Collaborate Disseminate
A long-term and ongoing campaign attributed to a China-nexus threat actor has embedded itself in telecom networks to conduct espionage against government networks.
The strategic positioning activity, which involves implanting and maintaining stealthy a… Continue reading China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom Networks
Cybersecurity researchers have disclosed a vulnerability in Anthropic’s Claude Google Chrome Extension that could have been exploited to trigger malicious prompts simply by visiting a web page.
The flaw “allowed any website to silently inject prompts i… Continue reading Claude Extension Flaw Enabled Zero-Click XSS Prompt Injection via Any Website
Unmasking impostors is something the art world has faced for decades, and there are valuable lessons from the works of Elmyr de Hory that can apply to the world of defensive cybersecurity. During the 1960s, de Hory gained infamy as a premier forger, pa… Continue reading Masters of Imitation: How Hackers and Art Forgers Perfect the Art of Deception
Some weeks in security feel loud. This one feels sneaky. Less big dramatic fireworks, more of that slow creeping sense that too many people are getting way too comfortable abusing things they probably shouldn’t even be touching.
There’s a l… Continue reading ThreatsDay Bulletin: PQC Push, AI Vuln Hunting, Pirated Traps, Phishing Kits & 20 More Stories
Most teams have security tools in place. Alerts are firing, dashboards look clean, threat intel is flowing in. On the surface, everything feels under control.
But one question usually stays unanswered: Would your defenses actually stop a real attack?
T… Continue reading [Webinar] Stop Guessing. Learn to Validate Your Defenses Against Real Attacks
The kernel exploit for two security vulnerabilities used in the recently uncovered Apple iOS exploit kit known as Coruna is an updated version of the same exploit that was used in the Operation Triangulation campaign back in 2023, according to new find… Continue reading Coruna iOS Kit Reuses 2023 Triangulation Exploit Code in New Mass Attacks
Cybersecurity researchers have discovered a new payment skimmer that uses WebRTC data channels as a means to receive payloads and exfiltrate data, effectively bypassing security controls.
“Instead of the usual HTTP requests or image beacons, this malwa… Continue reading WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites
The alleged administrator of the LeakBase cybercrime forum has been arrested by Russian law enforcement authorities, state media reported Thursday.
According to TASS and MVD Media, a news website linked to the Russian Interior Ministry, the suspect is … Continue reading LeakBase Admin Arrested in Russia Over Massive Stolen Credential Marketplace
Cybersecurity researchers have flagged a new evolution of the GlassWorm campaign that delivers a multi-stage framework capable of comprehensive data theft and installing a remote access trojan (RAT), which deploys an information-stealing Google Chrome … Continue reading GlassWorm Malware Uses Solana Dead Drops to Deliver RAT and Steal Browser, Crypto Data
In September 2025, Anthropic disclosed that a state-sponsored threat actor used an AI coding agent to execute an autonomous cyber espionage campaign against 30 global targets. The AI handled 80-90% of tactical operations on its own, performing reconnai… Continue reading The Kill Chain Is Obsolete When Your AI Agent Is the Threat