Collaborate Disseminate
Operation Masquerade: The FBI and DoJ disrupted a Russian GRU campaign that hijacked routers via DNS attacks to spy on users and steal credentials. Continue reading Operation Masquerade: FBI Disrupts Russian Router Hacking Campaign
Microsoft researchers have uncovered a fast-moving group, Storm-1175, launching high-speed Medusa ransomware attacks against healthcare and education sectors in the UK, US, and Australia by exploiting security flaws in as little as 24 hours. Continue reading Storm-1175 Deploys Medusa Ransomware Within 24 Hours of Flaw Disclosure
Microsoft Threat Intelligence reveals how Russian hacking group Forest Blizzard uses home routers for DNS hijacking and spying. Continue reading Russian Forest Blizzard Hackers Hijack Home Routers for Global Spying
Netskope Threat Labs report a new ClickFix attack using fake CAPTCHAs to deploy Tor-backed NodeJS malware and drain crypto wallets on Windows. Continue reading New ClickFix Attack Uses Node.js Malware via Tor to Steal Crypto
REF1695 hackers spread Monero mining malware via fake non-profit installers, using stealth tactics to evade detection and hijack systems for profit. Continue reading Hackers Pose as Non-Profit Developers to Deploy Monero Mining Malware
GrafanaGhost is a critical vulnerability in Grafana’s AI components that uses indirect prompt injection and protocol-relative URL bypasses to exfiltrate data. Continue reading GrafanaGhost Vulnerability Allows Data Theft via AI Injection
New research from Keeper Security, reveals non-human identities and automated system-to-system interactions are becoming the top security risk for businesses in 2026. Continue reading AI Agents and Non-Human Identities Creating Critical Security Gaps, Report
New Phishing scam uses fake missile alerts and the ongoing conflict involving Iran to target users with QR codes and fake government emails to steal Microsoft passwords. Continue reading Missile Alert Phishing Exploits Iran-US-Israel Conflict for Microsoft Logins
Cloudflare launches EmDash CMS, an AI-powered platform built to fix WordPress security flaws with sandboxed plugins, serverless scaling, and passkey auth. Continue reading Cloudflare Targets WordPress With New AI-Powered EmDash CMS
North Korean hackers (UNC4736) posed as a trading firm for six months to infiltrate Drift Protocol, using social engineering tactics to steal $285M without suspicion. Continue reading North Korean Hackers Pose as Trading Firm to Steal $285M from Drift