Collaborate Disseminate
A previously undocumented threat activity cluster known as UNC6692 has been observed leveraging social engineering tactics via Microsoft Teams to deploy a custom malware suite on compromised hosts.
“As with many other intrusions in recent years, UNC669… Continue reading UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware
Bitwarden CLI has been compromised as part of the newly discovered and ongoing Checkmarx supply chain campaign, according to new findings from Socket.
“The affected package version appears to be @bitwarden/cli@2026.4.0, and the malicious code was publi… Continue reading Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
You scroll past one incident and see another that feels familiar, like it should have been fixed years ago, but it still works with small changes. Same bugs. Same mistakes.
The supply chain is messy. Packages you did not check are stealing data, adding… Continue reading ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories
Imagine a world where hackers don’t sleep, don’t take breaks, and find weak spots in your systems instantly.
Well, that world is already here.
Thanks to AI, attackers are now launching automated, large-scale exploits faster than ever before. The time y… Continue reading [Webinar] Mythos Reality Check: Beating Automated Exploitation at AI Speed
Last week, Anthropic announced Project Glasswing, an AI model so effective at discovering software vulnerabilities that they took the extraordinary step of postponing its public release. Instead, the company has given access to Apple, Microsoft, Google… Continue reading Project Glasswing Proved AI Can Find the Bugs. Who’s Going to Fix Them?
Mongolian governmental institutions have emerged as the target of a previously undocumented China-aligned advanced persistent threat (APT) group tracked as GopherWhisper.
“The group wields a wide array of tools mostly written in Go, using injectors and… Continue reading China-Linked GopherWhisper Infects 12 Mongolian Government Systems with Go Backdoors
Vercel on Wednesday revealed that it has identified an additional set of customer accounts that were compromised as part of a security incident that enabled unauthorized access to its internal systems.
The company said it made the discovery after expan… Continue reading Vercel Finds More Compromised Accounts in Context.ai-Linked Breach
Apple has rolled out a software fix for iOS and iPadOS to address a Notification Services flaw that stored notifications marked for deletion on the device.
The vulnerability, tracked as CVE-2026-28950 (CVSS score: N/A), has been described as a logging … Continue reading Apple Patches iOS Flaw That Stored Deleted Signal Notifications in FBI Forensic Case
Cybersecurity researchers have warned of malicious images pushed to the official “checkmarx/kics” Docker Hub repository.
In an alert published today, software supply chain security company Socket revealed that unknown threat actors managed to have over… Continue reading Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain
Cybersecurity researchers have flagged a fresh set of packages that have been compromised by bad actors to deliver a self-propagating worm that spreads through stolen developer npm tokens.
The supply chain worm has been detected by both Socket and Step… Continue reading Self-Propagating Supply Chain Worm Hijacks npm Packages to Steal Developer Tokens