Technology ❯ Cybersecurity

Threat Actors

Exploitation Techniques Nation-State Actors State-Sponsored Attacks Advanced Persistent Threats Ransomware Malware Hacking Groups Ransomware Groups Attack Techniques Social Engineering

Microsoft Defender Zero-Days Are Being Exploited as Two Remain Unpatched

Public exploit code accelerated real-world attacks, according to Huntress.

Hackers Exploit n8n Cloud Webhooks to Deliver Malware and Phish Users

OpenAI Requires macOS App Updates After Axios Supply-Chain Compromise

Marimo RCE Exploited Within Hours of Disclosure

CPUID Confirms Brief Website Hijack That Served Malware via CPU-Z and HWMonitor Links

CISA Orders Immediate Protections as Iran-Linked Hackers Target Internet-Facing Industrial Controllers

Google Says UNC6783 Is Hitting BPO Helpdesks With Okta Phishing

Cisco Talos Attributes Taiwan Civil Society Attacks to 'LucidRook' Malware Cluster UAT-10362

Microsoft Warns of AI-Driven Device-Code Phishing Taking Over Accounts Daily

Microsoft Links China-Linked Storm-1175 to Fast Zero-Day Exploits in Medusa Ransomware Campaigns

Germany Unmasks Alleged REvil and GandCrab Leaders in 130 German Attacks

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

Axios npm Package Hijacked to Drop RATs as Google Links Attack to UNC1069

Microsoft Warns WhatsApp-Delivered VBS Attack Uses Renamed Windows Tools to Seize PCs

LiteLLM Supply-Chain Breach Put Backdoored PyPI Releases in Developers’ Workflows

F5 Reclassifies BIG-IP APM Bug as Critical RCE as In‑the‑Wild Attacks Unfold

TeamPCP Poisons Telnyx Python SDK on PyPI With WAV‑Hidden Infostealer

Apple Pushes Lock Screen ‘Critical Software’ Alerts to iPhones on iOS 17 and Earlier

TeamPCP Supply-Chain Attacks Hit First 48-Hour Lull as Focus Turns to Monetization

Rapid7 Uncovers China-Linked Sleeper Cells in Global Telecom Networks