Do Son
At a glance Malware family “privcollect” credential stealer plus a remote Python loader Threat actor Unknown; no...
Credential Theft
TL;DR Ivanti published two advisories on October 13, 2026, covering six flaws in Neurons Patch for Intune...
At a glance Actor UAT-11985 (tracked by Cisco Talos) Activity Spear-phishing, QR code phishing (quishing), and AitM...
Symantec blocked 26,433 malicious SVG files in August 2026, nearly double its six-month average. That jump marks...
Attackers needed no counterfeit website to slip malicious Terraform modules to developers. Unknown intruders gained access to...
At a glance Factor Details Malware Family SynkLoader Threat Actor Suspected initial access broker or ransomware affiliate...
At a Glance Malware family Offside Wallet Theft Factory (campaign of cloned wallet-stealing extensions) Threat actor Unattributed;...
At a glance Actor or group Storm-2945, assessed as an operational sub-cluster of Midnight Blizzard Activity type...
TL;DR: The pgAdmin Development Team patched a pgAdmin 4 RCE flaw tracked as CVE-2026-17566, rated CVSS 9.4....
TL;DR Veeam patched four flaws in Veeam Service Provider Console. Two are critical. One is an unauthenticated...
At a glance Malware family ACR Stealer (infostealer; linked to a rebrand of Amatera Stealer) Threat actor...
At a Glance Actor or group Unattributed threat actor; no group name published Activity type GitHub Actions...
At a glance Organization Hugging Face Data exposed A limited set of internal datasets and several service...
Malware family CrySome RAT, a .NET remote access trojan Threat actor Not named; no confirmed attribution Target...
Security Researchers Uncover Advanced Open Source Supply Chain Exploits A fresh threat report exposes an ongoing software...
Urgent Alert for DevOps Engineers Microsoft security analysts recently identified an active threat vector targeting modern software...
Arcane, the popular tool billed as “Modern Docker Management, Designed for Everyone”, has disclosed a severe security...
In a critical security alert for the PHP community, Nils Adermann, Co-Creator of Composer, has issued an...
Threat actors are increasingly abandoning loud, easily identifiable malware in favor of subtle, script-based deceptions. A new...
Microsoft’s Defender Security Research and Threat Intelligence teams have sounded the alarm on a massive, highly sophisticated...
A recent report from Kaspersky Labs reveals a disturbing surge in phishing campaigns leveraging Amazon Simple Email...
Security researchers at Varonis Threat Labs have dissected a new, all-in-one phishing platform dubbed Bluekit that is...