Collaborate Disseminate
The kernel exploit for two security vulnerabilities used in the recently uncovered Apple iOS exploit kit known as Coruna is an updated version of the same exploit that was used in the Operation Triangulation campaign back in 2023, according to new find… Continue reading Coruna iOS Kit Reuses 2023 Triangulation Exploit Code in New Mass Attacks
Cybersecurity researchers have discovered a new payment skimmer that uses WebRTC data channels as a means to receive payloads and exfiltrate data, effectively bypassing security controls.
“Instead of the usual HTTP requests or image beacons, this malwa… Continue reading WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites
The alleged administrator of the LeakBase cybercrime forum has been arrested by Russian law enforcement authorities, state media reported Thursday.
According to TASS and MVD Media, a news website linked to the Russian Interior Ministry, the suspect is … Continue reading LeakBase Admin Arrested in Russia Over Massive Stolen Credential Marketplace
Cybersecurity researchers have flagged a new evolution of the GlassWorm campaign that delivers a multi-stage framework capable of comprehensive data theft and installing a remote access trojan (RAT), which deploys an information-stealing Google Chrome … Continue reading GlassWorm Malware Uses Solana Dead Drops to Deliver RAT and Steal Browser, Crypto Data
In September 2025, Anthropic disclosed that a state-sponsored threat actor used an AI coding agent to execute an autonomous cyber espionage campaign against 30 global targets. The AI handled 80-90% of tactical operations on its own, performing reconnai… Continue reading The Kill Chain Is Obsolete When Your AI Agent Is the Threat
The U.S. Department of Justice (DoJ) said a Russian national has been sentenced to two years in prison for managing a botnet that was used to launch ransomware attacks against U.S. companies.
Ilya Angelov, 40, of Tolyatti, Russia, was also fined $100,0… Continue reading Russian Hacker Sentenced to 2 Years for TA551 Botnet-Driven Ransomware Attacks
Cybersecurity researchers are calling attention to an active device code phishing campaign that’s targeting Microsoft 365 identities across more than 340 organizations in the U.S., Canada, Australia, New Zealand, and Germany.
The activity, per Huntress… Continue reading Device Code Phishing Hits 340+ Microsoft 365 Orgs Across Five Countries via OAuth Abuse
The U.S. Federal Communications Commission (FCC) said on Monday that it was banning the import of new, foreign-made consumer routers, citing “unacceptable” risks to cyber and national security.
The action was designed to safeguard Americans and the und… Continue reading FCC Bans New Foreign-Made Routers Over Supply Chain and Cyber Risk Concerns
TeamPCP, the threat actor behind the recent compromises of Trivy and KICS, has now compromised a popular Python package named litellm, pushing two malicious versions containing a credential harvester, a Kubernetes lateral movement toolkit, and a persis… Continue reading TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 Likely via Trivy CI/CD Compromise
A large-scale malvertising campaign active since January 2026 has been observed targeting U.S.-based individuals searching for tax-related documents to serve rogue installers for ConnectWise ScreenConnect that drop a tool named HwAudKiller to blind sec… Continue reading Tax Search Ads Deliver ScreenConnect Malware Using Huawei Driver to Disable EDR