All Articles
Security Intelligence
3736 articles · Updated every 8 hours
Advertisement
Korean Tax Agency Leak Leads to $4.8M Cryptocurrency Theft
South Korea's National Tax Service accidentally leaked a wallet's mnemonic seed phrase in a press release, allowing hackers to drain $4.8 million.
Analysis of the Kimwolf Botnet and Threat Actor 'Dort'
An analysis of the Kimwolf botnet operator 'Dort', including retaliatory TTPs like DDoS, swatting, and the exploitation of undisclosed vulnerabilities.
Canadian Tire Data Breach Impacts 38 Million Accounts
Canadian Tire confirms a massive data breach affecting 38 million customer accounts, exposing PII and encrypted passwords. Analysis of security risks.
Google Cloud API Keys Exposed via Public Gemini Access
Research reveals nearly 3,000 public GCP API keys exposed in client-side code grant unauthorized access to sensitive Gemini and Vertex AI endpoints.
Pentagon Designates Anthropic as AI Supply Chain Risk
The Pentagon designated Anthropic a supply chain risk following disputes over Claude AI usage policies regarding autonomous weapons and mass surveillance.
Enhancing Wireless & Drone Defense for Major Urban Events
As cities host major events, security posture must extend beyond traditional physical and cyber defenses to address complex wireless and drone threats.
Advertisement
Ransomware Realities: Singing River Health and Healthcare Resilience
Analysis of the ransomware attack on Singing River Health System, focusing on the Rhysida threat group and the technical impact of EHR downtime on patient care.
Federal Directive Mandates Phase-Out of Anthropic AI from U.S. Agencies
All U.S. federal agencies must discontinue Anthropic technology, impacting AI supply chains while OpenAI, Google, and xAI maintain their government contracts.
The Impact of Opaque Breach Transparency on Cybersecurity Defense
An analysis of how minimal data breach disclosure hinders threat intelligence sharing and why technical transparency is vital for collective defense.
APT37 Deploys SHROUDEDVUE Malware to Target Air-Gapped Networks
North Korean threat actor APT37 utilizes new malware families like SHROUDEDVUE and WASHSYNC to infiltrate air-gapped systems via removable USB drives.
Windows 11 Hardens Batch File Execution to Counter Script Attacks
Microsoft tests security enhancements for batch and CMD files in Windows 11 Insider Build 27723 to mitigate Living-off-the-Land (LotL) script abuse.
900+ Sangoma FreePBX Servers Compromised via Web Shell Exploitation
Over 900 Sangoma FreePBX instances are currently infected with web shells following a command injection campaign first observed in late 2025.
DOJ Seizes $61M in Tether Linked to Global Pig Butchering Scams
The U.S. Department of Justice seized $61 million in Tether (USDT) tied to pig butchering investment fraud, marking a major blow to criminal laundering networks.
Phishing Campaign Leverages Donut Loader via Spoofed FedEx Alerts
Analysis of a phishing campaign using fake FedEx delivery notifications to deliver the Donut loader framework for in-memory shellcode execution.
Claude Code Security Analysis: Assessing AI CLI Assistant Risks
Technical analysis of Anthropic's Claude Code CLI tool, evaluating its impact on application security and potential for introducing code vulnerabilities.
38 Million Records Compromised in Alleged ManoMano Data Breach
An alleged data breach impacting ManoMano has exposed the personal information of 38 million users, including names, emails, and phone numbers.
MITRE ATT&CK Governance and Predator Spyware iOS Evasion Tactics
Analysis of the new MITRE ATT&CK Advisory Council, Predator spyware bypassing iOS indicators, and Russian cyber-kinetic operation coordination.
Addressing Enterprise Risk in Third-Party Software Patching
Analyze the security risks of third-party software drift and learn why automated patch management is essential for reducing the modern attack surface.
CISA Warns of RESURGE Malware Persistence on Ivanti Devices
CISA details RESURGE, a sophisticated implant exploiting CVE-2025-0282 in Ivanti Connect Secure, capable of remaining dormant to bypass detection and recovery.
ScarCruft Ruby Jumper Campaign Targets Air-Gapped Networks
North Korean threat actor ScarCruft (APT37) deploys Ruby Jumper campaign using Zoho WorkDrive for C2 and USB malware to target air-gapped environments.
Fake Recruiters Deploy Malware via Malicious Coding Challenges
North Korean threat actors are targeting software developers with fake job offers and malicious coding tests to deploy malware on developer workstations.
Analysis of Iran's 2026 Total Internet Shutdown and NIN Architecture
Technical review of Iran's National Information Network and the shift toward total communications blackouts as a tool for state-level control.
Juniper PTX Routers Face Critical RCE via Junos OS Evolved Flaw
Juniper Networks patches a critical 9.8 CVSS RCE vulnerability (CVE-2024-21602) in PTX Series routers. Learn the technical details and mitigation steps.
Aeternum Loader Employs Polygon Blockchain for Resilient C2
Analysis of the Aeternum botnet loader, which utilizes Polygon smart contracts to host decentralized command-and-control infrastructure for resilience.