Threat Intelligence

Original threat research, campaign analysis, and indicator breakdowns — published continuously.

Critical

14 Trojanized npm Packages Deploy RedC2 4.0 Linux Backdoor

Supply Chain·9 min read·Aug 22, 2026

High

U.S. Bank Investigates Data Breach After LockBit Claims Stolen Data

Data Breach·6 min read·Aug 21, 2026

Medium

Claude Opus 5 Routes Around Obfuscated Binaries Instead of Defeating Protection

Supply Chain·10 min read·Aug 21, 2026

Critical

17 Iranians Charged in Massive Cyber Theft Campaign Targeting Universities and Organizations

APT·5 min read·Aug 21, 2026

Critical

Microsoft Entra ID CVE-2026-69836 Exploited in the Wild for Remote Code Execution

Cloud·3 min read·Aug 21, 2026

High

MLflow SSRF Vulnerability Exploited to Steal Cloud Credentials and Secrets

Cloud·7 min read·Aug 19, 2026

Critical

Microsoft Copilot Personal Flaws Enable One-Click Data Exfiltration and Memory Poisoning

Cloud·9 min read·Aug 19, 2026

High

Pokémon Center Customer Data Breach via CEVA Logistics and Historical Pokémon Negro Credential Breach

Threat Research·4 min read·Aug 18, 2026

High

12 KB Windows Backdoor Disguised as Realtek Software Hides C2 in desktop.ini

Malware·6 min read·Aug 17, 2026

Critical

ChainDrop npm Worm Poisons 444 Packages Through GitHub Actions and Trusted Publishing

Supply Chain·8 min read·Aug 17, 2026

High

MessiahGPT AI Model Fuels Automated Ransomware and Phishing Attacks

Phishing·7 min read·Aug 17, 2026

Critical

Fake Web3 Interview Uses Signed ClickOnce to Deploy NeedleStealer and hVNC RAT

Phishing·5 min read·Aug 17, 2026