Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-09-04 ⋅ Rapid7 ⋅ Rapid7 Labs
DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors
2026-09-03 ⋅ Abstract Security ⋅ Abstract Security Threat Research Organization (ASTRO)
Chaotic Eclipse Releases CrowdStrike Falcon Zero-Day FalconFlank: Detection Guidance
2026-09-03 ⋅ Jamf Blog ⋅ Jamf Threat Labs
Contagious Interview steps outside the developer workflow
OtterCookie
2026-09-02 ⋅ Malware INFO ⋅ Malware INFO Research Team
Fake GlobalProtect MSI Targets Myanmar Using Cloudflare and Google Sheets as C2
Unidentified 126 (GoogleSheets C2)
2026-09-01 ⋅ Anthropic ⋅ Anthropic
Countering misuse of AI: September 2026
GTG-04001 GTG-10007 GTG-14010 GTG-14020 GTG-14021 GTG-14022 GTG-15001 GTG-16001 GTG-16002 GTG-16003 GTG-16005 GTG-16006 GTG-16008 GTG-16012 GTG-17001 GTG-17002 GTG-17003 GTG-24015 GTG-27005 GTG-27006 GTG-30004 GTG-30005 GTG-30006 GTG-34001 GTG-34007 GTG-50014 GTG-50020 GTG-50027 GTG-50029 GTG-54002 GTG-54004 GTG-54006 GTG-54009 GTG-84002 GTG-84005 GTG-84006 GTG-87001
2026-09-01 ⋅ Elastic ⋅ Daniel Stepanic, Jia Yu Chan, Salim Bitam
REVSTEALER ramps up: analysis of up-and-coming infostealer
RevStealer
2026-08-31 ⋅ Group-IB ⋅ Julio Guapo Menezes, Miguel Salazar
Anatomy of BraZetsu: How Cybercriminals Fuel the Underground Ecosystem
bancos Ousaban Warsaw Exilware
2026-08-30 ⋅ Medium 0xzyadelzyat ⋅ Zyad Elzyat
Reverse Engineering the Auto-Color Linux Backdoor
Auto-Color
2026-08-28 ⋅ PolySwarm Tech Team ⋅ The Hivemind
UAT-10147 Uses AI-Assisted Workflows to Deploy SPECTRE Backdoor
Meterpreter IISpy Meterpreter Quasar RAT UAT-10147
2026-08-28 ⋅ Github (Yavuzhanzgen) ⋅ Yavuzhan Özgen
Xorium Stealer Malware Technical Analysis Report
XoriumStealer
2026-08-28 ⋅ ⋅ F6 ⋅ F6
Ragnarök: F6 investigated the attacks of the VantaCore ransomware group
Babuk LockBit
2026-08-27 ⋅ Recorded Future ⋅ Insikt Group
BlueDelta Targets Defense and Diplomacy with HOOKEDGE
Headlace
2026-08-27 ⋅ Github (Yavuzhanzgen) ⋅ Yavuzhan Özgen
ScreenConnect Client Technical Analysis
2026-08-27 ⋅ Proofpoint ⋅ Kyle Cucci, Proofpoint Threat Research Team, Rob Kinner, Tony Robinson
Carry-On Compromise: TA4922 Packs PackClient
donut_injector
2026-08-26 ⋅ FBI ⋅ FBI
China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems
2026-08-26 ⋅ Lumen ⋅ Black Lotus Labs
The infrastructure quartermaster: inside a China-nexus state enablement model
2026-08-26 ⋅ Github (blacklotuslabs) ⋅ Black Lotus Labs
The infrastructure quartermaster: inside a China-nexus state enablement model (IOCs)
2026-08-26 ⋅ Abstract Security ⋅ Abstract Security Threat Research Organization (ASTRO)
RMM Hunting: Leveraging LOLRMM for Detection
2026-08-26 ⋅ Microsoft ⋅ Parasharan Raghavan, Sagar Patil, Suriyaraj Natarajan
TerminalFix campaign deploys a reverse tunnel through multistage intrusion
Lorem Ipsum
2026-08-25 ⋅ cocomelonc ⋅ cocomelonc
Malware development trick 64: PE file bloating and overlay data. Simple C example