Play

PhishTank (500 entries)

The GlorySprout or a Failed Clone of Taurus Stealer

Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?

Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules

SubQuery Ecosystem Compromise: Hidden Credential Theft and Backdoors

Sckit Supply Chain Worm Hits MemTensor npm & PyPi scopes

Runtime Security for AWS CodeBuild-Hosted GitHub Actions Runners

@7nohe/openapi-react-query-codegen Compromised Through an Exposed npm Publishing Workflow

Tensorlake npm Package Compromised: A Worm With a Hostage Token That Wipes Your Machine If You Revoke It

Return of Shai-Hulud: The “Second Coming” of the NPM Supply Chain Compromise

2025 In Review

16 Malicious Firefox Extensions Steal Cryptocurrency Wallet Credentials

Malicious npm campaign targets developers integrating Twilio

SpectrePaste

Botnet Rising Star: The Evolution and In-Depth Technical Analysis of Dysphoria

Scattered Spider: Social Engineering Meets Cloud Ransomware Tactics

Necro Trojan’s Return: Infiltrating Google Play to Target Android Users

Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs

PhishTank (500 entries)

Qbot: A Deep Dive into the Banking Trojan

PhishTank (500 entries)

China and the Cyber Arms Race for AI Supremacy

FamousSparrow Takes Flight with New SparroWocky Backdoor

Gamers Get Played: Fake GTA6 Leaks Deliver a Grab Bag of Malware

BlueMoon Exploit Kit Rapidly Targets Key Verticals Across Multiple Espionage Campaigns

BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace

Lunex Uses BYOVD to Disable Security Monitoring and Deploy Persistent Stealer

Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations

CLOSEDQUORUM: Malware Puts AI in the C2 Loop

The Job Offer Has Claws: Mirage Kitten Deploys NodeRabbit and PollCat