Click here to download all references as Bib-File.•
| 2026-03-24
⋅
⋅
Nguoi Lao Dong
⋅
A 12th grader in Thanh Hoa used malicious code to steal computer data users worldwide PXA Stealer |
| 2026-03-23
⋅
Dark Web Informer
⋅
Alleged Breach of Chile's Servicio Civil Platform Exposes 110K Public Servant Records With Full Names and User IDs NyxarGroup |
| 2026-03-23
⋅
Dark Web Informer
⋅
Alleged Breach of Chile's Ley del Lobby Platform Exposes 250GB of Government Lobbying Records Spanning 2018 to 2026 NyxarGroup |
| 2026-03-23
⋅
Sophos
⋅
NICKEL ALLEY strategy: Fake it ‘til you make it PylangGhost GolangGhost Nickel Alley |
| 2026-03-22
⋅
Christoffer Strömblad
⋅
Threat Assessment: TeamPCP - CanisterWorm & Kubernetes Wiper Campaign TeamPCP |
| 2026-03-20
⋅
AhnLab
⋅
Attack Targeting MS‑SQL Servers to Deploy the ICE Cloud Scanner (Larva-26002) Larva-26002 |
| 2026-03-20
⋅
IC3
⋅
I-032026-PSA: Russian Intelligence Services Target Commercial Messaging Application Accounts |
| 2026-03-20
⋅
Nextron Systems
⋅
RegPhantom Backdoor Threat Analysis RegPhantom |
| 2026-03-19
⋅
Sophos
⋅
Android devices ship with firmware-level malware Keenadu |
| 2026-03-18
⋅
Google
⋅
The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors GHOSTBLADE UNC6748 |
| 2026-03-18
⋅
Google
⋅
The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors GHOSTBLADE |
| 2026-03-17
⋅
Seqrite
⋅
Operation GhostMail: Russian APT exploits Zimbra Webmail to Target Ukraine State Agency ZimReaper |
| 2026-03-17
⋅
NTT Security
⋅
StoatWaffle, malware used by WaterPlum StoatWaffle |
| 2026-03-16
⋅
HackNotice
⋅
Hualun New Materials Suffers Massive Data Breach by SnowSoul SnowSoul |
| 2026-03-16
⋅
Ransom-ISAC
⋅
Contagious Interview: VS Code to RAT StoatWaffle |
| 2026-03-13
⋅
Analyst’s Brief: Moonrise RAT MoonRise |
| 2026-03-13
⋅
kmsec
⋅
First instance of PylangGhost RAT observed on npm PylangGhost |
| 2026-03-12
⋅
IBM X-Force
⋅
A Slopoly start to AI-enhanced ransomware attacks Slopoly Hive0163 |
| 2026-03-12
⋅
Microsoft
⋅
Storm-2561 uses SEO poisoning to distribute fake VPN clients for credential theft Storm-2561 |
| 2026-03-12
⋅
Palo Alto Networks Unit 42
⋅
Suspected China-Based Espionage Operation Against Military Targets in Southeast Asia AppleChris CL-STA-1087 |