Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments
Operation Master: Deconstructing a Multi-Tiered Intrusion and Monetization Pipeline
How tax policy can stop threat actors from breaching US water systems
in the wild 5 min
AI Agents Are Rewriting the Rules of Lateral Movement
in the wild 7 min
Attacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273)
CSuite Targets US and EU Organizations with Device-Code Phishing and Remote Access
in the wild 15 min
GPT-6 Astra Breaks an Old Enigma Message
Critical MaxKB AI Agent Flaw Lets Prompt Injection Execute System Commands
in the wild 4 min2
Jun Kim, oMLX creator and maintainer, joins Hugging Face to support the MLX community
in the wild
North Korea’s job interview scam runs both ways
BlackHatSect0r Hackers Disable AI Safety Controls to Automate Credential Theft and Cyberattacks
Discernment Deleted: Inside the Operation Server of BlackHatSect0r && DXQRTXX
1
Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours
What We Missed: Did ShinyHunters 'Breach' ReliaQuest?
'Breeze Comet' Tears Into Brazilian & Global Financial Systems
in the wild
⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off
in the wild 15 min1
RMM Tools for MSPs: Features, Risks & How to Stay Secure
in the wild1
Insights into Suspected DPRK Workers
in the wild
US Sanctions Mabna Institute Hackers for Iranian Cyber-Attacks
UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations
in the wild
Mark Zuckerberg Posts Deranged 6,500-Word Essay About Giving Everyone AI Superintelligence
2 min
Russian military hackers pose as recruiters to target Ukrainian IT workers
3 min
SMOKE#SCREEN Campaign Abuses ScreenConnect to Give Attackers Remote Control Access
6 min2
New Mexico judge orders Meta to pay $567 million in kids online safety case
2 min2