Technology ❯ Cybersecurity ❯ Threat Actors

Malware

Exploitation Techniques Remote Access Tools Social Engineering Privilege Escalation TeamPCP Proof of Concept Infostealers ClickFix Overstep Payment Skimmers

3 ARTICLES

last mo.

Attackers Implant khunt Toolkit Inside Oracle Database Via SQL Injection

Huntress says attackers abused Oracle’s CREATE JAVA SOURCE to run operating-system commands from within the DBMS, a technique that can bypass endpoint-focused defenses.

11 ARTICLES

last mo.

Russian-Linked Hackers Hijack Hotel Wi‑Fi to Steal Microsoft 365 Logins and Deliver Malware

3 ARTICLES

2mo ago

AI-Generated PowerShell Script Mapped Active Directory and Staged Data Exfiltration

5 ARTICLES

4mo ago

LiteLLM Supply-Chain Breach Put Backdoored PyPI Releases in Developers’ Workflows

3 ARTICLES

7mo ago

CISA Flags BeyondTrust RCE as Used in Ransomware Attacks

3 ARTICLES

7mo ago

Mandiant Links AI-Driven Crypto Theft to North Korea’s UNC1069 With Seven macOS Malware Families

4 ARTICLES

8mo ago

North Korea–Linked Group Uses Deepfake Calls to Infect Crypto Workers’ Macs

4 ARTICLES

9mo ago

Trust Wallet Ties $8.5 Million Chrome Extension Theft to Shai-Hulud Supply-Chain Breach

5 ARTICLES

9mo ago

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

5 ARTICLES

9mo ago

Unpatched Gogs Zero-Day Is Under Active Exploitation, 700+ Servers Compromised

5 ARTICLES

10mo ago

Mandiant Says Hackers Exploit Triofox Flaw to Create Admin Accounts and Execute Code

3 ARTICLES

last yr.

AI Pentest Tool 'Villager' Nears 11,000 PyPI Downloads as Researchers Flag Abuse Risk

5 ARTICLES

last yr.

HexStrike‑AI Attracts Criminal Use as Citrix NetScaler Zero‑Days Face Rapid Exploitation

6 ARTICLES

last yr.

SonicWall Blames Patched CVE-2024-40766 for Akira Ransomware Attacks

4 ARTICLES

last yr.

Active Zero-Day Exploit of WordPress Alone Theme Sees Over 120,000 Blocked Attempts

Malware

Attackers Implant khunt Toolkit Inside Oracle Database Via SQL Injection

Russian-Linked Hackers Hijack Hotel Wi‑Fi to Steal Microsoft 365 Logins and Deliver Malware

AI-Generated PowerShell Script Mapped Active Directory and Staged Data Exfiltration

Attackers Poison More Than 700 Ghost CMS Sites to Push ClickFix Malware

cPanel Flaw Under Active Attack by Long-Running Group Deploying 'Filemanager'

Microsoft Defender Zero-Days Are Being Exploited as Two Remain Unpatched

LiteLLM Supply-Chain Breach Put Backdoored PyPI Releases in Developers’ Workflows

CISA Flags BeyondTrust RCE as Used in Ransomware Attacks

Mandiant Links AI-Driven Crypto Theft to North Korea’s UNC1069 With Seven macOS Malware Families

North Korea–Linked Group Uses Deepfake Calls to Infect Crypto Workers’ Macs

Never miss stories about

Malware

Trust Wallet Ties $8.5 Million Chrome Extension Theft to Shai-Hulud Supply-Chain Breach

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

Unpatched Gogs Zero-Day Is Under Active Exploitation, 700+ Servers Compromised

Mandiant Says Hackers Exploit Triofox Flaw to Create Admin Accounts and Execute Code

AI Pentest Tool 'Villager' Nears 11,000 PyPI Downloads as Researchers Flag Abuse Risk

HexStrike‑AI Attracts Criminal Use as Citrix NetScaler Zero‑Days Face Rapid Exploitation

SonicWall Blames Patched CVE-2024-40766 for Akira Ransomware Attacks

Active Zero-Day Exploit of WordPress Alone Theme Sees Over 120,000 Blocked Attempts

Never miss stories about

Malware