Threat Intelligence

Malware Analysis Malware Incident Response Vulnerabilities Attack Vectors Indicators of Compromise Exploitation Vulnerability Management Threat Actors Advanced Persistent Threats

4 ARTICLES

last wk.

Microsoft Warns ClickFix Uses BNB Chain to Deliver Malware

Attackers store immutable instructions in BNB smart contracts that resist takedowns, enabling fake CAPTCHA prompts that trick victims into pasting and running commands that install credential stealers and remote-access tools.

4 ARTICLES

2w ago

SMOKE#SCREEN Campaign Uses Legitimate ScreenConnect Installs to Give Attackers Persistent Access

3 ARTICLES

2w ago

Security Industry Shifts to Guard AI Agents at Black Hat USA 2026

4 ARTICLES

2w ago

INC Ransomware Dominates Exploitation of SonicWall SMA1000 Zero‑Days

5 ARTICLES

2w ago

Russian State‑Linked APT Uses Hotel Wi‑Fi Captive Portals to Steal Microsoft 365 Credentials

3 ARTICLES

2w ago

Microsoft Links CaptiveCrunch to Hijacked Hotel and Conference Wi‑Fi

6 ARTICLES

2w ago

Amazon Links Four npm Supply‑Chain Hacks to North Korea‑Linked Actor

4 ARTICLES

3w ago

Dysphoria Botnet Uses Blockchain Domains and Infected Devices to Hide Command Servers

3 ARTICLES

3w ago

CISA Orders Federal Patch for Actively Exploited Fortinet FortiSandbox Flaws

Threat Intelligence

Microsoft Warns ClickFix Uses BNB Chain to Deliver Malware

SMOKE#SCREEN Campaign Uses Legitimate ScreenConnect Installs to Give Attackers Persistent Access

Security Industry Shifts to Guard AI Agents at Black Hat USA 2026

INC Ransomware Dominates Exploitation of SonicWall SMA1000 Zero‑Days

Russian State‑Linked APT Uses Hotel Wi‑Fi Captive Portals to Steal Microsoft 365 Credentials

Microsoft Links CaptiveCrunch to Hijacked Hotel and Conference Wi‑Fi

Amazon Links Four npm Supply‑Chain Hacks to North Korea‑Linked Actor

Dysphoria Botnet Uses Blockchain Domains and Infected Devices to Hide Command Servers

Google Rebrands Tracked Hackers With Two-Word Cryptonyms

Arista Patches Actively Exploited CVE-2026-16812 in VeloCloud Orchestrator

Never miss stories about

Threat Intelligence

Attackers Hijack Hotel and Conference Wi‑Fi to Steal Microsoft 365 Access

Chaos Ransomware's msaRAT Tunnels C2 Through Headless Chrome and Edge

Public PoC Drives Active Exploitation of Critical SharePoint RCE

Hackers Exploiting WP2Shell Chain to Take Over Unpatched WordPress Sites

Qilin Ransomware Exploits Palo Alto GlobalProtect Authentication Bypass

HOLLOWGRAPH Malware Uses Microsoft 365 Calendars as a Covert C2 Channel

Attackers Exploit Critical ServiceNow RCE Flaw

North Korea‑Linked Contractor Worked Inside MetaMask for a Month

GoSerpent Malware Used to Spy on Southeast Asian Governments and Diplomats

CISA Orders Federal Patch for Actively Exploited Fortinet FortiSandbox Flaws

Never miss stories about

Threat Intelligence