Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-08-14 ⋅ QUIRSO GmbH ⋅ Çağatay Yürekli, Denis Szadkowski, Maike Orlikowski
Global Exploitation of CVE-2026–59310 by Suspected Chinese-Nexus APT & Related CVE-2026–59309 Activity
2026-08-14 ⋅ ⋅ Ministere de l'Economie et des Finances ⋅ Elvire MACE
Illegitimate access to the information system of the Directorate General of Public Finances
ZeroBytes
2026-08-11 ⋅ Check Point Research ⋅ Check Point Research
Shattering the Dream - When a Job Offer Becomes a Zero-Day Attack
ForestTiger FudModule MISTPEN
2026-08-10 ⋅ AhnLab ⋅ ASEC
Attack Cases for Domestic Web Servers Running SoftEther VPN in Korea
Larva-26010
2026-08-10 ⋅ LevelBlue ⋅ Rodel Mendrez
CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain
Babadeda
2026-08-10 ⋅ sonatype ⋅ Sonatype Research Team
Six npm Packages Use Ethereum Transactions to Retrieve Malicious Payloads
JADESNOW
2026-08-08 ⋅ ⋅ Cert-UA ⋅ Cert-UA
Social engineering by UAC-0145: compromise during the hiring process
2026-08-07 ⋅ ⋅ CERT.PL ⋅ CERT.PL
Active phishing campaign targeting Microsoft Exchange servers
2026-08-03 ⋅ AhnLab ⋅ ASEC
Analysis of the Connection Between Xctdoor and Past CRAT Attack Cases (Larva-26005)
CRAT DRATzarus Larva-26005
2026-08-02 ⋅ AhnLab ⋅ ASEC
Analysis of a Phishing Email Attack Case by the Larva-24009 Threat Actor
Quasar RAT Larva-24009
2026-07-31 ⋅ StealthMole ⋅ StealthMole
The Many Faces of ModernStealer: Tracing an Underground Military Data Network
ModernStealer
2026-07-30 ⋅ AhnLab ⋅ ASEC
[Joint Cybersecurity Advisory] Operation Double Barrel (The Relationship Between a State-Sponsored Threat Actor and the Gunra Ransomware Group)
Bankshot Gunra PostNapTea
2026-07-30 ⋅ AhnLab ⋅ AhnLab
[Joint Cybersecurity Advisory] Operation Double Barrel (The Relationship Between a State-Sponsored Threat Actor and the Gunra Ransomware Group)
Gunra
2026-07-29 ⋅ Amazon ⋅ CJ Moses
Amazon identifies North Korean hacker group behind open-source supply chain attacks
2026-07-29 ⋅ SafeDep ⋅ SafeDep Team
Joyfill npm Packages Compromised with Blockchain C2 Loader
JADESNOW
2026-07-28 ⋅ StepSecurity ⋅ Varun Sharma
Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan
JADESNOW
2026-07-28 ⋅ Socket ⋅ Socket Research Team
Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan
JADESNOW
2026-07-28 ⋅ Hunt.io ⋅ Hunt.io
Flying Eagle Android RAT: Leaked Source Code, 170 Active Servers, and a New Platform Called Night Dragon
2026-07-24 ⋅ AhnLab ⋅ ASEC
Case Study: Targeted Attack Case on an MS-SQL Server Involving the Installation of GotoHTTP and SoftEther VPN
XMRIG Coinminer GoToHTTP HackBrowserData MimiKatz Monero Miner VShell xmrig Larva-26009
2026-07-24 ⋅ Google ⋅ Google Threat Intelligence Group
Updated Cyber Threat Actor Naming System
APT15 APT20 APT27 APT28 APT29 APT30 APT31 APT33 APT35 APT37 APT39 APT40 APT41 APT42 APT45 APT5 BlackTech Callisto Conference Crew FIN11 FIN6 FIN7 FIN8 MuddyWater MUSTANG PANDA Naikon OilRig Sandworm TEMP.Hermit Tick Tonto Team Turla UAC-0020 UNC1069 UNC1088 UNC2814