited WatchGuard Firebox RCE as Patches and IoCs Roll Out

10 ARTICLES

last yr.

Memento Labs CEO Confirms Dante Spyware Ownership After Chrome Zero-Day Campaign Exposed

4 ARTICLES

last yr.

Microsoft Revokes 200+ Fraudulent Certificates Tied to Fake Teams Installers Used in Rhysida Attacks

4 ARTICLES

last yr.

Pro-Russian Hacktivists Fooled by Water-Plant Honeypot, Forescout Reveals

Attack Vectors

ChainScript RAT Uses Polygon Smart Contract to Rotate WebSocket C2

TerminalFix Uses Fake Cloudflare CAPTCHA to Install WebSocket Reverse Tunnel

Operators Compromised More Than 14,500 Dahua Cameras in 35‑Day Campaign

SQL Injection Used to Compile Khunt Toolkit Inside Oracle Database

Fifteen Flaws in TP‑Link Omada ZTP Can Be Chained to Take Over Networks

Ukraine's CERT Says UAC-0099 Hid Malware in Fake Notepad++ Plugin

Researchers Use Context Bombs to Stop AI Hacking Agents

Massive Password-Spray Flood Targets Azure CLI, Compromises Dozens

CloudZ Malware Hijacks Microsoft Phone Link to Steal SMS Codes and Credentials

CrowdStrike Flags Cordial and Snarky Spider for Fast SaaS Extortion Campaigns

Never miss stories about

Attack Vectors

Google Patches Antigravity Flaw That Let Prompt Injection Break the Sandbox

OpenAI Fixes Codex Flaw That Let Malicious Git Branches Steal GitHub Tokens

Aryaka Uncovers ‘BlackSanta’ Malware That Kills EDR in Year-Long HR Resume Campaign

Huntress Uncovers 'CrashFix' Browser Extension That Crashes Chrome to Push ModeloRAT

Fake Booking.com BSOD Lures Install DCRat via MSBuild in European Hotel Hack

Crypto Theft Soared in 2025 Even as Attacks Fell Sharply, Year-End Analyses Find

CISA Flags Actively Exploited WatchGuard Firebox RCE as Patches and IoCs Roll Out

Memento Labs CEO Confirms Dante Spyware Ownership After Chrome Zero-Day Campaign Exposed

Microsoft Revokes 200+ Fraudulent Certificates Tied to Fake Teams Installers Used in Rhysida Attacks

Pro-Russian Hacktivists Fooled by Water-Plant Honeypot, Forescout Reveals

Never miss stories about

Attack Vectors