Threat Actors

Exploitation Techniques State-Sponsored Attacks Nation-State Actors Ransomware Advanced Persistent Threats Malware Ransomware Groups Hacking Groups Attack Techniques Social Engineering

14 ARTICLES

2d ago

ChainDrop Worm Infects Hundreds of npm Packages

Stolen GitHub credentials let poisoned releases run a Bun‑launched infostealer that harvests developer and cloud secrets, repackages them, and propagates through npm.

4 ARTICLES

2d ago

CISA Adds Langflow, Apache Tomcat and N‑able Flaws to Known Exploited Vulnerabilities

3 ARTICLES

2d ago

Greatness PhaaS Uses Device‑Code Phishing and AiTM Proxies to Steal Microsoft 365 Tokens

10 ARTICLES

2d ago

N-able N-central Is Being Exploited as Emergency Hotfix Is Issued

11 ARTICLES

3d ago

Russian-Linked Hackers Hijack Hotel Wi‑Fi to Steal Microsoft 365 Logins and Deliver Malware

4 ARTICLES

3d ago

U.S. and Allies Publish CI Fortify Guide for Physically Isolating Vital OT Systems

4 ARTICLES

last wk.

Attackers Hijack Hotel and Conference Wi‑Fi to Steal Microsoft 365 Access

11 ARTICLES

last wk.

U.S. and Allies Attribute Long‑Running Zimbra Email Theft to Russian APT Laundry Bear

6 ARTICLES

2w ago

Public PoC Drives Active Exploitation of Critical SharePoint RCE

4 ARTICLES

2w ago

Qilin Ransomware Exploits Palo Alto GlobalProtect Authentication Bypass

8 ARTICLES

2w ago

HOLLOWGRAPH Malware Uses Microsoft 365 Calendars as a Covert C2 Channel

5 ARTICLES

2w ago

SonicWall SMA1000 Zero-Days Exploited Before Patch, Custom Malware Deployed

5 ARTICLES

3w ago

Researcher Publishes LegacyHive PoC That Escalates Privileges on Patched Windows

3 ARTICLES

3w ago

Russian-Speaking Actor Trojanizes Popular Installers to Deploy Starland RAT

7 ARTICLES

3w ago

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

17 ARTICLES

3w ago

U.S. and Allies Say Russian FSB Unit Is Exploiting Weak Routers to Target Critical Infrastructure

Threat Actors

ChainDrop Worm Infects Hundreds of npm Packages

CISA Adds Langflow, Apache Tomcat and N‑able Flaws to Known Exploited Vulnerabilities

Greatness PhaaS Uses Device‑Code Phishing and AiTM Proxies to Steal Microsoft 365 Tokens

N-able N-central Is Being Exploited as Emergency Hotfix Is Issued

Russian-Linked Hackers Hijack Hotel Wi‑Fi to Steal Microsoft 365 Logins and Deliver Malware

INC Ransomware Dominates Exploitation of SonicWall SMA1000 Zero‑Days

DeepSeek Inside Hermes Used to Launch Autonomous Cyberattacks

Amazon Links Four npm Supply‑Chain Hacks to North Korea‑Linked Actor

Laundry Bear Uses OWA XSS to Install OWAReaper Backdoor

U.S. and Allies Publish CI Fortify Guide for Physically Isolating Vital OT Systems

Never miss stories about

Threat Actors

Attackers Hijack Hotel and Conference Wi‑Fi to Steal Microsoft 365 Access

U.S. and Allies Attribute Long‑Running Zimbra Email Theft to Russian APT Laundry Bear

Public PoC Drives Active Exploitation of Critical SharePoint RCE

Qilin Ransomware Exploits Palo Alto GlobalProtect Authentication Bypass

HOLLOWGRAPH Malware Uses Microsoft 365 Calendars as a Covert C2 Channel

SonicWall SMA1000 Zero-Days Exploited Before Patch, Custom Malware Deployed

Researcher Publishes LegacyHive PoC That Escalates Privileges on Patched Windows

Russian-Speaking Actor Trojanizes Popular Installers to Deploy Starland RAT

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

U.S. and Allies Say Russian FSB Unit Is Exploiting Weak Routers to Target Critical Infrastructure

Never miss stories about

Threat Actors