Collaborate Disseminate
Bitdefender Labs reveals how the China-linked FamousSparrow hacking group targeted an Azerbaijani energy firm using ProxyNotShell, Deed RAT,… Continue reading FamousSparrow Targeted Oil and Gas Industry via MS Exchange Server Exploit
A new Darktrace report reveals how Chinese hackers use fake Apple and Yahoo sites and the FDMTP malware framework to spy on organisations. Continue reading China-Linked Twill Typhoon Uses Fake Apple and Yahoo Sites for Espionage
Instructure has reached an agreement with the ShinyHunters group to return and destroy stolen Canvas data, protecting millions of student records from a public leak. Continue reading Instructure Reaches Deal with ShinyHunters to Prevent Canvas Data Leak
Instructure has reached an agreement with the ShinyHunters group to return and destroy stolen Canvas data, protecting millions of student records from a public leak. Continue reading Instructure Reaches Deal with ShinyHunters to Prevent Canvas Data Leak
Research reveals that TeamPCP hijacked OIDC tokens to poison hundreds of TanStack, Mistral AI, and UiPath packages with the self-propagating Mini Shai-Hulud worm. Continue reading TeamPCP Used Mini Shai-Hulud Worm to Poison Over 400 npm and PyPI Packages
Researchers at Ontinue have discovered an undocumented malware campaign targeting developers with fake Claude Code installers to steal browser passwords and cookies. Continue reading Fake Claude Code Installer Targets Developers With Browser Credential Stealer
Pwn2Own Berlin 2026 reportedly reached full capacity for the first time, prompting rejected researchers to publicly disclose zero-day exploits targeting Firefox, NVIDIA, and AI platforms. Continue reading Pwn2Own Berlin 2026 Hits Capacity as Rejected Hackers Release 0-Days
Operation HumanitarianBait uses fake aid documents, GitHub-hosted payloads, and Python spyware to target Russian-speaking victims. Continue reading Operation HumanitarianBait Uses Fake Aid Documents to Deploy Python Spyware
Google researchers say hackers used AI to develop zero-day exploits, Android backdoors, and automated supply chain attacks targeting GitHub and PyPI. Continue reading Google Says Hackers Used AI to Develop a Zero-Day Exploit
Romanian national Gavril Sandu faces up to 30 years in a US prison after extradition over a VOIP vishing and fake debit card fraud scheme. Continue reading Romanian Man Faces Up to 30 Years in US Prison Over Vishing Scams