Browsing: Threat Actor

Fast Facts Malicious npm packages like "imgdecode" and related tools exploit Node.js environments to deploy…

Fast Facts ARMORY CASTLE exploited CVE-2026-102764, a zero-day vulnerability in BeyondTrust Remote Support, to upload…

Top Highlights Criminal IP identifies and analyzes malicious infrastructure, vulnerabilities, and attacker behaviors to prioritize…

Quick Takeaways Hacktivist groups have conducted significant DDoS attacks on targeted infrastructures, disrupting services and…

Fast Facts The UAC-0099 threat group has developed advanced .NET malware like ASHVEIN, utilizing techniques…

Fast Facts A lone threat actor is distributing malicious npm packages—primarily "function-flag"—that deploy information stealers…

Summary Points Attackers are exploiting Atlassian’s directory traversal vulnerability (CVE-2026-21589) by manipulating the "::" encoding…

Essential Insights Ransomware attacks surged to 1,073 in August, with Aurora exploiting VPNs and employing…

Fast Facts Attackers are exploiting CVE-2026-61500 in Rejetto HTTP File Server by reconstructing predictable session…

Fast Facts A new Chinese-nexus threat actor, UAT-11587, deploys the Rust-based backdoor Antino via highly…