Technology ❯ Information Security

Threat Intelligence

Cyber Threats Incident Response Attack Vectors Malware Analysis Hacking Techniques Microsoft Malware Active Exploitation Indicators of Compromise Social Engineering Mandiant Exploitation Techniques Cyber Attacks Mercenary Spyware Security Tools Malware Development Security Research Hacking Groups Malware Campaigns Attack Campaigns Email Security Real-time Monitoring Zero-Day Exploits Vulnerability Management Hacker Groups Ransomware Telecom Security Vulnerability Tracking Zero-Day Vulnerabilities Incident Analysis

Shai-Hulud npm Worm Exposes 25,000+ GitHub Repos Through Trojanized Packages

The new variant executes during npm's preinstall stage to harvest developer and CI/CD credentials.

CISA Adds Oracle Identity Manager RCE to KEV, Citing Active Exploitation and Setting Dec. 12 Deadline

WrtHug Campaign Hijacks About 50,000 ASUS Routers Worldwide

Oracle Rushes Fix as Cl0p’s Exploitation of E‑Business Suite Zero‑Day Dates to August

Microsoft Links Medusa Affiliate to Exploits of Critical GoAnywhere Flaw

Kaspersky Deploys ML Model in SIEM to Detect DLL Hijacking on Windows

Oracle Confirms Extortion Emails Hitting E‑Business Suite Customers as Investigators Probe Known Flaws

Cyber Information-Sharing Law Expires as Federal Backing for MS‑ISAC Ends

Researchers Say GoAnywhere CVSS 10 Flaw Was Exploited as Zero-Day Before Disclosure

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens

LevelBlue Publishes IOCs on Fileless AsyncRAT Attack Exploiting ScreenConnect

Critical SAP S/4HANA CVE-2025-42957 Now Exploited in the Wild

HexStrike‑AI Attracts Criminal Use as Citrix NetScaler Zero‑Days Face Rapid Exploitation

Google Project Zero Launches Weekly Early Vulnerability Alerts

Arrests Disrupt Scattered Spider But Copycats Exploit VMware Hypervisors

CISA Commits to Publish Withheld 2022 Telecom Security Report

Play Ransomware Gang Hits 900 Organizations with Evasive New Tactics