Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2025-12-15 ⋅ Rapid7 ⋅ Milan Spinka
SantaStealer is Coming to Town: A New, Ambitious Infostealer Advertised on Underground Forums
SantaStealer
2025-12-15 ⋅ Squiblydoo ⋅ Squiblydoo
SolarMarker: Actions-On-Target
solarmarker
2025-12-15 ⋅ StrikeReady ⋅ StrikeReady Labs
Russian APT actor phishes the Baltics and the Balkans
2025-12-15 ⋅ Amazon ⋅ CJ Moses
Amazon Threat Intelligence identifies Russian cyber threat group targeting Western critical infrastructure
2025-12-15 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
French Interior Ministry confirms cyberattack on email servers
2025-12-12 ⋅ Cyfirma ⋅ cyfirma
Weekly Intelligence Report – 12 December 2025
BreachLaboratory
2025-12-12 ⋅ Google ⋅ Aragorn Tseng, Austin Larsen, CASEY CHARRIER, Genevieve Stark, Robert Weiner, Zander Work
Multiple Threat Actors Exploit React2Shell (CVE-2025-55182)
ANGRYREBEL MINOCAT SNOWLIGHT Earth Lamia
2025-12-12 ⋅ ⋅ Tagesschau ⋅ Markus Sambale, Philipp Eckstein
German government summons Russian ambassador
2025-12-11 ⋅ Palo Alto Networks Unit 42 ⋅ Unit 42
Hamas-Affiliated Ashen Lepus Targets Middle Eastern Diplomatic Entities With New AshTag Malware Suite
Ashen WIRTE
2025-12-11 ⋅ Trend Micro ⋅ Daniel Lunghi, Feike Hacquebord, Ian Kenefick
SHADOW-VOID-042 Targets Multiple Industries with Void Rabisu-like Tactics
ROMCOM RAT SHADOW-VOID-042
2025-12-11 ⋅ Malwarebytes ⋅ Pieter Arntz
Another Chrome zero-day under attack: update now
2025-12-10 ⋅ ⋅ CTFIOT ⋅ Xiaoyi
Golden Eye Dog (APT-Q-27) Abuses AWS S3 buckets to distribute the latest malicious payloads
2025-12-10 ⋅ SpyCloud ⋅ SpyCloud Labs Research Team
Analyzing the Impact of the Operation Endgame Takedown on Rhadamanthys & the MaaS Ecosystem
Rhadamanthys
2025-12-10 ⋅ The Record ⋅ Jonathan Greig
DOJ, CISA warn of Russia-linked attacks targeting meat processing plants, nuclear regulatory entities and other critical infrastructure
2025-12-10 ⋅ Check Point Research ⋅ Check Point Research, Jiří Vinopal
Cracking ValleyRAT: From Builder Secrets to Kernel Rootkits
ValleyRAT
2025-12-10 ⋅ Trend Micro ⋅ Ashish Verma, Deep Patel, Jack Walsh, Lucas Silva, Peter Girnus
CVE-2025-55182: React2Shell Analysis, Proof-of-Concept Chaos, and In-the-Wild Exploitation
2025-12-10 ⋅ LinkedIn (Idan Tarab) ⋅ Idan Tarab
Lifting the Shadow: APT-C-35’s Living Web Footprint
2025-12-10 ⋅ zimperium ⋅ Vishnu Pratapagiri
Total Takeover: DroidLock Hijacks Your Device
DroidLock
2025-12-10 ⋅ Netresec ⋅ Erik Hjelmvik
Latrodectus BackConnect
IcedID Keyhole Latrodectus
2025-12-09 ⋅ CISA ⋅ CISA
Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure