Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-07-27 ⋅ Medium (@billmarczak) ⋅ Bill Marczak
An Angry Spark, or a Triangle in Disguise?
TriangleDB
2026-07-27 ⋅ Netresec ⋅ Erik Hjelmvik
PureLogs, PureRAT and misleading zgRAT
PureLogs Stealer PureRAT zgRAT
2026-07-24 ⋅ AhnLab ⋅ ASEC
Case Study: Targeted Attack Case on an MS-SQL Server Involving the Installation of GotoHTTP and SoftEther VPN
XMRIG Coinminer GoToHTTP HackBrowserData MimiKatz Monero Miner VShell xmrig Larva-26009
2026-07-24 ⋅ Google ⋅ Google Threat Intelligence Group
Updated Cyber Threat Actor Naming System
APT15 APT20 APT27 APT28 APT29 APT30 APT31 APT33 APT35 APT37 APT39 APT40 APT41 APT42 APT45 APT5 BlackTech Callisto Conference Crew FIN11 FIN6 FIN7 FIN8 MuddyWater MUSTANG PANDA Naikon OilRig Sandworm TEMP.Hermit Tick Tonto Team Turla UAC-0020 UNC1069 UNC1088 UNC2814
2026-07-24 ⋅ JUMPSEC LABS ⋅ JUMPSEC
Inside a DPRK BlueNoroff ClickFix Kit
2026-07-24 ⋅ Daily NK ⋅ Yoon HyeSeong
North Korea busts elite hacking ring inside its own banks
2026-07-24 ⋅ Nokia ⋅ Nokia Deepfield ERT
Jackskid's residential proxy, brought to you by UPnP
Jackskid
2026-07-23 ⋅ Confiant ⋅ Michael Steele
SourTrade: Browser-Assembled Malware Delivered Through Malvertising
2026-07-23 ⋅ NSA ⋅ NSA
NSA and Partners Alert Zimbra Collaboration Suite Users of a Russian State-Supported Phishing Campaign
ZimReaper
2026-07-23 ⋅ Proofpoint ⋅ Greg Lesnewich, Konstantin Klinger, Mark Kelly, Nick Attfield, Saher Naumaan
Operation RoundPress Rolls on with More Half-Click Webmail Zero-Days from TA458
SpyPress
2026-07-23 ⋅ Proofpoint ⋅ Greg Lesnewich, Konstantin Klinger, Mark Kelly, Nick Attfield, Saher Naumaan
TA488 Targets Zimbra Mailservers with Half-Click Exploits
ZimReaper
2026-07-23 ⋅ Group-IB ⋅ Group-IB
JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake
AdaptixC2 reGeorg
2026-07-22 ⋅ Prophet Security ⋅ Joshua Hubner
EtherHiding Malware on macOS: How Attackers Hide C2 on the Blockchain
2026-07-22 ⋅ Huntress Labs ⋅ Michael Tigges
Inside FakeAgent: How a Claude Desktop Malvertising Campaign Hit 29 Organizations with SectopRAT
SectopRAT
2026-07-22 ⋅ bluecyber ⋅ Nguyen Dang Hung
Beyond the Archive: CVE-2025-8088 Stealer Targeting Ukraine
GIFTEDCROOK
2026-07-21 ⋅ @oj-sec ⋅ @oj-sec
TChCh-Changes: A Look at macOS TCC Manipulation in the Wild
2026-07-21 ⋅ kienmanowar Blog ⋅ m4n0w4r, Tran Trung Kien
[QuickNote] Mustang Panda ToneShell (APT S1239) Beacon Shellcode – RE Analysis
TONESHELL
2026-07-21 ⋅ DTEX ⋅ Michael Barnhart
From Payroll to Pyongyang: The DPRK IT Worker Money Trail
2026-07-21 ⋅ ANY.RUN ⋅ ANY.RUN
SnappyClient Analysis
SnappyClient
2026-07-20 ⋅ sysdig ⋅ Michael Clark
JADEPUFFER evolves: The agentic threat actor deploys ransomware built to destroy AI models
JadePuffer