Infostealer logs from 2024 allegedly expose Funnull backend access and a separate Gate.us compliance infiltration. Polyfill.io, Funnull, Lumma Stealer, supply chain compromise, DPRK IT workers, cloud account takeover Affected vendor…
A credential theft operation uses lookalike VPN download sites and GitHub-hosted ZIPs to drop signed malware that harvests VPN logins and configuration data. Credential theft | SEO poisoning | Initial…
Disruptive Iran-nexus hacktivist operation claims large-scale data destruction as Stryker restores services and CISA investigates. Handala | Wiper activity | Microsoft Entra | Device management | Healthcare supply chain |…
A ClearSky report details a new loader and backdoor pair, and Scythe shows how to operationalise it as continuous adversary emulation. APT28, Ukraine, phishing, steganography, .NET malware, adversary emulation, Windows…
Cisco Talos links the activity cluster to China-nexus tooling, including CrowDoor variants and ORB-style proxy infrastructure Telecommunications, China-nexus, cyberespionage, backdoors, ORBs, Linux implants, DLL side-loading Metadata Executive Summary Cisco Talos…
Reverse engineering shows pragmatic obfuscation, hardcoded crypto, and cloud-native infrastructure supporting scalable intrusion delivery. APT24 · BADAUDIO · supply-chain compromise · watering holes · Cloudflare Workers · Taiwan Metadata Executive…
Iran • hacktivists • IRGC • MOIS • DDoS • wipers • ransomware • critical infrastructure Affected vendor / product: Cross-sector (internet-facing services, identity systems, OT/ICS edge devices)Primary issue: Heightened…
Cross-origin browser-to-localhost access, missing loopback throttling, and implicit device trust combine into a silent takeover path from a single web visit. OpenClaw | Localhost | WebSockets | AI agents |…
Affected ecosystem: npm registry and developer tooling supply chainPrimary issue: OPSEC leakage from disposable email inbox exposure combined with npm publish notification metadataExploitation status: Observed in the wild (malicious npm…
Akamai SIRT identifies Mirai variant campaign actively targeting critical RCE flaws in automation platforms and routers Mirai #Zerobot #Botnet #n8n #Tenda #CVE-2025-68613 #CVE-2025-7544 Affected productsn8n workflow automation platform (versions 0.211.0…