Collaborate Disseminate
Attack Surface Management (ASM) tools promise reduced risk. What they usually deliver is more information.
Security teams deploy ASM, asset inventories grow, alerts start flowing, and dashboards fill up. There is visible activity and measurable o… Continue reading The ROI Problem in Attack Surface Management
Cybersecurity researchers have disclosed details of a phishing campaign that involves the attackers impersonating legitimate Google-generated messages by abusing Google Cloud’s Application Integration service to distribute emails.
The activity, Check P… Continue reading Cybercriminals Abuse Google Cloud Email Feature in Multi-Stage Phishing Campaign
The first ThreatsDay Bulletin of 2026 lands on a day that already feels symbolic — new year, new breaches, new tricks. If the past twelve months taught defenders anything, it’s that threat actors don’t pause for holidays or resolutions. They just evolv… Continue reading ThreatsDay Bulletin: GhostAd Drain, macOS Attacks, Proxy Botnets, Cloud Exploits, and 12+ Stories
Cybersecurity researchers have disclosed details of a persistent nine-month-long campaign that has targeted Internet of Things (IoT) devices and web applications to enroll them into a botnet known as RondoDox.
As of December 2025, the activity has been… Continue reading RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers
As web browsers evolve into all-purpose platforms, performance and productivity often suffer.
Feature overload, excessive background processes, and fragmented workflows can slow down browsing sessions and introduce unnecessary friction, especiall… Continue reading How To Browse Faster and Get More Done Using Adapt Browser
Trust Wallet on Tuesday revealed that the second iteration of the Shai-Hulud (aka Sha1-Hulud) supply chain outbreak in November 2025 was likely responsible for the hack of its Google Chrome extension, ultimately resulting in the theft of approximately … Continue reading Trust Wallet Chrome Extension Hack Drains $8.5M via Shai-Hulud Supply Chain Attack
The threat actor behind two malicious browser extension campaigns, ShadyPanda and GhostPoster, has been attributed to a third attack campaign codenamed DarkSpectre that has impacted 2.2 million users of Google Chrome, Microsoft Edge, and Mozilla Firefo… Continue reading DarkSpectre Browser Extension Campaigns Exposed After Impacting 8.8 Million Users Worldwide
IBM has disclosed details of a critical security flaw in API Connect that could allow attackers to gain remote access to the application.
The vulnerability, tracked as CVE-2025-13915, is rated 9.8 out of a maximum of 10.0 on the CVSS scoring system. It… Continue reading IBM Warns of Critical API Connect Bug Allowing Remote Authentication Bypass
Cybersecurity researchers have disclosed details of what appears to be a new strain of Shai Hulud on the npm registry with slight modifications from the previous wave observed last month.
The npm package that embeds the novel Shai Hulud strain is “@vie… Continue reading Researchers Spot Modified Shai-Hulud Worm Testing Payload on npm Registry
The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) on Tuesday removed three individuals linked to the Intellexa Consortium, the holding company behind a commercial spyware known as Predator, from the specially designated nati… Continue reading U.S. Treasury Lifts Sanctions on Three Individuals Linked to Intellexa and Predator Spyware