Collaborate Disseminate
The U.S. Department of Justice (DoJ) said a Russian national has been sentenced to two years in prison for managing a botnet that was used to launch ransomware attacks against U.S. companies.
Ilya Angelov, 40, of Tolyatti, Russia, was also fined $100,0… Continue reading Russian Hacker Sentenced to 2 Years for TA551 Botnet-Driven Ransomware Attacks
Cybersecurity researchers are calling attention to an active device code phishing campaign that’s targeting Microsoft 365 identities across more than 340 organizations in the U.S., Canada, Australia, New Zealand, and Germany.
The activity, per Huntress… Continue reading Device Code Phishing Hits 340+ Microsoft 365 Orgs Across Five Countries via OAuth Abuse
The U.S. Federal Communications Commission (FCC) said on Monday that it was banning the import of new, foreign-made consumer routers, citing “unacceptable” risks to cyber and national security.
The action was designed to safeguard Americans and the und… Continue reading FCC Bans New Foreign-Made Routers Over Supply Chain and Cyber Risk Concerns
TeamPCP, the threat actor behind the recent compromises of Trivy and KICS, has now compromised a popular Python package named litellm, pushing two malicious versions containing a credential harvester, a Kubernetes lateral movement toolkit, and a persis… Continue reading TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 Likely via Trivy CI/CD Compromise
A large-scale malvertising campaign active since January 2026 has been observed targeting U.S.-based individuals searching for tax-related documents to serve rogue installers for ConnectWise ScreenConnect that drop a tool named HwAudKiller to blind sec… Continue reading Tax Search Ads Deliver ScreenConnect Malware Using Huawei Driver to Disable EDR
An ongoing phishing campaign is targeting French-speaking corporate environments with fake resumes that lead to the deployment of cryptocurrency miners and information stealers.
“The campaign uses highly obfuscated VBScript files disguised as resume/CV… Continue reading Hackers Use Fake Resumes to Steal Enterprise Credentials and Deploy Crypto Miner
Cybersecurity researchers have uncovered a new set of malicious npm packages that are designed to steal cryptocurrency wallets and sensitive data.
The activity is being tracked by ReversingLabs as the Ghost campaign. The list of identified packages, al… Continue reading Ghost Campaign Uses 7 npm Packages to Steal Crypto Wallets and Credentials
On February 25, 2026, Gartner published its inaugural Market Guide for Guardian Agents, marking an important milestone for this emerging category. For those unfamiliar with the various Gartner report types, “a Market Guide defines a market and explains… Continue reading 5 Learnings from the First-Ever Gartner Market Guide for Guardian Agents
Two more GitHub Actions workflows have become the latest to be compromised by credential-stealing malware by a threat actor known as TeamPCP, the cloud-native cybercriminal operation also behind the Trivy supply chain attack.
The workflows, both mainta… Continue reading TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials
Cybersecurity has changed fast. Roles are more specialized, and tooling is more advanced. On paper, this should make organizations more secure. But in practice, many teams struggle with the same basic problems they faced years ago: unclear risk pr… Continue reading The Hidden Cost of Cybersecurity Specialization: Losing Foundational Skills