Browsing: Threat Actor

Quick Takeaways A Russian-speaking threat actor, UAT-11795, uses trojanized software and social engineering to target…

Fast Facts CylindricalCanine exploited DigiCert support access to steal and use code-signing certificates, enabling the…

Summary Points Threat actors used AI-generated PowerShell scripts for aggressive Active Directory reconnaissance, exfiltrating data…

Top Highlights Threat actors are exploiting Microsoft’s passkey enrollment process via sophisticated voice phishing (‘vishing’)…

Fast Facts Iranian-linked group Cavern (Cav3rn) employs a sophisticated, modular C2 framework built on .NET,…

Summary Points Cavern Manticore employs a modular, multi-compile format (.NET, Mixed-Mode C++, NativeAOT) to evade…

Fast Facts Vidar malware is primarily distributed via phishing emails disguised as resumes or job…

Summary Points The threat actor Armored Likho targets government and power sectors using sophisticated, obfuscated…

Fast Facts ToddyCat’s Umbrij malware exploits Chrome/Edge headless mode and remote debugging ports to steal…

Top Highlights An unknown threat actor exploited a zero-day vulnerability in Cisco Catalyst SD-WAN (CVE-2026-20245)…