Adversaries affiliated with the KongTuke threat collective have inaugurated a sophisticated malicious lineage dubbed CrashFix, specifically engineered to compromise Google Chrome users. According to findings from Huntress, the incursion commences with the procurement of...
A comprehensive architectural analysis of the malicious infrastructure within China has unearthed over 18,000 command-and-control (C2) servers distributed across 48 distinct hosting providers. This extensive dataset illuminates the symbiotic coexistence of phishing campaigns, deleterious...
A Jordanian national residing in Georgia has formally confessed to his involvement in the illicit trade of unauthorized access to corporate networks. According to American law enforcement, the individual functioned as a clandestine intermediary,...
For several hours, the official portal of the Georgian government inadvertently hosted sensitive information that authorities would have preferred to remain sequestered from public scrutiny. The disclosure pertained to the procurement of Russian gas...
Occasionally, the most unforeseen vulnerabilities reside not within nascent code, but within foundations that have been deemed unimpeachable for decades. This week, developers disclosed CVE-2026-0915 within the GNU C Library (glibc), a cornerstone of...
Mandiant has disseminated an exhaustive repository of rainbow tables engineered to decrypt the antiquated Net-NTLMv1 protocol. This initiative is designed to accelerate the obsolescence of a technology deemed insecure since the late 1990s. Notwithstanding...
A sophisticated cyber espionage offensive, meticulously orchestrated against United States governmental entities, has been unearthed by the Acronis Threat Research Unit. The adversarial operation leveraged a ZIP archive containing a deceptive executable and a...
Since the dawn of 2025, the threat intelligence practitioners at Cisco Talos have documented the persistent operations of a collective designated as UAT-8837. This entity is attributed to Chinese interests based on significant overlaps...
Security practitioners have identified an evolved iteration of the Kazuar loader, a tool wielded by the prolific Turla threat collective. This modular implant facilitates the circumvention of Windows security mechanisms without altering system files,...
The architects of malicious software have themselves fallen prey to a vulnerability overlooked within their own infrastructure. This irony centers on StealC, a pervasive information stealer operating under the “Malware-as-a-Service” (MaaS) paradigm, renowned for...