Gh0st RAT

Cracking Valleyrat: from Builder Secrets to Kernel Rootkits

AI-Assisted Cyberespionage Campaign Targets Government Systems

INC and The Gentlemen Ransomware: Exposed AI Infrastructure

There's only so much code: the rise in vulnerability numbers

Blog

Midnight Mimosa Malware Campaign Exploits Android Firmware Supply Chain

Sekoia Honeypot Captures an Attack on GenAI Infrastructure

Chinese State-Linked Hackers Target US Critical Infrastructure with Automated Scanning and Cyber Espionage Tools

The Q3 Vulnerability Pulse: Discovery ≠ Exploitation

The GhostX Ecosystem: Forged in Transit, Licensed to Deceive

Passkeys Raise the Bar. Here’s Where Attackers Can Still Get In.

KGB RAT: A Fully Undetectable Windows Trojan Built to Spy, Steal, and Terrorize

ClingSTUN Turns Vulnerable Edge Devices Into Attacker Infrastructure

Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations

Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities

Darksword/coruna Open Directory Finding Report

GhostAction Phishing Campaign

China Linked Warlock Ransomware Campaign Targets Critical Infrastructure

DarkSword/Coruna Open Directory Finding Report

JSAC2026 -Day 1-

Inside The Com: Understanding the Ecosystem Behind Scattered Spider, LAPSUS$, ShinyHunters, and FALCON

The Operations of the Swarm: Inside the Complex World of Mirai-Based Botnets

TAMECAT - Analysis of an Iranian PowerShell-Based Backdoor

Blind Spots in the Build: A Supply Chain & SBOM Security Primer

Unpacking KiwiStealer: Diving into BITTER APT’s Malware for File Exfiltration

SolyxImmortal - Analysis of a Python-based Information Stealer

Return of Shai-Hulud: The “Second Coming” of the NPM Supply Chain Compromise

2025 In Review

Dissecting the Infection Chain: Technical Analysis of the Kimsuky JavaScript Dropper

Analyzing Iranian Tradecraft: Leveraging Loader Scripts and Telegram for C2