Click here to download all references as Bib-File.•
| 2026-10-22
⋅
Varonis
⋅
StealC Is Back, and This Time It's a RAT Stadia |
| 2026-10-15
⋅
ExaTrack
⋅
APT28 PixyNetLoader update PixyNetLoader |
| 2026-10-13
⋅
Fox-IT
⋅
Releasing the Cobalt Strike Beacon Corpus Cobalt Strike |
| 2026-10-09
⋅
Rogue Authority
⋅
A signed PDF viewer that quietly takes orders: the QuartzLine “zenith” backdoor CLOUDHAZE |
| 2026-10-07
⋅
CrowdStrike
⋅
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance |
| 2026-10-06
⋅
SOCRadar
⋅
CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure |
| 2026-10-06
⋅
Huntress Labs
⋅
Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack Akira Akira |
| 2026-10-04
⋅
Hexastrike Cybersecurity
⋅
FLEXRAT – ChilloutVR Lures, Shared Secrets, and an OPSEC Hangover FLEXRAT |
| 2026-10-01
⋅
Symantec
⋅
Warlock Ransomware Attackers Hit Water and Telecom Operators WarLock Storm-2603 |
| 2026-09-29
⋅
Google
⋅
Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances |
| 2026-09-28
⋅
Microsoft
⋅
NeedyMantis: Unpacking a post-compromise malware family used in targeted operations NeedyMantis |
| 2026-09-28
⋅
KrebsOnSecurity
⋅
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation |
| 2026-09-25
⋅
Google
⋅
ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft reGeorg ShinyHunters |
| 2026-09-25
⋅
Microsoft
⋅
Storm-3168: Agentic-driven cloud attacks using compromised service principals JadePuffer |
| 2026-09-25
⋅
The Record
⋅
Crypto CEO accuses North Korea of stealing $387 million from Bitget platform |
| 2026-09-23
⋅
cocomelonc
⋅
Malware analysis: part 12. Section entropy from scratch in pure C: a tiny packed/encrypted detector |
| 2026-09-22
⋅
Cofense
⋅
From Payment Plan to Ransomware - Inside a Global Group Attack Global BlackLock |
| 2026-09-21
⋅
Zscaler
⋅
Vidar Virtual Machine-Based String Obfuscation Vidar |
| 2026-09-20
⋅
Cloudsek
⋅
GHAPPIER - One loader, sixty-five repositories, twenty-two accounts: an unreported loader family beside DPRK's PolinRider campaign |
| 2026-09-18
⋅
SentinelOne
⋅
Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties Gaslight LightlessCan |