While the majority of the corporate world remains preoccupied with the latest vulnerabilities, a cadre of Chinese threat actors has been stealthily architecting a subterranean infrastructure for cyberespionage. A meticulous forensic analysis of nascent...
M365Pwned Red Team tooling for Microsoft 365 exploitation via Microsoft Graph API. Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens — no user interaction required....
The conflicts of the twenty-first century are increasingly inaugurated not by the roar of missiles, but by imperceptible incursions into digital networks. Cybernetic systems pave the way for aerial armadas, paralyze adversarial infrastructure, and...
Over the past year, South Asia has witnessed a marked proliferation of cyberespionage offensives targeting state apparatuses and critical infrastructure operators. The vanguard at Arctic Wolf has chronicled a sophisticated campaign, attributing it with...
Following the dismantling of the Lumma Stealer infrastructure in 2025, the landscape of data-stealing malicious software began to shift precipitously. Emerging and established instruments swiftly encroached upon the resulting vacuum, while a fierce struggle...
Team Cymru conducts a macroscopic analysis of global network traffic, harnessing the power of aggregated NetFlow data and the intelligence gleaned from open-port scanning. Such profound visibility illuminates the intricate web of connections between...
The developer behind the expansive space simulator Star Citizen has disclosed a security breach. Unidentified actors breached their backup infrastructure, successfully viewing a portion of user data. Cloud Imperium Games, the studio operating under...
The joint military offensive mounted by the United States and Israel against Iran has precipitously inflamed hostilities within the cyber domain. Mere hours following the initial kinetic strikes, a torrential wave of digital incursions...
Google specialists have unearthed a potent suite of iPhone vulnerabilities that has covertly changed hands among disparate factions of threat actors over several years. This sophisticated instrument, dubbed Coruna, was initially deployed in targeted...
The March Android security update remediates scores of vulnerabilities, amongst which lurks a peril of profound severity. A critical flaw within this cohort empowers a malicious actor to execute arbitrary code remotely upon the...
In early 2026, malicious actors initiated a mass dissemination of emails masquerading as official communications from Ukrainian state authorities. Recipients are deceptively urged to “update mobile applications” pertinent to ubiquitous civilian and military services....
Cyberspace has long served as a collateral theater of war within the Middle Eastern conflict. Amidst the latest escalation surrounding Iran, the vanguard at Check Point Research has illuminated the myriad Iranian syndicates currently...
