RedSun: Windows 0day when Defender becomes the attacker 2026-04-17 True True Kitten Had the Map all Along : RAISING GCC TENSIONS & THE PRE-POSITIONING MAP 2026-04-09 True True Hardcoded Google API Keys in Top Android Apps Now Expose Gemini AI 2026-04-07 True True Large Scale Traffic Brokerage Campaign using Fake Lures targeting Global Brands Across Multiple Regions 2026-04-07 True True The Scanner Was the Weapon: 36 Months of Precision Supply Chain Attacks Against DevSecOps Infrastructure 2026-04-01 True True Honey for Hackers: A Study of Attacks Targeting the Recent CVE-2026-21962 and Other Critical WebLogic Vulnerabilities on a High Interactive Oracle Honeypot 2026-03-25 True True p6.arpa Wildcard Abuse: Hunting Phishing Infrastructure Across IPv6 Prefixes 2026-03-25 True True ip6.arpa Wildcard Abuse: Hunting Phishing Infrastructure Across IPv6 Prefixes 2026-03-25 True True Opportunistic threat actors using Ramadan coupon as a lure to target retail store customers in Middle East 2026-03-18 True True MacSync Stealer: SEO Poisoning and ClickFix-Based macOS Malware Delivery Chain 2026-03-18 True True Weaponizing LSPosed: Remote SMS Injection and Identity Spoofing in Modern Payment Ecosystems 2026-03-17 True True Southeast Asia Region-specific Iran-israel war Threat Intelligence 2026-03-16 True True Weaponizing LSPosed: Remote SMS Injection and Identity Spoofing in Modern Payment Ecosystems 2026-03-11 True True AI, the Iran-US Conflict, and the Threat to US Critical Infrastructure 2026-03-06 True True A Threat Actor Landscape Assessment of ICS/OT Targeting in the 2026 Iran-US Conflict AND THE SCALE OF THE RISK 2026-03-05 True True RedAlert Trojan Campaign: Fake Emergency Alert App Spread via SMS Spoofing Israeli Home Front Command 2026-03-03 True True Situation Report: Middle East Escalation (February 27–1st March, 2026) 2026-03-02 True True Inside Gunra RaaS: From Affiliate Recruitment on the Dark Web to Full Technical Dissection of their Locker 2026-02-11 True True The Hidden Backdoor to 200 Airports: A Supply Chain Failure in Aviation 2026-02-04 True True Cross-Border Cryptocurrency Investment Scam Leveraging Social Messaging Channels and Fake Regulatory Credentials 2026-02-02 True True Pivoting From PayTool: Tracking Various Frauds and E-Crime Targeting Canada 2026-01-27 True True Inside MacSync's Script-Driven Stealer and Hardware Wallet App Trojanization 2026-01-21 True True HUMINT Operations Uncover Cryptojacking Campaign: Discord-Based Distribution of Clipboard Hijacking Malware Targeting Cryptocurrency Communities 2026-01-15 True True Reborn in Rust: MuddyWater Evolves Tooling with RustyWater Implant 2026-01-08 True True RondoDoX Botnet Weaponizes React2Shell 2025-12-29 True True Silver Fox Targeting India Using Tax Themed Phishing Lures 2025-12-24 True True CloudSEK Detects Over 2,000 Holiday-Themed Fake Stores Exploiting Black Friday and Festive Sales 2025-11-27 True True The COM: Anatomy of an English-Speaking Cybercriminal Ecosystem And The Origins of Scattered Lapsus$ Hunters 2025-11-11 True True An Insider Look At The IRGC-linked APT35 Operations: Ep3 - Malware Arsenal & Tooling 2025-10-14 True True An Insider Look At The IRGC-linked APT35 Operations: Ep1 & Ep2 2025-10-07 True True Threat Actors Impersonate Microsoft Teams To Deliver Odyssey macOS Stealer Via Clickfix 2025-09-05 True True Phishing the Supply Chain: Is Your Vendor Email Security an Invitation for Threat Actors? 2025-09-04 True True Racing Into Danger: Advanced Cyber Threats Targeting Formula 1 Fans and Teams Ahead of the Dutch Grand Prix 2025-08-31 True True The Price of Trust: Analyzing the Malware Campaign Exploiting TASPEN's Legacy to Target Indonesian Senior Citizens 2025-08-27 True True Trusted My Summarizer, Now My Fridge Is Encrypted — How Threat Actors Could Weaponize AI Summarizers with CSS-Based ClickFix Attacks 2025-08-25 True True Investigation Report: APT36 Malware Campaign Using Desktop Entry Files and Google Drive Payload Deliver 2025-08-21 True True The Ghost in the Machine: The Complete Dossier on TA-NATALSTATUS and the Cryptojacking Turf War 2025-08-21 True True Cybersecurity in Focus: Recent Threats Targeting India Amid Independence Day Celebrations 2025-08-14 True True From One File to Full Exposure: Vendor’s .git File Leaks Source Code, Secrets, and Over 1 Million PII Records of Automotive Giants 2025-08-14 True True Deepfakes and Unkept Promises lead to Financial Fraud on Social Media, targeting the General Public 2025-07-29 True True Cybersecurity Scams Targeting Fans and Teams at the 2025 Belgian Grand Prix 2025-07-28 True True Threat Actors Lure Victims Into Downloading .HTA Files Using ClickFix To Spread Epsilon Red Ransomware 2025-07-25 True True Beyond the Breach: Cutting Through Noise to Focus on Real Threats 2025-07-09 True True Cisco Unified Communications Manager CVSS 10 Vulnerability: 1K+ Assets Exposed to the Internet 2025-07-04 True True Androxgh0st Continues Exploitation: Operators Compromise a US University For Hosting C2 Logger 2025-06-22 True True Part 2: The Iran-Israel Cyber Standoff - The State's Silent War 2025-06-19 True True Part 1: The Iran-Israel Cyber Standoff - The Hacktivist Front 2025-06-19 True True Fileless AsyncRAT Distributed Via Clickfix Technique Targeting German Speaking Users 2025-06-16 True True AMOS Variant Distributed Via Clickfix In Spectrum-Themed Dynamic Delivery Campaign By Russian Speaking Hackers 2025-06-04 True True The Transparent Tribe Vibe: APT36 Returns With CapraRAT Impersonating Viber 2025-06-03 True True