All Articles
Security Intelligence
3410 articles · Updated every 8 hours
Advertisement
European Commission AWS Breach: Trivy Supply Chain Attack Analysis
The European Commission confirms a 300GB data breach in its AWS environment linked to a Trivy supply chain attack. Learn about the impact and mitigations.
Apple Patches DarkSword for iOS 18 — Security Analysis
Apple breaks precedent by patching the DarkSword mobile exploitation framework for iOS 18, addressing critical kernel-level risks and RCE vulnerabilities.
Hims & Hers Data Breach via Zendesk: Support Ticket Compromise
Telehealth provider Hims & Hers discloses a data breach impacting customer support tickets, stemming from a compromise of their Zendesk platform.
BrowserGate: LinkedIn's Stealthy Chrome Extension Scanning and Data Collection
Analysis of 'BrowserGate' reveals LinkedIn's hidden JavaScript scanning over 6,000 Chrome extensions and collecting user device data. Understand the privacy implications.
Cookie-Controlled PHP Web Shells Evade Detection on Linux Servers
Microsoft researchers warn of stealthy PHP web shells on Linux using HTTP cookies for command execution and cron jobs for long-term persistence.
TA416 Targets European Govts with PlugX & OAuth Phishing
China-linked TA416 has resumed targeting European government and diplomatic entities since mid-2025 using PlugX and OAuth-based phishing attacks.
Advertisement
TeamPCP Supply Chain: CERT-EU Confirms Cloud Breach, 1000+ SaaS Environments Affected
CERT-EU confirms European Commission cloud breach via TeamPCP supply chain campaign. Mandiant identifies over 1,000 compromised SaaS environments.
Emerging XR Authentication: Skull Vibrations for Identity
Emerging research suggests skull vibration harmonics from vital signs could serve as a novel authentication method for VR, AR, and MR headsets, offering unique identity…
TeamPCP Supply Chain Attacks Escalate Amidst Hacker Infighting
Runtime Rebel details how TeamPCP's supply chain attacks are leading to breaches, with ShinyHunters and Lapsus$ adding to the chaos.
Recent Cyber Threats: Data Leaks, Android Malware, Critical Infra Ransomware
Analysis of a ChatGPT data leak, the emergence of an Android rootkit, and a ransomware attack impacting a water facility. Essential insights for defenders.
TrueConf Zero-Day: Exploitation Against Asian Governments
A Chinese threat actor is actively exploiting a TrueConf video conferencing zero-day to conduct reconnaissance and achieve privilege escalation against Asian government…
Multi-Extortion Ransomware Tactics: A Deeper Dive
Analyze the evolution of multi-extortion ransomware, its reliance on data leaks, and strategies for mitigating the impact of exfiltrated data.
Third-Party Risk: The Growing Supply Chain Security Gap
Organizations face increasing breach risks through trusted vendors, SaaS tools, and subcontractors.
UNC1069 Social Engineering Leads to Axios npm Supply Chain Compromise
Runtime Rebel details how North Korean threat actor UNC1069 leveraged targeted social engineering against an Axios npm package maintainer, leading to a critical supply…
WebinarTV Secretly Records Public Zoom Meetings: Privacy Risks
WebinarTV records and publishes public Zoom meetings without consent. Understand the privacy risks and implement immediate mitigations for sensitive data exposure.
Shadow AI & Zero-Click Exploits Expand Enterprise Mobile Attack Surface
Enterprises face a growing mobile attack surface from shadow AI in apps, outdated devices, and zero-click exploits, leading to unseen risks for corporate data.
CVE-2023-24489: Citrix ShareFile StorageZones Controller Unauthenticated RCE
Critical unauthenticated RCE in Citrix ShareFile StorageZones Controller (CVE-2023-24489) enables arbitrary file upload and full system compromise. Patch immediately.
Insider Threat: Former Engineer Locks 254 Windows Servers in Extortion
A former infrastructure engineer pleaded guilty to a $750,000 extortion plot after locking administrators out of 254 Windows servers and deleting backups.
Exchange Online Mailbox Access Issues Persist for Outlook Users
Microsoft Exchange Online users on Outlook mobile and macOS are experiencing intermittent mailbox access issues for weeks; investigation ongoing.
Drift Protocol Hacked for $285M via Durable Nonce Attack
Solana-based DEX Drift Protocol lost $285 million due to a social engineering and durable nonce attack, leading to Security Council takeover.
SparkCat Mobile Malware Variant Steals Crypto Recovery Phrases
A new SparkCat malware variant targets iOS and Android users, stealing crypto wallet recovery phrase images from compromised apps on official stores.
LAC Cybercrime Trends 2025: Banking Trojans and Ransomware Shifts
Analysis of the 2025 Latin America and Caribbean cybercrime landscape, highlighting banking trojan evolution and regional ransomware operation trends.
Ivanti Connect Secure RCE: Internal Network Vulnerability Detection
Analyze the impact of Ivanti Connect Secure vulnerabilities and learn how to conduct internal network vulnerability scanning for Ivanti appliances to detect flaws.
Yokogawa CENTUM VP CVE-2025-7741 Hardcoded Password Patch Guidance
CISA identifies a hardcoded password in Yokogawa CENTUM VP (CVE-2025-7741). Learn how to secure the PROG account and apply the R7.01.10 patch now.