Click here to download all references as Bib-File.•
| 2026-06-24
⋅
JFrog Security
⋅
Hijacked npm Packages Use Novel VSCode Autorun and Blockchain Dead Drops to Deploy a Credential/Crypto Stealer JADESNOW |
| 2026-06-23
⋅
Sentinel LABS
⋅
macOS.Gaslight | Rust Backdoor Turns Prompt Injection on the Analyst, Not the Sandbox Gaslight |
| 2026-06-17
⋅
Medium
⋅
MetaStealer traffic, new DGAs and analyzing the “tracker” backdoor DGA with AI Potemkin |
| 2026-06-17
⋅
Rapid7
⋅
Malware à la Mode: Tracking Dropping Elephant Tradecraft Through a China-Themed Loader Chain Unidentified 125 (RAT, Dropping Elephant) |
| 2026-06-17
⋅
Microsoft
⋅
From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet |
| 2026-06-17
⋅
TechRepublic
⋅
Ozempic Maker Novo Nordisk Confirms Security Incident After $25M Hacker Demand FulcrumSec |
| 2026-06-16
⋅
Huntress Labs
⋅
Potemkin Loader & RMMProject - The Anatomy of a ClickFix Attack EtherRAT Chisel Potemkin |
| 2026-06-16
⋅
Checkmarx
⋅
ChainVeil: A Malicious npm Supply Chain Attack by SuccessKey JADESNOW |
| 2026-06-16
⋅
Resecurity
⋅
Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise FulcrumSec |
| 2026-06-15
⋅
Google
⋅
"Public and Private Medical Community Targeted by China-Nexus Threat Actor Pursuing Artificial Intelligence, Cyber, Medical, and National Defense Research UNC6508 |
| 2026-06-12
⋅
SafeDep
⋅
astro.config.mjs Supply Chain Attack via Blockchain C2 JADESNOW |
| 2026-06-11
⋅
Spamhaus
⋅
Bulletproof Hosting: Cutting off the facilitators |
| 2026-06-10
⋅
Acronis
⋅
Behind Khmer Shadow: Targeted espionage against Cambodian government entities Havoc |
| 2026-06-10
⋅
BushidoToken Blog
⋅
UK Cybercrime Journal: Arup Group Breached by FulcrumSec FulcrumSec |
| 2026-06-10
⋅
TEAMT5
⋅
CVE-2026-34197：Apache ActiveMQ SoxAgent SLIME88 |
| 2026-06-09
⋅
Department of Justice
⋅
Affidavit in Support of Application for Criminal Complaint (Denis Obrezko / Void Blizzard) |
| 2026-06-09
⋅
Zscaler
⋅
Technical Analysis of MLTBackdoor MLTBackdoor |
| 2026-06-09
⋅
CrowdStrike
⋅
CrowdStrike 2026 Technology Threat Landscape Report: China’s Ambitions Fuel Attacks |
| 2026-06-09
⋅
ExaTrack
⋅
LotusLite: Believe me I am MustangPanda LOTUSLITE |
| 2026-06-08
⋅
SYGNIA
⋅
Velvet Ant’s Operation Highland: How a China-Nexus Actor Infiltrated an Internal Network Undetected |