Developer Workstations Are Now Part of the Software Supply ChainThe Hacker News·May 18, 11:23 UTC · May 18, 2026Threat actor160
Shai-Hulud v2 Spreads From npm to Maven, as Campaign Exposes Thousands of SecretsThe Hacker News·Nov 27, 03:43 UTC · Nov 27, 2025Threat actor160
Iranian hackers impersonate journalists in social engineering campaignCyberScoop·May 2, 03:00 UTC · May 2, 2024Threat actor60
Chinese Hackers Murky, Genesis, and Glacial Panda Escalate Cloud and Telecom EspionageThe Hacker News·Feb 24, 14:01 UTC · Feb 24, 2026Threat actorCVE-2023-3519CVE-2025-3928CVE-2016-5195+1 CVEs60
Incident response in the cloud can be simple if you are preparedHelp Net Security·Aug 17, 00:00 UTC · Aug 17, 2022Threat actor160
AI Agents Turned Into Attackers: Hugging Face Reveals Autonomous Intrusion CampaignSecurity Affairs·Jul 20, 08:21 UTC · Jul 20, 2026Threat actor60
Attackers finding new ways to exploit and bypass Office 365 defensesHelp Net Security·Oct 26, 00:00 UTC · Oct 26, 2020Threat actor160
Third-Party Identities: The Weakest Link in Your Cybersecurity Supply ChainSecurity Affairs·Oct 28, 11:37 UTC · Oct 28, 2024Threat actor60
New Reveal platform shines a light on post-login identity behaviorHelp Net Security·Aug 5, 00:00 UTC · Aug 5, 2025Threat actor60
Okta breach: Hackers stole info on ALL customer support usersHelp Net Security·Nov 29, 00:00 UTC · Nov 29, 2023Threat actor60
Alert: Threat Actors Can Leverage AWS STS to Infiltrate Cloud AccountsThe Hacker News·Dec 6, 13:38 UTC · Dec 6, 2023Threat actor60
Detections in the Sky: Sigma Rules to Enhance Cloud Security for the Big ThreeRecorded Future·Aug 21, 00:00 UTC · Aug 21, 2025Threat actor60
Russian spies impersonating Western researchers in ongoing hacking campaignThe Record·Feb 1, 17:00 UTC · Feb 1, 2024Threat actor60
Oort raises $15 million to defend enterprises against identity-based cyberattacksHelp Net Security·Oct 7, 00:00 UTC · Oct 7, 2022Threat actor60
Amazon Exposes Years-Long GRU Cyber Campaign Targeting Energy and Cloud InfrastructureThe Hacker News·Dec 17, 03:59 UTC · Dec 17, 2025Threat actorCVE-2022-26318CVE-2021-26084CVE-2023-22518+1 CVEs60
Feds quash widespread Russia-backed espionage network spanning 18,000 devicesCyberScoop·Apr 7, 23:46 UTC · Apr 7, 2026Threat actor in the wild60
APT Expands Attack on ManageEngine With Active Campaign Against ServiceDesk PlusPalo Alto Unit 42·Jun 6, 01:25 UTC · Jun 6, 2024Threat actor in the wildCVE-2021-44077CVE-2021-3361760
The rise of machine identities and agentic AI: Securing trust in the next era of digital autonomyHelp Net Security·Jun 16, 00:00 UTC · Jun 16, 2026Threat actor60
Microsoft, Dutch security agencies lift veil on Laundry Bear cyber espionage groupHelp Net Security·May 27, 00:00 UTC · May 27, 2025Threat actor160
Iran hacking group impersonates defense firms, hostage campaignersCyberScoop·Feb 28, 02:00 UTC · Feb 28, 2024Threat actor in the wild60
The Hidden Threat in Your Stack: Why Non-Human Identity Management is the Next Cybersecurity FrontierThe Hacker News·Jun 10, 11:00 UTC · Jun 10, 2025Threat actor60
Threat actors are exploiting Barracuda ESG bug since October 22Security Affairs·May 31, 13:36 UTC · May 31, 2023Threat actor in the wildCVE-2023-286860
Chinese APT Group Targets Web Hosting Services in TaiwanInfosecurity Magazine·Aug 18, 13:45 UTC · Aug 18, 2025Threat actor60
Russian SVR-Linked APT29 Targets JetBrains TeamCity Servers in Ongoing AttacksThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2023Threat actor in the wildCVE-2023-4279360
Legit Security provides insights into the enterprise's secrets postureHelp Net Security·Dec 19, 00:00 UTC · Dec 19, 2024Threat actor60
How organizations can keep themselves secure whilst cutting IT spendingHelp Net Security·Jan 30, 00:00 UTC · Jan 30, 2023Threat actor60
Gurucul releases cloud-native SOC platform to improve security analyst effectivenessHelp Net Security·Jan 8, 13:57 UTC · Jan 8, 2024Threat actor60
Commvault clients should beware of campaign targeting cloud applications, CISA saysThe Record·May 23, 19:06 UTC · May 23, 2025Threat actorCVE-2025-392860
New Russian state-sponsored APT quickly gains global reach, hitting expansive targetsCyberScoop·May 27, 19:57 UTC · May 27, 2025Threat actor60
CyberArk Secure Browser helps prevent breaches resulting from cookie theftHelp Net Security·Mar 27, 00:00 UTC · Mar 27, 2024Threat actor60
British national with possible links to high-profile phishing campaigns arrested in SpainCyberScoop·Jun 17, 19:58 UTC · Jun 17, 2024Threat actor in the wild60
Report Slams Microsoft Security Failures in Government Email BreachInfosecurity Magazine·Apr 3, 17:30 UTC · Apr 3, 2024Threat actor60
Gauss: Nation-state cyberKaspersky Securelist·Aug 9, 17:00 UTC · Aug 9, 2012Threat actorCVE-2010-256860
RSA and Swissbit join forces to secure government agenciesHelp Net Security·Oct 1, 00:00 UTC · Oct 1, 2024Threat actor60
Fortinet warns of active campaign exploiting bug in FortiManager productsCyberScoop·Oct 24, 21:22 UTC · Oct 24, 2024Threat actor in the wildCVE-2024-4757560
TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain CampaignThe Hacker News·Aug 7, 06:50 UTC · Aug 7, 2026Threat actor60
New phishing campaign targets taxpayer credentialsHelp Net Security·Sep 21, 07:55 UTC · Sep 21, 2022Threat actor60
OneLogin: Breach Exposed Ability to Decrypt DataKrebs on Security·Jun 8, 05:15 UTC · Jun 8, 2017Threat actor60