Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-06-25 ⋅ Microsoft Security ⋅ Microsoft Defender Experts, Microsoft Defender Security Research Team, Parth Jomadkar
Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access
TonRAT
2026-06-24 ⋅ BitSight ⋅ Bitsight TRACE
Amadey and StealC: Malware-as-a-Service Unavailable
Amadey Stealc
2026-06-24 ⋅ JFrog Security ⋅ Guy Korolevski, Yair Benamou
Hijacked npm Packages Use Novel VSCode Autorun and Blockchain Dead Drops to Deploy a Credential/Crypto Stealer
JADESNOW
2026-06-23 ⋅ Sentinel LABS ⋅ Phil Stokes
macOS.Gaslight | Rust Backdoor Turns Prompt Injection on the Analyst, Not the Sandbox
Gaslight
2026-06-17 ⋅ Medium ⋅ Jason Reaves, Joshua Platt
MetaStealer traffic, new DGAs and analyzing the “tracker” backdoor DGA with AI
Potemkin
2026-06-17 ⋅ Rapid7 ⋅ Anna Širokova
Malware à la Mode: Tracking Dropping Elephant Tradecraft Through a China-Themed Loader Chain
Unidentified 125 (RAT, Dropping Elephant)
2026-06-17 ⋅ Microsoft ⋅ Microsoft Defender Research Team
From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet
2026-06-17 ⋅ TechRepublic ⋅ Kezia Jungco
Ozempic Maker Novo Nordisk Confirms Security Incident After $25M Hacker Demand
FulcrumSec
2026-06-16 ⋅ Huntress Labs ⋅ Anna Pham, Zach Rogers
Potemkin Loader & RMMProject - The Anatomy of a ClickFix Attack
EtherRAT Chisel Potemkin
2026-06-16 ⋅ Checkmarx ⋅ Pavan Gudimalla
ChainVeil: A Malicious npm Supply Chain Attack by SuccessKey
JADESNOW
2026-06-16 ⋅ Resecurity ⋅ Resecurity
Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise
FulcrumSec
2026-06-15 ⋅ Google ⋅ John McGuiness, Patrick Whitsell
"Public and Private Medical Community Targeted by China-Nexus Threat Actor Pursuing Artificial Intelligence, Cyber, Medical, and National Defense Research
UNC6508
2026-06-12 ⋅ SafeDep ⋅ SafeDep
astro.config.mjs Supply Chain Attack via Blockchain C2
JADESNOW
2026-06-11 ⋅ Spamhaus ⋅ Jonas Arnold
Bulletproof Hosting: Cutting off the facilitators
2026-06-10 ⋅ Acronis ⋅ Subhajeet Singha
Behind Khmer Shadow: Targeted espionage against Cambodian government entities
Havoc
2026-06-10 ⋅ BushidoToken Blog ⋅ BushidoToken
UK Cybercrime Journal: Arup Group Breached by FulcrumSec
FulcrumSec
2026-06-10 ⋅ TEAMT5 ⋅ TeamT5
CVE-2026-34197：Apache ActiveMQ
SoxAgent SLIME88
2026-06-09 ⋅ Department of Justice ⋅ United States District Court District of Massachusetts
Affidavit in Support of Application for Criminal Complaint (Denis Obrezko / Void Blizzard)
2026-06-09 ⋅ Zscaler ⋅ ThreatLabZ research team
Technical Analysis of MLTBackdoor
MLTBackdoor
2026-06-09 ⋅ CrowdStrike ⋅ Counter Adversary Operations
CrowdStrike 2026 Technology Threat Landscape Report: China’s Ambitions Fuel Attacks