META Stealer

From Phishing to LLMjacking: Threat Actors Targeting Cloud Billing Accounts for LLM Usage

Glassworm Hacks OVH Clouds CLI tool

Swallowtail: Russian Espionage Group Targets Defense Firms in Two NATO Countries

Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack

Blog

Bibi Linux: a New Wiper Dropped by Pro Hamas Hacktivist Group

Midnight Mimosa Malware Campaign Exploits Android Firmware Supply Chain

Slaiclind: analyzing a campaign combining ClickFix and EtherHiding

Sekoia Honeypot Captures an Attack on GenAI Infrastructure

ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks

Investigating Ephemeral Supply Chain Tampering

An Analysis of Suo5-Based Tunneling and Pivoting Attack Techniques Through Case Studies

Chinese State-Linked Hackers Target US Critical Infrastructure with Automated Scanning and Cyber Espionage Tools

CVE-2026-102764: BeyondTrust Zero-Day Exploited

GhostAction Copycats PolinRider by Hiding a Stealer in a Fake Font File

Open Ports Aren’t the Problem. Unknown Exposure Is.

ARMORY CASTLE Exploits BeyondTrust

Huntress + AlgaPSA Integration: Built in Days by Nine Minds

AI-Powered Espionage Campaign Targets Government Linux Infrastructure

How RL mapped a Midnight Blizzard-linked campaign from two hashes

The Next MOVEit May Already Be in Your File Transfer Queue

Analysis of the Infrastructure of ARTEX, a Chinese AI Penetration Testing Tool #4 – The Birth of Copy Cat

BlockStrap: Magento and Adobe Commerce RCE (CVE-2026-103849)

Aoki: Infostealer Targets AI Coding Assistant Credentials

ASPM in the AI Era Part 1: Unified Visibility Across Your Stack

Passkeys Raise the Bar. Here’s Where Attackers Can Still Get In.

From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies

Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant

Hirudo: From Fake Updates to Patched Banking Apps

KGB RAT: A Fully Undetectable Windows Trojan Built to Spy, Steal, and Terrorize