logo

ThreatLocker Blog

ID: 8d45e58f-561b-564e-b72e-7710085c92ea

STIX ID: identity--8d45e58f-561b-564e-b72e-7710085c92ea

Feed Type: rss

Earliest post: 2025-01-03

Latest post: 2026-07-17

Actionable cybersecurity insights, zero-trust guidance, threat research, and practical defensive strategies from the ThreatLocker team — focused on endpoint protection, application control, and secure access management.

01/01/2020
07/20/2026
Title Date Published Describes IncidentAuthorVisible
LegacyHive: Video demo and analysis of Windows 0-day from NightmareEclipse 2026-07-15TrueTrue
GoodPersonRAT: Fake Chinese VPN drops extensive C2 client 2026-07-08TrueTrue
Patch management: Balancing security, stability, and speed2026-06-25TrueTrue
What the Klue breach reveals about SaaS trust 2026-06-24TrueTrue
Klue: SaaS supply chain compromise through long-lived OAuth tokens 2026-06-19TrueTrue
Cyber threats loom ahead of major sporting events2026-06-19TrueTrue
The Mastra supply chain attack wasn't about AI 2026-06-19TrueTrue
Mastra supply chain attack: The importance of scope access and account hygiene 2026-06-18TrueTrue
GreatXML: Exploiting the WinRE trust boundary behind BitLocker 2026-06-17TrueTrue
VPN security risks: The blind spots attackers exploit 2026-06-12TrueTrue
Microsoft Defender zero-day RoguePlanet grants SYSTEM privileges 2026-06-10TrueTrue
Miasma worm targets Microsoft, compromises 73 GitHub repositories 2026-06-09TrueTrue
Cyber threats loom ahead of 2026 World Cup2026-06-09TrueTrue
Cybersecurity moves from back-office concern to operational priority for sports organizations 2026-06-05TrueTrue
LLMShare campaign exploits ChatGPT to deliver malware 2026-06-03TrueTrue
Red Hat npm packages compromised with credential stealing worm 2026-06-03TrueTrue
Why cybersecurity in higher education needs Zero Trust 2026-06-02TrueTrue
How Mini Shai-Hulud worm moved through supply chain, impacting GitHub, Nx Console, & TanStack 2026-05-27TrueTrue
GitHub breach likely caused by Nx Console compromise 2026-05-21TrueTrue
Reverse Shai-Hulud: Supply chain compromise impacts @antv packages 2026-05-19TrueTrue
MiniPlasma: Windows privilege escalation zero-day affects fully patched systems2026-05-19TrueTrue
GhostLock and the limits of threat hype: A closer look 2026-05-15TrueTrue
What YellowKey and GreenPlasma zero-day exploits reveal about trusting native Windows security 2026-05-15TrueTrue
Sorry ransomware exploits cPanel authentication bypass 2026-05-14TrueTrue
TeamPCP supply chain attack hits TanStack2026-05-14TrueTrue
What JDownloader and Daemon Tools reveal about software distribution trust 2026-05-11TrueTrue
Dirty Frag: 9-year-old vulnerability enabling root access on Linux2026-05-11TrueTrue
Microsoft Edge is keeping your passwords in plaintext memory: Here’s what that actually means 2026-05-06TrueTrue
DigiCert compromise precedes widespread Microsoft Defender false positives2026-05-04TrueTrue
Linux Copy Fail zero-day enables privilege escalation 2026-05-01TrueTrue
Vect ransomware exposed: An inside look at its affiliate network 2026-04-28TrueTrue
Financial services cybersecurity: Why Zero Trust is critical 2026-04-27TrueTrue
Adobe Acrobat Reader CVE-2026-34621: Active exploitation via prototype pollution2026-04-23TrueTrue
Secure communication: Why Zero Trust comes first 2026-04-17TrueTrue
Why cybercriminals favor data exfiltration over ransomware 2026-04-16TrueTrue
Malware as a service: How cybercrime became a scalable business 2026-04-15TrueTrue
Why cybercriminals favor data exfiltration over ransomware 2026-04-14TrueTrue
The Claude Mythos Preview proves now is the time for Zero Trust 2026-04-14TrueTrue
Axios supply chain attack: How a compromised npm package delivered RAT malware2026-04-14TrueTrue
What is PowerShell? Understanding vulnerabilities and practical mitigations2026-04-13TrueTrue
Supply chain attack: Security scanner compromise leads to widespread infostealer and ransomware pivot2026-04-07TrueTrue
USB Rubber Ducky attacks explained: Keystroke injection, evasion, and defense 2026-03-31TrueTrue
Powercat malware campaign: Fake game cheats deliver infostealer targeting Discord, Roblox, and crypto wallets 2026-03-25TrueTrue
What the Stryker cyberattack teaches us2026-03-13TrueTrue
Conduent data breach among the largest in U.S. history 2026-03-12TrueTrue
Windows Notepad vulnerability: Markdown risk explained2026-02-26TrueTrue
SSL-VPN Compromise: How perimeter device breaches lead to ransomware and domain takeover2026-02-23TrueTrue
Discord Zendesk breach highlights growing risk of third-party vendor access 2026-02-19TrueTrue
ConsentFix attacks abuse GitHub OAuth tokens to bypass authentication 2026-02-16TrueTrue
0ktapus phishing campaign: How attackers abuse Okta SSO to bypass MFA 2026-02-13TrueTrue

1–50 of 127