ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, DeviceThe Hacker News·Jun 18, 15:29 UTC · Jun 18, 2026Exploit / PoCCVE-2026-2012760
Cyber crooks got Robinhood to send phishing emails to its own usersHelp Net Security·Apr 27, 00:00 UTC · Apr 27, 2026Phishing & fraud30
Iran-linked group Handala hacked FBI Director Kash Patel’s personal email accountSecurity Affairs·Mar 28, 10:22 UTC · Mar 28, 2026Ransomware45
Zero-Click Agentic Browser Attack Can Delete Entire Google Drive Using Crafted EmailsThe Hacker News·Dec 7, 12:51 UTC · Dec 7, 2025Vulnerability55
Behind the Curtain: How Lumma Affiliates OperateRecorded Future·Nov 28, 00:00 UTC · Nov 28, 2025Malware55
Banking Web Injects Are Top Cyber Threat for Financial SectorRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Vulnerability42
⚡ Weekly Recap: Oracle 0-Day, BitLocker Bypass, VMScape, WhatsApp Worm & MoreThe Hacker News·Oct 6, 11:38 UTC · Oct 6, 2025RansomwareCVE-2025-61882CVE-2025-27915CVE-2025-4008+16 CVEs60
OpenAI fixes zero-click ShadowLeak vulnerability affecting ChatGPT Deep Research agentThe Record·Sep 18, 20:43 UTC · Sep 18, 2025Vulnerability in the wild60
Unpacking Passkeys Pwned: Possibly the most specious research in decadesArs Technica · Security·Aug 28, 13:00 UTC · Aug 28, 2025Vulnerability30
Chinese State-Sponsored Group TA413 Adopts New Capabilities in Pursuit of Tibetan TargetsRecorded Future·Aug 21, 00:00 UTC · Aug 21, 2025Threat actorCVE-2022-1040CVE-2022-3019060
APT42 impersonates cyber professionals to phish Israeli academics and journalistsSecurity Affairs·Jun 27, 07:11 UTC · Jun 27, 2025Threat actor45
Takeover of British Russia expert’s email accounts used novel phishing tacticThe Record·Jun 18, 18:33 UTC · Jun 18, 2025Phishing & fraud30
New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions GloballyThe Hacker News·Jun 9, 16:37 UTC · Jun 9, 2025Malware42
Phishers Exploit Google Sites and DKIM Replay to Send Signed Emails, Steal CredentialsThe Hacker News·Apr 23, 05:04 UTC · Apr 23, 2025Vulnerability42
SteelFox and Rhadamanthys Malware Use Copyright Scams, Driver Exploits to Target VictimsThe Hacker News·Nov 8, 04:07 UTC · Nov 8, 2024MalwareCVE-2020-14979CVE-2021-4128547
Evasive Panda’s CloudScout Toolset Targets TaiwanInfosecurity Magazine·Oct 28, 17:15 UTC · Oct 28, 2024Malware42
Critical Zimbra Postjournal flaw CVE-2024-45519 actively exploited in the wild. Patch it now!Security Affairs·Oct 2, 09:21 UTC · Oct 2, 2024Exploit / PoC in the wildCVE-2024-4551960
Attackers use Google Calendar RAT to abuse Calendar service as C2 infrastructureSecurity Affairs·Nov 6, 11:27 UTC · Nov 6, 2023Malware42
iLeakage attack exploits Safari to steal data from Apple devicesSecurity Affairs·Oct 26, 21:03 UTC · Oct 26, 2023Exploit / PoC45
Friday Squid Blogging: Balloon SquidSchneier on Security·Jul 15, 00:00 UTC · Jul 15, 2023Vulnerability55
Recent Satacom campaign delivers cryptocurrencyKaspersky Securelist·Jun 6, 07:09 UTC · Jun 6, 2023Threat actor45
Google Announces New Privacy, Safety, and Security Features Across Its ServicesThe Hacker News·May 15, 00:00 UTC · May 15, 2023Threat actor45
Google notifies users about dark web exposureHelp Net Security·May 11, 00:00 UTC · May 11, 2023Malware30
Intro to phishing: simulating attacks to build resiliencySecurity Affairs·Apr 21, 08:42 UTC · Apr 21, 2023Phishing & fraud42
North Korea ScarCruft APT used previously undetected Dolphin Backdoor against South KoreaSecurity Affairs·Dec 1, 11:02 UTC · Dec 1, 2022Malware55
The benefits of taking an intent-based approach to detecting Business Email CompromiseCisco Talos·Oct 18, 12:00 UTC · Oct 18, 2022Phishing & fraud30
North Korean Hackers Using Malicious Browser Extension to Spy on Email AccountsThe Hacker News·Aug 6, 02:51 UTC · Aug 6, 2022Data breach145
Google Blocks Dozens of Malicious Domains Operated by Hack-forThe Hacker News·Jul 1, 05:05 UTC · Jul 1, 2022Malware30
Google files suit against Cameroonian cybercriminal who used puppies as luresCyberScoop·Apr 11, 20:42 UTC · Apr 11, 2022Exploit / PoC in the wild60
CoSoSys Endpoint Protector 5.5.0.0 strengthens data security for enterprisesHelp Net Security·Feb 14, 00:00 UTC · Feb 14, 2022Industry30
Targeted Attacks in the Middle East Using KASPERAGENT and MICROPSIAPalo Alto Unit 42·Jan 28, 20:33 UTC · Jan 28, 2022Malware30
Crooks use math symbols to evade antiSecurity Affairs·Oct 13, 09:38 UTC · Oct 13, 2021Exploit / PoC60
Cloudflare announces free email offerings to prevent phishing and increase securityHelp Net Security·Sep 28, 00:00 UTC · Sep 28, 2021Phishing & fraud30
BIMI: A Visual Take on Email Authentication and SecurityThe Hacker News·Jul 27, 10:04 UTC · Jul 27, 2021Threat actor45
DigiCert issues Verified Mark Certificates to help organizations secure their emails from abuseHelp Net Security·Jul 14, 00:00 UTC · Jul 14, 2021Phishing & fraud55
Attackers in Executive Clothing - BEC continues to separate orgs from their moneyCisco Talos·Jun 22, 11:56 UTC · Jun 22, 2021Phishing & fraud30