Threat Intelligence

Malware Analysis Malware Incident Response Vulnerabilities Attack Vectors Exploitation Indicators of Compromise Vulnerability Management Advanced Persistent Threats Hacking Groups

4 ARTICLES

3d ago

Attackers Hijack Hotel and Conference Wi‑Fi to Steal Microsoft 365 Access

By changing DNS on captive‑portal gateway appliances attackers can silently route traveling employees to fake Microsoft sign‑in flows that may capture passwords or yield valid MFA session tokens unless networks enforce strict protections.

3 ARTICLES

3d ago

Dysphoria Botnet Uses Blockchain Name Services and Victim Relays to Hide Controllers

5 ARTICLES

last wk.

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

17 ARTICLES

2w ago

U.S. and Allies Say Russian FSB Unit Is Exploiting Weak Routers to Target Critical Infrastructure

4 ARTICLES

2w ago

Multi‑Stage Malware Found in Four AsyncAPI npm Packages

3 ARTICLES

2w ago

Cribl Acquires CardinalOps to Build SIEM-Like Detection Layer

4 ARTICLES

2w ago

Attackers Spoof OAuth Client IDs to Evade Microsoft Entra Sign-In Logs

3 ARTICLES

2w ago

AI-Generated PowerShell Script Mapped Active Directory and Staged Data Exfiltration

7 ARTICLES

2w ago

GigaWiper Backdoor Merges Spy Capabilities With Multiple Irreversible Wipers

3 ARTICLES

3w ago

Ubiquiti Issues Patches for Seven Critical UniFi Flaws

5 ARTICLES

3w ago

China-Linked UAT-7810 Builds Out Router Relay Network With New LONGLEASH Backdoor

Threat Intelligence

Attackers Hijack Hotel and Conference Wi‑Fi to Steal Microsoft 365 Access

Dysphoria Botnet Uses Blockchain Name Services and Victim Relays to Hide Controllers

Chaos Ransomware's msaRAT Tunnels C2 Through Headless Chrome and Edge

Public PoC Drives Active Exploitation of Critical SharePoint RCE

Hackers Exploiting WP2Shell Chain to Take Over Unpatched WordPress Sites

Qilin Ransomware Exploits Palo Alto GlobalProtect Authentication Bypass

HOLLOWGRAPH Malware Uses Microsoft 365 Calendars as a Covert C2 Channel

Attackers Exploit Critical ServiceNow RCE Flaw

North Korea‑Linked Contractor Worked Inside MetaMask for a Month

GoSerpent Malware Used to Spy on Southeast Asian Governments and Diplomats

Never miss stories about

Threat Intelligence

CISA Orders Federal Patch for Actively Exploited Fortinet FortiSandbox Flaws

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

U.S. and Allies Say Russian FSB Unit Is Exploiting Weak Routers to Target Critical Infrastructure

Multi‑Stage Malware Found in Four AsyncAPI npm Packages

Cribl Acquires CardinalOps to Build SIEM-Like Detection Layer

Attackers Spoof OAuth Client IDs to Evade Microsoft Entra Sign-In Logs

AI-Generated PowerShell Script Mapped Active Directory and Staged Data Exfiltration

GigaWiper Backdoor Merges Spy Capabilities With Multiple Irreversible Wipers

Ubiquiti Issues Patches for Seven Critical UniFi Flaws

China-Linked UAT-7810 Builds Out Router Relay Network With New LONGLEASH Backdoor

Never miss stories about

Threat Intelligence