NEBULA - Seven Fake AI SDK Packages on npm Install a Windows RAT That Needs No DLL 2026-10-08 82 True Caught in 4K: The Gentlemen Files 2026-10-05 88 True MALFEX - A malicious npm postinstall no advisory has caught for fourteen months 2026-09-30 85 True TOPHIT Part 2: Renting the Attack Surface 2026-09-29 72 True TOPHIT Part 1: A one-operator npm typosquat flood, co-hosted with a GPU-cryptojacking C2 2026-09-29 65 True GHAPPIER - One loader, sixty-five repositories, twenty-two accounts: an unreported loader family beside DPRK's PolinRider campaign 2026-09-20 75 True Tracking BigBear 2.0 Evilginx2 Phishing Campaign 2026-09-07 80 True Caught in 4K: The Aurora Files 2026-08-27 78 True AI-Agent-Driven Offensive Operation : Exposed Adversary Open Directory Reveals Autonomous Crypto-Theft Campaign Leading to Mass Wallet and Credential Compromise 2026-08-19 88 True 2,500+ Companies and 434,000 CI/CD Pipelines Exposed in the Largest AI Supply Chain Breach of 2026 2026-08-11 90 True TXTBOOK A Supply Chain Heist, Rehearsed in Public 2026-08-10 87 True Access For Sale: Inside a Russian-Speaking Access Broker's Dual Operation 2026-08-03 90 True Tax Season, Open Season: Phishing and Malware Campaigns Targeting Indian Taxpayers 2026-07-30 75 True France Cyber Threat Outlook: Dark Web, Ransomware, and Hacktivism Trends 2026-07-21 78 True THE 5060 SIEGE - Industrialized Attacks Against the SIP Telephony Ecosystem 2026-06-23 72 True Inside the FortiBleed Open Directory: A Technical Analysis of What the Attacker Left Behind 2026-06-19 75 True Operation Escaneo: Infrastructure Exposure, TTP Analysis, and Attribution Assessment of an Advanced Intrusion Campaign Against Mexican Federal Agencies and Financial Institutions 2026-06-17 90 True Bluekit Phishing as a Service (PhaaS) 2026-06-17 90 True Chinese Origin Threat Actors Target FIFA World Cup 2026 2026-06-11 78 True Inside a WooCommerce Payment Skimmer: How Carders Moved From Phishing Pages to Checkout Backdoors 2026-06-10 65 True How an Unauthenticated MCP Server Led to SSRF, LFI, and AWS Credential Theft 2026-06-02 88 True Hit Wicket: Inside The Expansive Web of Scams Targeting Millions of IPL Fans This Season 2026-05-20 70 True Inside a Tor Backed Supply Chain Worm 2026-05-14 90 True RedSun: Windows 0day when Defender becomes the attacker 2026-04-17 80 True Kitten Had the Map all Along : RAISING GCC TENSIONS & THE PRE-POSITIONING MAP 2026-04-09 95 True Large Scale Traffic Brokerage Campaign using Fake Lures targeting Global Brands Across Multiple Regions 2026-04-07 70 True Hardcoded Google API Keys in Top Android Apps Now Expose Gemini AI 2026-04-07 78 True The Scanner Was the Weapon: 36 Months of Precision Supply Chain Attacks Against DevSecOps Infrastructure 2026-04-01 90 True ip6.arpa Wildcard Abuse: Hunting Phishing Infrastructure Across IPv6 Prefixes 2026-03-25 70 True Honey for Hackers: A Study of Attacks Targeting the Recent CVE-2026-21962 and Other Critical WebLogic Vulnerabilities on a High Interactive Oracle Honeypot 2026-03-25 90 True p6.arpa Wildcard Abuse: Hunting Phishing Infrastructure Across IPv6 Prefixes 2026-03-25 65 True MacSync Stealer: SEO Poisoning and ClickFix-Based macOS Malware Delivery Chain 2026-03-18 76 True Opportunistic threat actors using Ramadan coupon as a lure to target retail store customers in Middle East 2026-03-18 75 True Weaponizing LSPosed: Remote SMS Injection and Identity Spoofing in Modern Payment Ecosystems 2026-03-17 78 True Southeast Asia Region-specific Iran-israel war Threat Intelligence 2026-03-16 85 True Weaponizing LSPosed: Remote SMS Injection and Identity Spoofing in Modern Payment Ecosystems 2026-03-11 88 True AI, the Iran-US Conflict, and the Threat to US Critical Infrastructure 2026-03-06 90 True A Threat Actor Landscape Assessment of ICS/OT Targeting in the 2026 Iran-US Conflict AND THE SCALE OF THE RISK 2026-03-05 92 True RedAlert Trojan Campaign: Fake Emergency Alert App Spread via SMS Spoofing Israeli Home Front Command 2026-03-03 85 True Situation Report: Middle East Escalation (February 27–1st March, 2026) 2026-03-02 90 True Inside Gunra RaaS: From Affiliate Recruitment on the Dark Web to Full Technical Dissection of their Locker 2026-02-11 82 True The Hidden Backdoor to 200 Airports: A Supply Chain Failure in Aviation 2026-02-04 75 True Cross-Border Cryptocurrency Investment Scam Leveraging Social Messaging Channels and Fake Regulatory Credentials 2026-02-02 75 True Pivoting From PayTool: Tracking Various Frauds and E-Crime Targeting Canada 2026-01-27 70 True Inside MacSync's Script-Driven Stealer and Hardware Wallet App Trojanization 2026-01-21 78 True HUMINT Operations Uncover Cryptojacking Campaign: Discord-Based Distribution of Clipboard Hijacking Malware Targeting Cryptocurrency Communities 2026-01-15 70 True Reborn in Rust: MuddyWater Evolves Tooling with RustyWater Implant 2026-01-08 88 True RondoDoX Botnet Weaponizes React2Shell 2025-12-29 78 True Silver Fox Targeting India Using Tax Themed Phishing Lures 2025-12-24 85 True CloudSEK Detects Over 2,000 Holiday-Themed Fake Stores Exploiting Black Friday and Festive Sales 2025-11-27 70 True 
