Threat Analysis

Vulnerabilities Exploits Malware Detection Attack Vectors Malware Analysis Indicators of Compromise Malware Campaigns Incident Response Google Threat Analysis Group Malware

4 ARTICLES

2w ago

Multi‑Stage Malware Found in Four AsyncAPI npm Packages

Researchers say attackers used compromised push access to abuse the project's GitHub Actions release workflow and publish poisoned packages that fetch a large, multi‑channel command framework from IPFS.

13 ARTICLES

2w ago

GodDamn Ransomware Uses Microsoft-Signed PoisonX Driver to Blind Endpoint Defenses

3 ARTICLES

3w ago

PamStealer Verifies macOS Passwords Through PAM Before Stealing Data

7 ARTICLES

4w ago

PamStealer Poses as Maccy to Validate and Steal macOS Passwords

3 ARTICLES

last mo.

Gentlemen RaaS Centralizes EDR-Killers in GentleKiller Suite

11 ARTICLES

last mo.

Rokarolla Trojan Seizes Android Phones to Steal From 217 Banking and Crypto Apps

6 ARTICLES

2mo ago

Active Exploitation of Palo Alto GlobalProtect Flaw Forces Urgent Patching

10 ARTICLES

2mo ago

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

9 ARTICLES

2mo ago

Fragnesia Linux Kernel Flaw Gives Local Users Root Access

7 ARTICLES

2mo ago

German Warnings Mount Over Anthropic’s Claude Mythos as U.S. Weighs Pre‑Release Reviews

3 ARTICLES

2mo ago

Fake Claude AI Site Pushes New 'Beagle' Windows Backdoor

9 ARTICLES

2mo ago

DAEMON Tools Confirms Supply-Chain Breach, Releases Clean Lite 12.6

4 ARTICLES

3mo ago

Researchers Uncover ZionSiphon Malware Aimed at Israeli Water Systems

9 ARTICLES

3mo ago

Adobe Reader Zero-Day Exploited for Months Through Malicious PDFs

7 ARTICLES

3mo ago

Mac ClickFix Campaign Shifts to Script Editor via Applescript Links

Threat Analysis

Multi‑Stage Malware Found in Four AsyncAPI npm Packages

CrashStealer Uses Notarized macOS Dropper to Steal Keychain and Wallet Data

Attackers Spoof OAuth Client IDs to Evade Microsoft Entra Sign-In Logs

Australia Warns of Mass CMS Exploitation Campaign Deploying Webshells

Zimbra Patches Critical Classic Web Client XSS

GigaWiper Backdoor Merges Spy Capabilities With Multiple Irreversible Wipers

GodDamn Ransomware Uses Microsoft-Signed PoisonX Driver to Blind Endpoint Defenses

PamStealer Verifies macOS Passwords Through PAM Before Stealing Data

PamStealer Poses as Maccy to Validate and Steal macOS Passwords

Gentlemen RaaS Centralizes EDR-Killers in GentleKiller Suite

Never miss stories about

Threat Analysis

Rokarolla Trojan Seizes Android Phones to Steal From 217 Banking and Crypto Apps

Active Exploitation of Palo Alto GlobalProtect Flaw Forces Urgent Patching

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

Fragnesia Linux Kernel Flaw Gives Local Users Root Access

German Warnings Mount Over Anthropic’s Claude Mythos as U.S. Weighs Pre‑Release Reviews

Fake Claude AI Site Pushes New 'Beagle' Windows Backdoor

DAEMON Tools Confirms Supply-Chain Breach, Releases Clean Lite 12.6

Researchers Uncover ZionSiphon Malware Aimed at Israeli Water Systems

Adobe Reader Zero-Day Exploited for Months Through Malicious PDFs

Mac ClickFix Campaign Shifts to Script Editor via Applescript Links

Never miss stories about

Threat Analysis